{"report_id":"629cb81c-d70f-43e1-9fa9-b4a4a75690dc","version":6,"status":"done","tags":[],"date":"2026-04-27T15:50:14Z","url":{"schema":"https","addr":"etherfund.online","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"etherfund.online/#/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"title":"Ethereum Fund | etherfund.cc","dom":{"size":41980,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13835)","md5":"37871876875b0c75a847838596fb9629","sha1":"e2dbd2dfcf9c288d24c3f92763b0da135a7b228d","sha256":"1946e76b219cd536be85d90d825e296159e7dd0b9ec108edd4378e9ed63506c3","sha512":"e43164c90f61fee6c9850fc5640232e1ca938572747e775af6724c205a6fe064774329e4a7f7448ebf3e7dd388f6c551636ba7ec01a0486f1f36d9479bfebeb7","ssdeep":"384:iSQ7ChfyMFQ9737zfxcq+w8i8J7AgQChKyXWXqMuXfBX4oS3:M802KymXuPBooS3","tlshash":"1613563a3541009932575fd15ed1be9cb1a6e30f8409d8b8fbaf13a52fe3ee454a0c69","dom_hash":"domhash655b1c8907ad240df5111b3883ce34cd","first_seen":"2026-04-27T15:50:27.773566Z","last_seen":"2026-04-27T15:50:27.773566Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"etherfund.online","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T15:50:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"etherfund.online","ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-04-27T15:50:20.039117Z","last_seen":"2026-04-27T15:50:20.039117Z","alert_count":229,"request_count":229,"received_data":6428811,"sent_data":100233,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.etherfund.cc","ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-04-27T15:50:20.040441Z","last_seen":"2026-04-27T15:50:20.040441Z","alert_count":0,"request_count":32,"received_data":33643,"sent_data":17558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"9095.etherfund.cc","ip":{"addr":"172.67.180.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-04-27T15:50:20.0418Z","last_seen":"2026-04-27T15:50:20.0418Z","alert_count":0,"request_count":4,"received_data":3886,"sent_data":2544,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338519.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"08102519452c0838fe37da127046f7c2","sha1":"8a04f8126202473a7a5c15080739691ee99cb527","sha256":"4ac701a4bcf843187630ee228fe905d160e3d580c3e9b6016e25ef4d58bf622e","sha512":"89804515c6b8bcd066acfcea78a31badcaff3b1f715ca5a1065104050e3ea542fad03e0badbbe1d1a20fe5cc221745d1a85bd84ece65680ad6559fb74a798c5c","ssdeep":"","tlshash":"e621df222d221abc8a73218a2499580199d82ffdc08968e6721b1723175bbf197e5b17","size":1390,"data":"","first_seen":"2026-04-27T15:50:28.030417Z","last_seen":"2026-04-27T15:50:28.030417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338612.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d8d8828e4282ad1e5609582f48918cc","sha1":"01ff7bb811c0b355100c3d7cfbcab05c5ae404a6","sha256":"9603375ee31731aa145f9aabfaf4474ec210b1197122e2a5860de8ab2f845e87","sha512":"90ad644ad4f32d7bdccc8abbf61c12c73dcca337fb37a1c9be563a08024db3cf75d8e1a5c281c70d1d46f4b9ac7bbe44bd2cc685ca88b40925365c824e49ba29","ssdeep":"192:rJcRZHbHyRa9M5cC/C72k/kxDjvHSrDXt0KObSQYRnAiSomfmNm+9s3vzf2x:riH/SNxnHEXEbYRAijSmLufs","tlshash":"a7421b9983a65bf4ea174330a8b844427fa92df9d60d4ae353f48d51e391cf87b0d670","size":12235,"data":"","first_seen":"2026-04-27T15:50:28.044242Z","last_seen":"2026-04-27T15:50:28.044242Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338543.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"777b25bf1a5af2b5d9805363c5b557dd","sha1":"3346e62c39e26d3a3117116f5153249e215e0f47","sha256":"1ffe272809ef0b512bdab064374cdcddb366afa6be1d5f6712fc066f91270ddc","sha512":"994bc8c88d11094fef146d59597f918290e7d3c069add55171f4e7f0b055424e4fdfc3e99092824de74b4b443aea4b8caad4038ea4f5ab7e917f83466d299be5","ssdeep":"","tlshash":"c72114003e46c9fe97671141786d8820d1897aa9a24cb8d6f7fe1c116677835738b736","size":1215,"data":"","first_seen":"2026-04-27T15:50:27.900709Z","last_seen":"2026-04-27T15:50:27.900709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338157.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c620643c1e2b97806a2aac8b1b1dbd9","sha1":"cb7632f295bf7ba488f0d8c04f9177476251b300","sha256":"486fbc35f5e6a4964628a5b1f2bfbe18bcb2a562bd76ca3a903dae1a5a19743a","sha512":"36b7eb4b934cb38db969e02c9dd58dd2e86c2f217f07c3f421010d1b33345ecc4e2d4496969e8826f60c20b8e69bc45323e07013e94c9551ff0fa61dae7bf9b9","ssdeep":"","tlshash":"7b515416086959be9f011bf01a2222bdc73cad6d715284e89d4da70d1b376acf33f91d","size":2549,"data":"","first_seen":"2026-04-27T15:50:28.430703Z","last_seen":"2026-04-27T15:50:28.430703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338442.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7ae156688953ce250b78e00557ad937","sha1":"7eaaa445c3cecdd39a140b438d8c0435e3d7d243","sha256":"8d3cb77d11800afd70e62dbea0da3b54a402f0480eee9748cf420cc6088d54b5","sha512":"a16cdabe17491fb76d3d11980d6084fe97b0b3167fe1a4aa158ce412e733a93d8f16f7784f05d4583a73f224344f2c94c8ce25e0b78cf538a2298a924dbf2a20","ssdeep":"","tlshash":"4721828d160ebd7e01b2960aa1ce3a1aa9940ef4c2dc4803058cd79553ff2a7bd471fa","size":1124,"data":"","first_seen":"2025-04-19T13:46:27.724205Z","last_seen":"2026-04-27T15:50:28.025644Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338513.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdabb1c17cfd1c8bdc11b55a9a8a2b84","sha1":"172079b870ba41e1e995d0f7e81a956fab4e12b0","sha256":"45f0d89d5f9531d3faa44a4579f84d21dc11c6cc481d525efeee46d46d05bd4b","sha512":"34a82de221e667490287bfcdce82620d2bc91aa153301f69bd3c8e9b69409a9aa0595fa2af0fb4153e8925b0d094b976992576c82633eeae687ef21958d44edb","ssdeep":"","tlshash":"9241313aee909bfd965a01c02f4d48a40e206f66c28d9c4ef7d31a06172ac34878be95","size":2076,"data":"","first_seen":"2026-04-27T15:50:27.81011Z","last_seen":"2026-04-27T15:50:27.81011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338531.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e80ead8c31883453afe5e5f5f165108","sha1":"74658c89843ef2730a17253c69d1760c27482579","sha256":"0470b3710ca9c27efa2e5de43f02377ad15681b5b93844ff99d53b2f2ad20a6e","sha512":"d810f9a4ed66f09f1e6c232fef51c5fc934a5ad5fb0b5027790962ab1a4f795f882edd21c69bfcee4066e8459277e76ca473c1f5b8a32dd4d27cbd3ef92cf168","ssdeep":"","tlshash":"ab312f456e508c7eebb32998264118441f6c27ba319da8c9e2d7ec190645e7cd29d332","size":1771,"data":"","first_seen":"2026-04-27T15:50:28.126702Z","last_seen":"2026-04-27T15:50:28.126702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338526.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a4e3f118b012a07c10b882e7678f9c","sha1":"6cf426953b69583999652883fef025419c481e6e","sha256":"ab6665bc67fd767a646682621c9a26ce281f0598286bd5f28b46fb996e81e33e","sha512":"1c8d0fdf951f244902808e191d974e813186ab9634420b203a58b82baf98a50ecabe908009fc78f2259be45a2afe121d2d43e50d74f96e0ad3d4178f9e4c578f","ssdeep":"","tlshash":"e421df039783a23e837740103a4c142025547fa7b05ce8ab61b656d9a7a1e79d75f723","size":1231,"data":"","first_seen":"2026-04-27T15:50:27.868082Z","last_seen":"2026-04-27T15:50:27.868082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338546.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72b6e11d70d4627c2ebe6770466d9d64","sha1":"860f922c71d75321757eb2c00ed8a65e0c9832be","sha256":"50b2db454d7edf785bacc885c6ecac7cea074e20a60c0871c864542b6c627709","sha512":"1cdb5c7665eaac5ef58ea64e429dead7b8489acc47235a5c8f9be8f2a34284d1a6558f830d2e24e8cec345f02003114775518def768306011c440401ba7c9c93","ssdeep":"","tlshash":"2c812240aa16db3ed7b308645a891ca470193fe7a14425e1e2aa5c213bf1cfe979cf35","size":4062,"data":"","first_seen":"2026-04-27T15:50:27.976705Z","last_seen":"2026-04-27T15:50:27.976705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338641.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64af81c9ac39e7268aa50bfe3f704d63","sha1":"e33099318b5e09aae140b7d80a6f36d4d9886883","sha256":"41eefec610a18e35b1bdff052bc14eb0a557114a25fd8bc45383fa854a210fc0","sha512":"492cb799a0a7cb925fb8364c2b61080916cad85d63ffee12c81ce51ef9bf167b86fbde3619372628f6255710eb55187b87e76f3632e6028e41d529da24dc4007","ssdeep":"384:ClkIlmnDEBaue2wdMhuo3oXpQg3r2mmYnUw:Ca0cIBaue2wd+uo3oXpQg3r2mmWX","tlshash":"3a921000b6138f7debf72276006ca89962dc2f98c00691e7b1fe59045767df49b09ba7","size":19484,"data":"","first_seen":"2026-04-27T15:50:28.055051Z","last_seen":"2026-04-27T15:50:28.055051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/js/iconpark.js?v=0.0.4","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6639e466b0942410e73539c48871854","sha1":"1ba6e733eb595e90241726766d4ca9fa4087ff06","sha256":"e5076a0be4906182d2d45347ea6ef9df033f6a1a12701cf22f51d517a8fd5194","sha512":"e0cfcdaa888db0b08eff9ee05522e7f0dfa15af3cfa7c0fefe1ee9070a17c0f1ddb7d7eb56b56d366f1def1387676ba2cb7566595a380bf7e6b7d0368ae126de","ssdeep":"3072:Ih756XnI9iAGDrDBNvYIAPSNxgtVoV2YElgkkQ:IV67DOblp","tlshash":"ff04f9e73364d29c65c3479a9ff5ac55231e70b470d682f05aafc7a821878e4f68bc60","size":181711,"data":"","first_seen":"2026-04-27T15:50:27.994907Z","last_seen":"2026-04-27T15:50:27.994907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb4338684195ce42ab36a5eefaa4762e","sha1":"17631e3950ba0c6c3cc6961038126ed19dbf26a9","sha256":"386570a91c19fffde20fd52ed6e2c03329917550fcd6d9aa7f1bb16fb9a1210a","sha512":"b53f164223eb1e6fc218bb2edba205dd549a6cdc48037d08fb620880c0319757cd3a99ab455748ac00c2762bfa247df8380a27926ccb3619c8a098cf684bb1ae","ssdeep":"","tlshash":"d31159ec81e720a9024374690d4f2004a6bfa4671148ca49bd0ce6909fc166c97a7ff8","size":999,"data":"","first_seen":"2026-04-27T15:50:28.434853Z","last_seen":"2026-04-27T15:50:28.434853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338609.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5eb0b5623ed7a066aea4a3d604619fdf","sha1":"d0710866d210aa7201899b944fb15178f8d71d78","sha256":"5a1fcfbb763f81ebd6b695ed35b12bab6fb6144dd7b6e30302d2cf8815c76d6d","sha512":"790f91797908dd5f65a929bba0fbc0109a06c0d9f717fd55c317dfa3c795f6e56afc04111a4cf73fbfa08299f3bbff46d7260ed3b7e3ad43edb407192f67fc41","ssdeep":"","tlshash":"d65173e3b38f8129cbb500d899559b11160cea7024484df8e07ecf1226aed4fa246f98","size":2527,"data":"","first_seen":"2026-04-27T15:50:28.393672Z","last_seen":"2026-04-27T15:50:28.393672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33821.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6b2280ab020a9cfefa524bb176797471","sha1":"4c8d4590bde4e06731222a404d99ffecd13b5367","sha256":"418b859fb6c40173ebfa24bced69d4827282183a013d49636fb350f22d3e7a07","sha512":"e58a66831881b81223e6c8e4ef91db529e1d2f511166ceeabf3bf7029a1de834512e4c53cd3b6346f29dc5d51513c80a04374656d4abee543a75e2facdbdaf33","ssdeep":"","tlshash":"4d01107dd24871778626a0edd02f126593343b38ea2bc981b57f071744872c081659bd","size":737,"data":"","first_seen":"2026-04-27T15:50:28.228772Z","last_seen":"2026-04-27T15:50:28.228772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338542.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"653c7802a90200282208b62812cc4d8a","sha1":"874698065824a28d593d581113c0bf9b5bebe2de","sha256":"e285131516804e7843577f88dd9117cfcaa79a5bdb0dc4aee6edf75fa2e58581","sha512":"e9335c77a137206170f0a2e1aaad9c323570ef4f61f00c8cec4c5dc5d8b38f0334c0aea73f458fe3cf255d3be1f292f48164e5bde9e40412dfe707b162bbdc9a","ssdeep":"","tlshash":"4e81f241bc16d5f9dbb225008e6d0c5a96653faaf10484eaf3bc80233352dbc6b9d734","size":4075,"data":"","first_seen":"2026-04-27T15:50:28.10919Z","last_seen":"2026-04-27T15:50:28.10919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338520.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1580c338b13d0ddf99cb35f07a21826","sha1":"2ae8cc20c3ca087433a1795256b155b9dc53a0f8","sha256":"e341d3e7c4cde3558080df49e53feb72f28b573263b62497dbb10a8276846115","sha512":"8ca9eab10e38c6b9ddf68d9502f684c837c257610826a6ba415dcf855efbcd4d3e4f488e2a407d5bc349633760206d51f5522dde7263f838ba8874fa2a4ea154","ssdeep":"","tlshash":"4c413415e413867fbe6354413c1c44a4d4847eaec2087d52f3ba2c713a99d76a79d332","size":1947,"data":"","first_seen":"2026-04-27T15:50:28.075467Z","last_seen":"2026-04-27T15:50:28.075467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338529.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df6819f9e5c02cfa87691c33fd74f958","sha1":"ba02fb208cfc065c5beb1ad35a46c2f5889748dc","sha256":"8255fcf7e77338e3f30944a0a54092a4a4448a70ec32ad46aba9b4ae37571c90","sha512":"2a33e92a13470d3f18c29751c2509ea71aac84f9bf348bf6f26b737b07ece1cc35dd82772efc8d225b4b4f46b0f6645d9e587d5c17db6c8b7b0bf1a68c8261b3","ssdeep":"","tlshash":"7f01af204ba9e2fd92a30165264432133c407de8d288b89ef2e6060d6f91db4da55b69","size":812,"data":"","first_seen":"2026-04-27T15:50:27.860084Z","last_seen":"2026-04-27T15:50:27.860084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338547.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf6a81863ecc9bbee80722b549b18db4","sha1":"576f82748ca1eea37c980dbac869792c050a53f9","sha256":"034ecf8a40337ec1d55e96721321fb2b90a95deeb0902ac277aececcf2e690ce","sha512":"9429e1504d70e6f46c7a9dcd54c398f63c517025bb0e4ce47ef694a29c8b37a64dc67908ad53db7484928f7eef1a7b1881651cc4dacbd44eb99489efd89868be","ssdeep":"","tlshash":"1ce020d06fa756fb834459a46d4d517006087975638c70d6b193054496029e58b1e725","size":357,"data":"","first_seen":"2026-04-27T15:50:28.24197Z","last_seen":"2026-04-27T15:50:28.24197Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338532.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3327427e95ca342277f98d07704e681c","sha1":"f1926e4b7d4a408302b367577ac58119050a08c1","sha256":"f38e1d04675daed682ac5d484ac318d2b8be0b2d8fddad6b636287cf85b89e91","sha512":"0f4a8302e846ca290eddf4b064004ad0626c6b1e42f7b43af1bacaa2c29b06a75abc89e60905516ee5a98663dabc6c162131645a744e196d5d1e529e6e2cc860","ssdeep":"","tlshash":"96213111eab1e8f6cba707a8331f4428a1842fd9d4086462f3eb09255658ce55b0eb0b","size":1364,"data":"","first_seen":"2026-04-27T15:50:28.100771Z","last_seen":"2026-04-27T15:50:28.100771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338649.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c0641b431bf2a32c4b4cdb620bb52f40","sha1":"73e76597e6b54ca4ceca462c6ce65e9a6b1dadd9","sha256":"bb95b1ec403c03343778843dc3f325f08d7ee7108f04c1a789d8ca1c9bf82a9e","sha512":"6982d6bcc6e89aef3e9b8e0c51014bf60eb4ea3528bdb439850187a44d9a74fdfe0a7c3ef2bb71cf14bd6781af141692024b8bcf6a36b30a8c759813cc6bf589","ssdeep":"1536:tzn1OTkTmE9xoNzOFE1wcthVkvsPCjKEKS6T5itBehlY6fiZLtBfIpMxYfuKxKh0:t6+xczOFE1NdPGDup7fuKxKhV6t","tlshash":"eea3221871857821d1739af2f8010945abe4ef6ee56172886cfdc6641fb7ce0f60e78a","size":101326,"data":"","first_seen":"2026-04-27T15:50:28.09641Z","last_seen":"2026-04-27T15:50:28.09641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338527.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6e59c857a24784c22222cfc755f09ab","sha1":"83668d344ca4367e11e5186f91ccc1dd94b8230b","sha256":"4b1d02ca32bccb7e934dccbab838eb433cb68bb029aa41c1a7c9bc54bc1d9d29","sha512":"c8a27a101cc16ab55c075a233bd2cddf01fb6907ed894277637c7601635124f91009a219aa2ac33aba59ccfdca3f2cbc5c3ec7af75a5a48fbbd8b33019c22f24","ssdeep":"","tlshash":"541104129f01d7b9c3b700541edc641136643ff0f1d8b18af5e6442d650a9f5db4eb58","size":943,"data":"","first_seen":"2026-04-27T15:50:28.0796Z","last_seen":"2026-04-27T15:50:28.0796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338524.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d45ffbf7e53ac228e2cb13e986c4bb3","sha1":"b2b13e82a5266a8c198f405993053028c6b4f282","sha256":"20899eb10e58805ca93b8a486ce4baed355f178fa57240d811635df919a0b112","sha512":"b6c750d44eb21ec7f0ab7026c882a9de54a3de04ee238eefc4d0a08d83d45742a4695e01131dae92401aa920e0955dc2a9f748aedcdbba3d980dc56a70cf4fe6","ssdeep":"","tlshash":"4c21ace8b0da91b703b3952a813fb857fba97980a2ac0b40d25090cdb4a59c80127c2d","size":1144,"data":"","first_seen":"2025-09-10T13:52:39.470976Z","last_seen":"2026-05-17T19:46:11.849005Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338617.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e51900732cc186cb00af49a1597d95e","sha1":"eab6aea966206671f94ecbacb83428472954f364","sha256":"dd4adf730433be5a547e0ad7868b8269e1e935b27eef9621b6406201003ec521","sha512":"c34a3db76e5c726710f8a0a40e5c67615114780247f7c354b5de6591dbed81cf84ec0dbf21a328a442d324f3d1a1e467460d5f1d924e877721da72c266658a22","ssdeep":"192:e9S45VysdQwfqgGSfr7MxE0UJBDTeHZ59YfA:nt2pFxrIKvBDTeH/9z","tlshash":"e8329201ee15843cebbb81c00c59145dc44e5fba84f464f6f2ab1fa466b6e712b2d37a","size":11090,"data":"","first_seen":"2026-04-27T15:50:28.217835Z","last_seen":"2026-04-27T15:50:28.217835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33810.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ab2bd04be6cd4c4badb953be2d311b9a","sha1":"aae55c9c9c159a2b5ae20aee8b537a070cfc3aee","sha256":"8414fbe72aadc540b8c4edb0f7cafaa7a77ed0c7298203548ac556620b42e5ab","sha512":"1fdb743ae41fa9a362da25691f4bef3ccce6b37a33a5bf1ab89c5ff4f4ea6d2cfa682ddab2ab58465ee5b5a19064f9b0cf239a022825f6a024e214d660f50066","ssdeep":"","tlshash":"2d418301bb19c1f58ff614c924a970430d093b1a9b5888d913bf2d39137afb5a7177ae","size":2242,"data":"","first_seen":"2026-04-27T15:50:28.103479Z","last_seen":"2026-04-27T15:50:28.103479Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338618.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"530de6ede2602a56847893663bedcbc4","sha1":"847c9162e0adc262a9a565411f9ab4096f2df3a3","sha256":"a5aaf440f8d9df663e1066e1347f6047cc71c17b3988ac90d03987daec8261b3","sha512":"3bdabbcdb56989fbb7b17d3aa9dfb02da52b6f9a9055d1a7fc4086401b416f3069f5af135d45ceafe24bf1f640da8efa2e5dc804e5657c07886695f1ee761aaf","ssdeep":"192:qL8wQThvwjgBJqb4Qj2tqAwhsAheiw7F6bGzS0b9XXs5jG3VSKcz0bC:qLluhMgCXcpwGzS0bt0jG5i","tlshash":"5112b400b815ad7eeb73105528390994b0443f9dc144e4daf2fe6c322ba3df6ab58a79","size":9302,"data":"","first_seen":"2026-04-27T15:50:28.023002Z","last_seen":"2026-04-27T15:50:28.023002Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33812.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ecabe25d58b577f3397a57f6518047","sha1":"fa11af5dea26371519436c535ef4f70baee34f9b","sha256":"01477df3bac253116c4b340ca86704762965dec17dc93151140f1aacabe16307","sha512":"3ca717828db335458556918dfa2ecd043662af363b9879851c3826978cd698edeac0df2d49869b2088f4e4dd00274e082aa9ab78f6505fb1640658bd8665e524","ssdeep":"","tlshash":"ad21b83a37c039b827bd1cd40b1114b416ea3ba3649e94defd8a5f065278c94964b49a","size":1330,"data":"","first_seen":"2026-04-27T15:50:28.418802Z","last_seen":"2026-04-27T15:50:28.418802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33815.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"63c16aae49a9084045a6c66cbbe918f9","sha1":"3b1dea0d0cbf0f9ee77f30f77660d966da8779fb","sha256":"6db96e1849411c42a0c9062476c78f2e74e866af37cbd589fa1ba708832b68da","sha512":"cd8e6cfbdc37920c1aa8d7e12dedc09a19deb4e2cd79b873086b2cc4adb81cd1e96731c57fa8c459c72f3e2e328c5496fee6e0045803e3dcccf059e6ea175f0f","ssdeep":"","tlshash":"6a3133403558e57357fd9d4ac02412a151003be873196cd6302f1d36a74eab57b962f7","size":1652,"data":"","first_seen":"2026-04-27T15:50:28.035251Z","last_seen":"2026-04-27T15:50:28.035251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338534.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37183f0fe7548432ddbb3344047b12bb","sha1":"e422b2d640c9210e1f3d500524145fbc47ef4772","sha256":"d6eb2fb0e53966195c288259ebbcdb921642a97dac83274e4453a19028e95ac8","sha512":"39da7098d7abab8d0de0982b114dc025bfb82a8161cdd48ea436bda8309c92c9eee4f20f2ef4b51b2defeb7b1d5fd37f2907b5212d17abc998534a33a29070c8","ssdeep":"6144:Rd7kg9glTZGiszEgFumXnenRegLqwJIn01eimBUrCKSx:RKvszEgFBv0k","tlshash":"ed14e794fa7170195263a1b9023f1907b336365ed44b86acb56ec9d92cbc08a3677f3c","size":206105,"data":"","first_seen":"2026-04-27T15:50:27.944211Z","last_seen":"2026-04-27T15:50:27.944211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33823.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60e9c59383ca746e536661af68282c60","sha1":"57a7617c2a9fd67b061d91b5bf8303a013141d25","sha256":"7116dbe57d0a86ed3c6f9820db411675d6f997e88796f26df8803baaa491bf4d","sha512":"c205267fbd5f0bc8425735ae2349d78447c27247a9f264667fad15a76acea9c9bdbcb9623d39ae278e405a346215b99c7daf0b10f5d9351ce7375fea1f30c27b","ssdeep":"","tlshash":"5cd02b3347c640b617250c5c9764e4a30130033a3f99d8dc38ae2e143305dc5ba76d56","size":289,"data":"","first_seen":"2026-04-27T15:50:28.115487Z","last_seen":"2026-04-27T15:50:28.115487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/js/qrcode.min.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52873267ca3710e4e23b54696a008fb7","sha1":"a9f6aa9a8de5e992ecbb27e751ffb9d4155f8502","sha256":"7bb56209bdc226820153dc040de7221a8bdd8f6b8d62ba67a8410c7c5514cb97","sha512":"4d98d550df716154603463d0b3dbc03cdef5812d2a583f6521e45d3cafa47febd148f956984c99bda919bf7c8a75b1654de397afa753d7bfb412f24367ae1a3e","ssdeep":"384:XghE7KRAqRICAIILNjNC76WV3j6D8yIwS7U0fF6hXBwhmt9DP0ZjEp/lrBoPPruu:X6RjdKNjNC713jA8/M0fg/aijVwewQZU","tlshash":"01b2945523af132ed11bf010ae9fcc0be7b89c18654da45dad4df0e8586987891becf8","size":24308,"data":"","first_seen":"2023-07-22T21:56:18Z","last_seen":"2026-07-26T20:56:08.533909Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338573.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"477b9847168c7e2120e8587c031cef28","sha1":"77b49e0d510f3277c85904e463ebd441ec04f955","sha256":"78343c486774a840d6c7e45efb839fcbbb1f2190436828848fcabf44e451c6d4","sha512":"696b66087d62f9946566fd9572bd007d2e36e70204962a3cdc91deec4fda7525cedef2cf0a79d936fe9802113c73b400217bef0db2aac74ae001a3d72b7b7776","ssdeep":"192:9cHA0nBlgLWdgNMVpwyIwieYI9Fsc2hesJKzzm4qnnFEoy4FcepxG8LMcso:GbTq0CPOFsc2hesw6OhLg4+MA","tlshash":"54423f10b12bef3cd677b192641e099194982fadc11385d9e1bf2d210ba5cf9279c73e","size":12127,"data":"","first_seen":"2026-04-27T15:50:28.273457Z","last_seen":"2026-04-27T15:50:28.273457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33822.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eeb64f3a431ae94a6188d4196da862a8","sha1":"069a56595f593942dbec22658cfdd692ad836acc","sha256":"677e4b35f46caf1683503b66c0f28036dbb8a1a85be9a4682eeadcf13a2503a5","sha512":"43d9f8edc0e3a1ec9b2e86108a47d95be4d9b471a693c81e67d704d6f0c6e3c36682c2e85066b2b037a4e6997a46ece9a3c797da77c5f5551fd0d5ee49cc0685","ssdeep":"","tlshash":"ab412440a02397bcd7b321f2263d8449c4cebf5cc20699dab15f441331a6ce587e5b35","size":2195,"data":"","first_seen":"2026-04-27T15:50:27.783093Z","last_seen":"2026-04-27T15:50:27.783093Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338541.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4310983d7c3aa802ee8c8e6cbc7933","sha1":"80d2f99cb2b78c228f3b75e01c33e991879baacc","sha256":"4f877c9b573036ef3d979323d455cf22c07a977106d7a08ff74df8e20e4707b0","sha512":"82527536d86fb25ab70603d8502ad0a0af20aa35e20a83e5500fd7e838ac43486c6823178e6f71bc7201912156d35ba6e65dca9335e13b86d6cfb174bf00f497","ssdeep":"","tlshash":"67814154a405e6b9dae22170c06e07d0631abf6ae95a5865f3fd4c513345cbde30fb12","size":3944,"data":"","first_seen":"2026-04-27T15:50:28.041805Z","last_seen":"2026-04-27T15:50:28.041805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338627.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbb4394b0c1757af43cf752dc3cc75b9","sha1":"1c0a30f6547f02070cbb70975f756cda892a3563","sha256":"9818e057c55a6cf1aad05ebedc6959d2ab4ebc2d2c6e53553fa187e2031cfd5b","sha512":"bcf5e7d3e9e7f19526aba8d0d25641509b4cdf42475f126179a8a79fa0fccc2bf47cc44960ac213f327c0447f6da464c252c6cb43ea4d6c68a12abec3f1d48ee","ssdeep":"96:pOFYwxuNrTnHxlbcPFWWOruFfLz2Ardiw53scLBVpchX7HE7kecV2MUCWt+v:JworTHxwVOmXriwNscvqxRbV2B+v","tlshash":"49a1b642f505953c933bb646c0a944c6a1ac1f94f00a84dde07f9c123bb69fddb97a36","size":4756,"data":"","first_seen":"2026-04-27T15:50:27.922728Z","last_seen":"2026-04-27T15:50:27.922728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338622.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef0484cf5a271d3c98f2c7019c15a6ec","sha1":"08ed6da1e40c8c2a2f974965e0d287bc5bd77f55","sha256":"871f0928b81eb06689367335bb0744ad9c5ea3d186f6643d4e7601d3d2b104f3","sha512":"01a009bd5242505867487f5dcf283d709acadc91bf65632b564919373cff982cc8b76a84d538b380ac6ce4bc886bd0f5490156ff68b84b30000ed9580a85b0e8","ssdeep":"192:INSu4WZOkhcY6WIKGMVRhGNzsUDZO1kwkoK4vk5+5bNpPAYYi511zu6X43PchloT:OKcIK3kNoYMvC4vk5ebzPAYYifDCchY","tlshash":"dc12a700b523dabde77335d150694488e29d1fcdd10688daa1ff681136f6cb48b98e3b","size":9905,"data":"","first_seen":"2026-04-27T15:50:27.8071Z","last_seen":"2026-04-27T15:50:27.8071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338545.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b891f6c692c62da8c048035327b8d594","sha1":"58e5e89a636864b31c1af9b29b5789fbb1564642","sha256":"7db9a2b88c575b6c51d4e3d0f65db24a704e3183e48153632f25380729304b58","sha512":"eb6c4996ba93afc48a9f378a1cec8cde17a48ffc2a84a1b4d9f45d11dfe7717dd3b44a2c78aae697d17c60ac965f25ec6f0984d344d591b7af73334187b57024","ssdeep":"","tlshash":"8f0141d2fb45553c47330008ab4ea0b92c813a71a94c78f0f22b0985aae0d7afb20707","size":800,"data":"","first_seen":"2026-04-27T15:50:28.328954Z","last_seen":"2026-04-27T15:50:28.328954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338539.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2190109237a357338d029776e3fb4091","sha1":"7ed21ce3ca74df98a7f5c8f504ad65e8c41bf3e7","sha256":"8f4a3c6f84e7b78d9ba23ae0642b6920aef28776222028586c0402b1d11211de","sha512":"043acdc66cac7beaa73ce24a1f6fca21e54403f6f4f5be6dde5b3cc151f144945ca7653170fd88deb92ec80260c1b4f994a37d0f9083d79b764674a83f5aac28","ssdeep":"","tlshash":"7841dd21bd02e27ee7b3485090190590215a7fe5f15c70eeb7ff0a655b92c39fb0aa36","size":2120,"data":"","first_seen":"2026-04-27T15:50:28.173286Z","last_seen":"2026-04-27T15:50:28.173286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18f2c3fdda691d4ae773097b4805b09","sha1":"abe94281aaac96ca9aa8193e195d2994eac4bd6a","sha256":"1bde515d9a44744eb25d88afad7eb37223aeaf292b91b49394d887d6a5a81f3d","sha512":"60f817fb33685a0eb48f3678924e4c995d283b51ee698014e3fe2b6254714bc86d57154a7175c8ca9f14ebd3e8de480fe0ac2975654df360337118b52674bc41","ssdeep":"24576:NIxhxV3lc55jXe1v9JMkJle0650qw2FiLiPiv59U4V8Z8oo5as6EGvFHi5/X6uQK:NIxhxV3lc55+9JMkJle0650qw2FiLiPQ","tlshash":"50657da17295b07503ab15e9102a2150f2385c55340d80adfeacadfb7efa885d27ff39","size":1544027,"data":"","first_seen":"2026-04-27T15:50:28.441136Z","last_seen":"2026-04-27T15:50:28.441136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33817.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bf03b629c9dac3722e33837d53e9eb7f","sha1":"350907ea568b4ddb8a0ee09a89c9c6f2e54bb67d","sha256":"fb099439471ff63c840595f85d44f446366ed18789cf58b7e844bef9b2701f78","sha512":"0cb5fc22b23139a5dbfe86f0d8d185c9ed75c96dca3da1f8037470f20b8d23d27a82c2fd9a6e140b05d51813c101d33aa6400d9b404f5c0d7b151f984fd6a4f5","ssdeep":"","tlshash":"ab510e798859497edba514d80138b02b44ac4f2ca9dd88bb9b7f3e0c67f68b47f45b00","size":3050,"data":"","first_seen":"2026-04-27T15:50:27.985622Z","last_seen":"2026-04-27T15:50:27.985622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338454.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4a2a94ed145ba69439cb0f07e694e260","sha1":"8f7a98201e965225eee06da0239abe96ffaf4f01","sha256":"8509b1cb598b6daa165417ea1b5d208780528267458ecf8dc94857e575e778b4","sha512":"e5204d21ee21bc81d054797e0e1e34c88d913dfaef9faca35d388b1757b3b46b7fb4875c131bb94655e3ca809358a65b9fd212633c94671e4ca479fa2aa2b9a0","ssdeep":"96:sZecOcNmQ5vvUvzOAWqeYW7GcMdqdEUsSUXG2lT3CQGmyVhkCGD9IIhFRed:4echAQ5vMvneYdUEUcIY5S","tlshash":"14f1b7433752f9b2cb7b5a4780065384cb35a394b81e2cc639693b3e35e3d442669f2a","size":7540,"data":"","first_seen":"2026-04-27T15:50:28.209843Z","last_seen":"2026-04-27T15:50:28.209843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33811.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"63f0d95fa8797c94bf1add78a6054ffc","sha1":"7a0b86ff01815a9c4f754d270a163c2751b6c903","sha256":"946210b48efe4be4e182690fe02f19941726b3e883dd7d13464cbf5ffdc4817f","sha512":"bfea68d31bc01335accc7eaf4350d8be34910c33575a663dcfaf51f2dfe6ec45c89ca60bf255e210dddae79c77c0553baaf8ed2db10a7e730717018f23ea4abf","ssdeep":"","tlshash":"985164187236d97f1b7658081d3c4881904cbf4de5086ec3f26b6c3113aeeb5d794a7a","size":2992,"data":"","first_seen":"2026-04-27T15:50:28.325226Z","last_seen":"2026-04-27T15:50:28.325226Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338530.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cd4a9f69a25da5a8467fd14a69055d9","sha1":"be63a73c59343d0b8b75d0f75496ca39b8fdfb44","sha256":"454af7acddb08e531187d5ebf9b2075448da5902b6b87393a95ec790996673d0","sha512":"3075dfbf3577c1d313528fad9a79cb8f03ebbcf64fa9b02239530121c6a5cc2598a1ba25420e6ce73f503502fa96287fbcd37e96413ca1cd75273f821404c714","ssdeep":"","tlshash":"35113503677a9cfd57752148854400910844677ba3eda9d683b78c9d651353a9628722","size":1044,"data":"","first_seen":"2026-04-27T15:50:27.991268Z","last_seen":"2026-04-27T15:50:27.991268Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338620.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c4b277a03ccb2bdc69bf9c26e623ad","sha1":"d56b80658bb26ba9f85a37f63aa46aa0fe135260","sha256":"ed79a70c77d46ee76a0e7f0906c47bf7ff0690cc7c5ecc185a39f9ad1b3a8d3d","sha512":"82ca32662cf9f420a1160e6616d129d8b9ab5f3c52ecd76959492e8b410af4d8c01fbb66acdfd463868f443a7e9620d5cc37e8a3a8988e98ea84af50a8be037a","ssdeep":"192:LzLwrISMJXwGThTMWcy9zjKtcW2L44ejiMKZ:LYrISdGT1ZcyRjKtcWg4n+j","tlshash":"9ce19312b70389bfab7b95d0384c04d4a1186fee800c15c5f2f90f9a27a6eb5572477e","size":7386,"data":"","first_seen":"2026-04-27T15:50:28.140808Z","last_seen":"2026-04-27T15:50:28.140808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338525.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb90f9e2516cd87e177874030115850","sha1":"237528a05444823974ad5971381e4714c59af2ca","sha256":"ed391eae2f772036fba1d3f6f2ba0416cc9db89f8cc7ff5b039e78d1987d7b0f","sha512":"94458035f4ac2424e0b402e7e3b34ea005c28d41c3998ecd0a901409bec94c5118f86615ba4e81b09bd2f1ebc2a9d85d668979f48d659ff449bcca11e4c94585","ssdeep":"","tlshash":"c12112105a46d97bd75304a0d81c1c3054683faba74cbd9561ff08155716d6c9b4ab3b","size":1289,"data":"","first_seen":"2026-04-27T15:50:28.001491Z","last_seen":"2026-04-27T15:50:28.001491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338628.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e22b9cb2e58e086aa5687dca98a16d3","sha1":"70964a67924f65e5f126d5a0ac5743f07cadd381","sha256":"3a7a3e14d92b34f6878a375fb261b4fc48f07c8cdd995c545aeba02a6e5cd6a0","sha512":"45c744a15f164aa6f506c965c8112de4a2bcec2a0a97c8345f679f0ab2f687c560b8f6f430439b8b9dbc246fad54482146cf66b79c3ea6cb21d576c23959a7d4","ssdeep":"192:HbSjffQhFPLh2TjNRbx2E1V8B7j73TQrbf6QpVHHftPMh50DgB4HxHKHxL3mpGBR:7SjfYrP4TjNR4E1V8B7j73TQrbf6QpRc","tlshash":"af4264107332af7cd2b371b61134544494982f9cc512cad9f1bf2a223b76cb56b987ba","size":12041,"data":"","first_seen":"2026-04-27T15:50:28.112368Z","last_seen":"2026-04-27T15:50:28.112368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338559.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db16a715db86b99da60703fa053dff93","sha1":"6c603064b9938a080430e8ac907cd4ea1bf663c2","sha256":"174b3189074f82a7eea8deeb3e55960afc559693a89037ae5c073905962cfe54","sha512":"1a7a1a4f756d4fd25f52c9893e8dfb35c12b3c07f0b6fbca661c0eb6213a9f3e7b82f49681e81c360f65c231ec991a7b7c8dc02b2457bfe569b6b8f6aafd1760","ssdeep":"6144:P+aGKQPmIq50a7CtKxNHZq711yESQC3DDdWj8MBMsyehJUoWU+04cQB7c3Izngl5:W1mP50a2AxNHZd3PdWj8MBMsyehJUoWQ","tlshash":"ec4409d132e3f07647e624d608760002e2699d55744e84acf2ac9cdb7dbaccd95baf38","size":261107,"data":"","first_seen":"2026-04-27T15:50:27.964686Z","last_seen":"2026-04-27T15:50:27.964686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338619.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae37712c4ff9b3fe24c34e2332e0fc32","sha1":"b6fd829fb59302001877a7c1c7776032ee558fff","sha256":"6c69db7fb27d4c7f3d8261078e97248d32815ef7883efeabddc2d47d57b30e3d","sha512":"907d68be93f89f666d796ecaa047ec4d59959288695f03d45f55464477ef02a71061593bfe129fefdb42d26d0c1161089fc7fd6e32dede7abf07842aba8f2382","ssdeep":"192:LselMp8oauCoxBMtEaCE4LWOhaCAVLme+HDb4B75gvvab4bf:LseGp833IBMtr6sdgDb4Blcvp","tlshash":"30e19560b612aa3cd37760c6106c4089f0a91fa9e118d1c6f1bfcc252675eb1d6ee73e","size":7021,"data":"","first_seen":"2026-04-27T15:50:28.015566Z","last_seen":"2026-04-27T15:50:28.015566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338537.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a3bca934889a1d13a5bdc7d3c87b67b","sha1":"1a0fee238fc1e0e3abcb0c4ba04149d7aea85dbf","sha256":"d1d4eb9c602cece1819d1639ac07ae5877661ce1bc6fe47e0712fa1b7bf2c97d","sha512":"adae0b67312f84bc1dd071fcc8628abea445c728d4f64b1752742b7e21ee6dabace93d40a91308e7c7482fc0db5148fe4eca6d76470128e86d89a5c9d4021420","ssdeep":"96:ahJ1+dliO9mEWyNnD108UwthDta8nMaQVF+CrJjLlJghiCPKfVynm+UmzddvCdmt:ahmdlIaqwtJta2MaQHJjRGiCay3rzbCS","tlshash":"abc183017612983edbb651d26d381441e0895f599308c0faa6bfef7927cbd79638873c","size":5921,"data":"","first_seen":"2026-04-27T15:50:27.876307Z","last_seen":"2026-04-27T15:50:27.876307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3389.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"104398257955333e3c88786857d9c007","sha1":"b902c024bb55770e613dc3ad37c4747e853ca02f","sha256":"b28fbb3e3f0101c480558978378e52a94cf1547dbf151b9aac4d62a4a08fd217","sha512":"49738430a6a98cf2f999ce9ab1a2b540ca48a84b1f526e3252c21bea7be9d604125724bdcad454295b1c6514f629c1f212ec3a432d550e8b807d36251e793517","ssdeep":"","tlshash":"1b5176147731b1fc93b660f4219d58a2d9c83b89c6096ce8f3ab0e256335d70f309a75","size":2625,"data":"","first_seen":"2026-04-27T15:50:27.786839Z","last_seen":"2026-04-27T15:50:27.786839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33824.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0cc2d88c590745d80f0e805513796790","sha1":"847e3be21e11c7649dba43a67da293ffa89861b9","sha256":"e0c7047347265f6eb6ba32f103267b4efa9e8c1e7fce3a9ca96ff04abcbe5ef0","sha512":"5285f083002ffea9bcd1c19c6897e3223fb2530c91ec5f7c772f00444219b4be545530e096828d92474ce1b85e43e518da78d21d70eb63e4d1c14cd659e79d66","ssdeep":"","tlshash":"2641659236aa66f6c3f40a8024a815dc59792b58781fd8ef326e5b5213f3c0ad42dc33","size":2074,"data":"","first_seen":"2026-04-27T15:50:27.931073Z","last_seen":"2026-04-27T15:50:27.931073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338621.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c3839a4acd7307fd40b4e88ad09a9c3","sha1":"914260cc79996257fd52809137f0d5661dd8fdfb","sha256":"b1a7b698e4c1441dea3aefee83f47a1344ae4d5449051a2dd4a3a0e370494948","sha512":"9c538b85adf0923768a837b95becb784e13bcfae790ae3e4eb3ae95b90d45ff5ef54c64247dba717b996f9fd8e3501bcf1d38a7492c9e8998cd18faaa29f1f0b","ssdeep":"384:2jwwgL3iTZpqopK0ytw5lfOIxIBkEbHODm5r/LJqHh05TtcXtkc3sSPFSlWjGmTP:2jwwcSLq1tRuGr/LJqeItkcckF3","tlshash":"56a2f76beb4922370fdb02a22f4e45d5f72caa68b3b515143ca9d54c2345e38c33b3a5","size":23297,"data":"","first_seen":"2026-04-27T15:50:27.819448Z","last_seen":"2026-04-27T15:50:27.819448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338632.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c9a72e31b468ac74cb4d25f796f0b33","sha1":"a7f8d3d691ead8d9a5344db1a6c835ca54611f6f","sha256":"19cf519010a8d6f1c812c256fb99153c8bd16d67c2fc5bbf8e630613bc3db352","sha512":"5186dc3c06e5fbd8f2fb35fe922cd925a768995324e693101e519839c30db058f215e06fe842ead1acf746bd933b1ef87f4543e9933fd93178564316af28d062","ssdeep":"384:UP/QiadPllHnKJO81aAvDtXR95dPb5u1heIg4V3Yr/wUWg3vS6lufuJvOMIruP86:UP/7atzHSvDVrb5ahep4pYJvOlxg/FN","tlshash":"2ca2d701f906defdc3f7d15050a81548602a2fd9e406ccf6a2bd590667e3db4eb25e2b","size":22843,"data":"","first_seen":"2026-04-27T15:50:27.879039Z","last_seen":"2026-04-27T15:50:27.879039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7521ecdb6abbbc5614c8ae40905be8","sha1":"463947039f9914f01fb48709517e32278314fa52","sha256":"c4017db88436ca650020d7c24b5adaeff1ec91803b31a62208abd512497d8c4e","sha512":"04e2f3326aa1033d489ebe94200878a0a8840b5760811d6b1e94772139b5c347d97b4334933e54eb66ec85e18dba770dc88dcf2b53085e7fc6abf5a4ebfb507f","ssdeep":"","tlshash":"c3412f9a00ab147044afb07e2b5fa304753240a75205ed013e2e9f880fa0e3d16f67ee","size":2222,"data":"","first_seen":"2026-04-27T15:50:28.451208Z","last_seen":"2026-04-27T15:50:28.451208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338521.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d50cd240828b7dbcd14feeaf33370b","sha1":"a49c02f82d646ff37a7feabe5011c25f4d2486d9","sha256":"1ccadbff33e512e4b023e0446d626e266fdc66e8a68d944ddff3aea8bb5fb51c","sha512":"0d842248c8c7b1f1b48321712f912c266bdc478c61fa299a073f3da10ee054918afee5583fdd4da3a717c4679448d6130cfd82653d0e79b617487e73aa89b750","ssdeep":"","tlshash":"9a3153049a3295bfdb5734161c1e4085e1c87f6ad548a495e3bb5c212761cf6876e322","size":1584,"data":"","first_seen":"2026-04-27T15:50:27.919674Z","last_seen":"2026-04-27T15:50:27.919674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338535.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fd8545e3e0d0699f10b1e37d40e3cf21","sha1":"f450a1016e4a458f3622af81691e2c9e4e15a453","sha256":"7a2a9c83d767c6c223a9b7fc0053dc666593e00de2f980954df5cce3bb0fc4bf","sha512":"fc4cc18303b07af5643ea7d285311997f63b7eda796e57a4ff1d4938f5727b0c0c2ad074f318a32752b92813888df2661fb5359d052a03252fe375b122ce90fa","ssdeep":"192:LTCTKukxqyE/KmPEAyRZlXifSUG70/yXNB5ltgRXw0:LTMLyn8ER8kXNB5K","tlshash":"49d1d9023918abf65fe715f290f51810038c6f9cd16960e1e1fbae2523cdc9497b9fa8","size":6558,"data":"","first_seen":"2026-04-27T15:50:28.039343Z","last_seen":"2026-04-27T15:50:28.039343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33820.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0dbe49a894c304482c313eb94ae6d094","sha1":"85103a4453dbfbba53c407ce99501bfcbcbeea16","sha256":"5d516d61e0d27b32e193da3370c7f9e54715c63d257ed94fc0be0c8a7ed5554b","sha512":"d7c3d0f2edadec0318b68611389738936e5500dd673f20ccd9d3baa1fc6cf97da77720670d784dee4f97a96ac9c8110d4be46bf451aac12805d19ef92adc3b2e","ssdeep":"","tlshash":"c8e0611225d728e80b7c0455091eab71d5500b3c32dfd8dfd7268e4b5561c6d57bc632","size":397,"data":"","first_seen":"2026-04-27T15:50:27.870795Z","last_seen":"2026-04-27T15:50:27.870795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338522.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5264d18873e647d7e4a6f4df57e25ed1","sha1":"695d0f458a4ed29dfd72b1bae8b99a634cfa67fb","sha256":"9216f83118b60fdeff3eead7a3b43a7cc65b1b9eb288280710de52e38d5a8bff","sha512":"8d34db8c3bd88a4edb7fabe80b9e37fd506cbccd9c8ce284e1362df466d8de17d915655bd8db9c471c751332d6fc9feb104546548d034c4c20185705eb2afb1b","ssdeep":"","tlshash":"e14133583723abbce37724d50019408090ae3b7de359a4c9e2ff5d11326adb1cb2ba71","size":2091,"data":"","first_seen":"2026-04-27T15:50:28.20622Z","last_seen":"2026-04-27T15:50:28.20622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338611.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbc80a0a359c4eb5552691499373b5b","sha1":"65ce50c9ba521f817f320f3fa18d176ae874f24f","sha256":"f6c23622972103dd86656bd7733f3153560814cdf52473ab05d8c03bff560e91","sha512":"804680c0a1034e603482277a8244dff0a291032d26244146931f1b03e60a3220708ccc4712520c0132805af987f4125b1bf531314645589d2678bce0a4e88a7b","ssdeep":"","tlshash":"4961ca05a532d13ecbf66181105d80e5a65d3f89f00b94abf2fe449123a6db9e30eb31","size":3354,"data":"","first_seen":"2026-04-27T15:50:28.073008Z","last_seen":"2026-04-27T15:50:28.073008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338516.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ca7e9f47bf4ce3e85ffe9c2219f5555c","sha1":"adf82aaf59e55aff5cfdeb5381320b5b41fb32fe","sha256":"3a85c7e7fc9b219fdd2b9322aebfb85e1c8c1a314f97894c2991bf9077c47d9b","sha512":"afdc62ce2c4174e762a1fdfa243ae441928baf8696394d9c7008d72891c7b9c766ef1da01039a5eee64baa237bb4dcadc3269f680a47ad39d372344d210e98ff","ssdeep":"","tlshash":"7b1102196603cafa97b9881095cc643367f8eb98710c35c9a277865d6313e1a2f0cb75","size":1015,"data":"","first_seen":"2026-04-27T15:50:27.83443Z","last_seen":"2026-04-27T15:50:27.83443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338540.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5243dbdcead9a60d73986ad0902740e4","sha1":"d400dfcf36a4ee8be445a5177c0db0135a3ccdc3","sha256":"5201005bbeb5a74a89cba99578479979a2874fed465a0e0aac21eb95ab40dffb","sha512":"460e0119dcd2d40da77c98911f8548947f429ecfb3c99398081e88386ac7242e59b720ad558e59d4a17fb89b666ba8e4dec55384ac8846269964c19407581b27","ssdeep":"96:d+yyRXxC1E38uA3m33PwNewopuZ/KnllUoRPMYb:ded81q8uGmnPwIq/KllfdNb","tlshash":"1da154106522af7cd2b7b2b2801c114485ed3f9dd11a09e9b1bbd91527d6eb1e3aca33","size":5015,"data":"","first_seen":"2026-04-27T15:50:28.22174Z","last_seen":"2026-04-27T15:50:28.22174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338538.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163282d985b80da29f3cf04a48f097a9","sha1":"2aa6b070c1063a6fbb66df940c8e021dc7d5f102","sha256":"e594e03e716f2e0f5fdd95a5f7de9da2247c733869dc9325d5fc5f70dac4fd59","sha512":"1a7c6b682777e117e52b6b6a1ceb4832cd0139c8797c60e63ee6980521ec94d41338008441fbf075af7ddfb45899f9cccdef9bfaf48e843ab22b905ee9513fa6","ssdeep":"","tlshash":"c46161107d32967dc7bb22628018164182e93f6dd10a28de72bf591223e3db5e76ce33","size":3457,"data":"","first_seen":"2026-04-27T15:50:28.027964Z","last_seen":"2026-04-27T15:50:28.027964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338523.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0aab90f9ffbbd4227beca004d37895a4","sha1":"62c3ea6ec826063ba224a7762020aaf1bb2d2908","sha256":"b3399f995a3bbc4fc997b187ef129c70ba71b8c3264dd87e89056fff490c52eb","sha512":"1cd4fae2b92a3ad7cabcd1d7d23758847fee6daef9d1d1edb825ff8f5f05d823bc94048bf76e0adc91130ecc63a7fb557222a60a84aa1b1f749f6301b6d91130","ssdeep":"384:mdR31ChFSs8jT9TboIMCZ15cbvjBCyPTAP7v9c2J55+/GHAdDwWsh/TrU9Kvl45N:m0SjT9TbocZ15iDcP7m2JfHcEDhIM4UI","tlshash":"9ab2faddb2d1b56a439725e9003f0409f2bea824341d55acea58d8c3bd78d7a81b7f2c","size":23691,"data":"","first_seen":"2026-04-27T15:50:28.176614Z","last_seen":"2026-04-27T15:50:28.176614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b61c699af6289fdc02243f0993e56be","sha1":"b37693a5391699ae32d99107683a8dcc0448f7d3","sha256":"74c34f56ee9f15691296cf9b21a9c548d5889726ba9bdef851f0495dcec266ae","sha512":"ebe56174e18828e8f1ecf2ba215ed81d00f143101c040156ed82bc05cabc304f0a3c3b70ddcdf4c30c8ced21e689172735f605114084eaf9b0a76a674967623b","ssdeep":"","tlshash":"24d022b243a8a6b12492812bab3a3f4a3007209380b4cf00bd4f090eafd1c40c08d2c3","size":200,"data":"","first_seen":"2026-04-27T15:50:28.455049Z","last_seen":"2026-04-27T15:50:28.455049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33827.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db1900db62c430d484d3ee5b23aeec4a","sha1":"d8e96f6d6ac764f0abdd4178fdb931fc2ce70394","sha256":"b9b591b13b0cae79f948e9850373c1d13b7dd92097a088eff539c047cf2dec8b","sha512":"0fe651a3ed47ac8c8284f81803218efe95efe468c76ae67f8dc8087947b2fd4619b0717927249d0fdc9623cd0a3b3a828b80c541974133633b3f1dcffbc31696","ssdeep":"1536:MW3wcC8Ye+FDsHU7yoAR5DKJ23qB+xjKXCUXF9:MxcC8P+FI07yoAR5DKJMqB0j6CK","tlshash":"9b33f918a90b1d1ec7e213dd7791fd6d1a280de103a684fd0a9c38a603e3ef4f65b919","size":51552,"data":"","first_seen":"2026-04-27T15:50:27.934066Z","last_seen":"2026-04-27T15:50:27.934066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338654.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"20e298f66c9a137d5eac8b2109ae3fb7","sha1":"e60577b0d8113b920fd4289555bcd030c0f0bebb","sha256":"ec4d233252e591cc0454c76090f01ff52d8705c192b10a4b6b9235e80ad043ee","sha512":"9e2d3669e822bce26bfcef835f7f4d16a612aeac956744858cb023c9e1017d3b3a91ffa24987cbea62eab8c95c68ae0ecd4f28615a939512586f62788232b786","ssdeep":"1536:iT1yaAxYc8KGzoWtEGoxFzk7BADRFkoVd:ePc8KVfFzkla","tlshash":"4763e740ba3199b9e7bb9091e0a90944b28c1fbdd02044f7b1fe1f9527d6ca12355bbf","size":68145,"data":"","first_seen":"2026-04-27T15:50:27.846045Z","last_seen":"2026-04-27T15:50:27.846045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338656.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfcd1571814212e9fa4a9eefbbc84fcc","sha1":"64923c3104d35ca18335267aac4b8590f8b6d6d7","sha256":"56c6a21f1631260be029be862738ee79af5bec3d84e1f61e9ac9ccc12dcff335","sha512":"d6369545afa9071337d116bd95507d0d8cee23e8ba9d4b0d187f8efa2f685c4df15d50466fb2c7fabf6cb2154ab303ba443186aeba13a0f60ccdc6707219be14","ssdeep":"1536:SZSIrVagjnd/kj1xVq97Y/xGf7g9FnAZXD:SZSudjnd/kLVq97Y/xL9FnAZXD","tlshash":"a2438404b52799bdd7b3a192147854d4b18c1f9ac101c8f7b1ff9c1223aacf6a749bb2","size":60089,"data":"","first_seen":"2026-04-27T15:50:27.776624Z","last_seen":"2026-04-27T15:50:27.776624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338518.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e799769720804e292372688985f02050","sha1":"597edc5f125d7fbc7929fd4356d594a40ee29df7","sha256":"54aaa08d6412aa75f290df860628174210a7643678aec0d1a37e3c43eccf5d41","sha512":"01c3a513cb1687867557080c6c54d852238360aefc6df2c92a4aec4d55fbb0a5f2e6b2ffa3f0d5736e6f55af5fcfdd1de3f8c1317719c9fed12aac5862b66f9e","ssdeep":"","tlshash":"2151c540bb24d9bf87f7942d513d1044a4182f1ea65cdad1e6be081327aaff563e6b30","size":3131,"data":"","first_seen":"2026-04-27T15:50:28.214189Z","last_seen":"2026-04-27T15:50:28.214189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338610.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871904027ea2ff8b3930454d92652eea","sha1":"9020b4b56c0c48cc8ce8590a3ceba43050dbee49","sha256":"1288f65144f3917bdf403dcc24d7e73355aa7003762bd22c8cf7b0127f1edaf2","sha512":"ead52668adfdbe78dbfc1aaee0e2aa62a86c97fab347f50aec3b8efe49525efcc9db6a9acd5b91f081576af7ad8934960be074cf3a1a57e6adc3d86f52c2e2bc","ssdeep":"192:kxs17yozZ8nL0AcPBWMSa9ExfZDTZqKSJImlBnr:kxs9yZwBWMSWEZZ5IDr","tlshash":"5bd19710b213863dd77365d390198584908c2fe9e11688dfe0ff582216fedb6ab5477a","size":6294,"data":"","first_seen":"2026-04-27T15:50:27.830498Z","last_seen":"2026-04-27T15:50:27.830498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8eecf45ea778025c11abacd69d69878c","sha1":"a6899c6e4f0f1db3d84f1b9a1c6c6608723e6633","sha256":"96598a6b8e2bf5b76f27320f333730ca3e3998b22dd7a795f09ac70480ce7b28","sha512":"4df6f06e66dd1ece4eaa841889915de732a21812e9d2e62bcc86736719717c3627d06bb134e614d4bfd1897926c1c2be85dc14cf2243e2212d2dcecd8a47b3f6","ssdeep":"","tlshash":"f7a002049959843020de52445a83654174451b338058d14d730cd5991b4545647159ec","size":65,"data":"","first_seen":"2026-04-27T15:50:28.459348Z","last_seen":"2026-04-27T15:50:28.459348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338533.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bf48d3c184062685d1486ecd312cb0e8","sha1":"cbe03c719ddcb77a87367f2a0506f505c370a0e7","sha256":"67e45b6efc4f2009dbd27dec85acf2dda38cc725463cbb80b149d072a671781d","sha512":"bee8ace520ce5b5398b04ff09fd24f7b30113ed5c0427634ea1b54e91ebe406d090d625f189893270db8eaa252035e19d2adc58866f06606951b62bf2ea88a90","ssdeep":"","tlshash":"c061248234e9ed79d71a5246625706b1b32d2390e12a99d4b02f5e19375fccca07fd2c","size":3406,"data":"","first_seen":"2026-04-27T15:50:27.862746Z","last_seen":"2026-04-27T15:50:27.862746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338657.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eefa1cca9bdef770fc325f9500db7dbe","sha1":"0f4af85cf4679e3a3ea3d81be14fc010074b7eca","sha256":"651c582f5e054536e7141b4acb3903c96e1623c59ca980ed6e4cc6bb981f798f","sha512":"7e5b43e98cf8f230cc2f0814de87916c338a18aadf11a9ead6905e1f8fa35ba74cb77c0e11295f1bad058f44013e57c0dfedd642450153607970cc06c589bfa8","ssdeep":"3072:6aazLOLk6LEZm4xood3uO40yQ6OKLRTrqJ5HH2GkbR/uV3zts+XAy+exe:JazL/Zm4xood3uayQ6OKLRTrm5HH2Gkt","tlshash":"94e3e850b53a45bed7b390d290aa0484a29c0fadd11484e7f2ff8f7127dacb51355b3a","size":149655,"data":"","first_seen":"2026-04-27T15:50:27.959667Z","last_seen":"2026-04-27T15:50:27.959667Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33813.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4b6339b166f1c2788940e12e915b58fe","sha1":"a5c161f7271bf9b11397b5ec9799271b6f5ed854","sha256":"ae2e114b60bc885a933e147fb521961ba83652b1a0a4ec6e6a2c7dcefd87ad7b","sha512":"634295d8d8355a15214ac8fa18a1aa810faf96aa1ff600a5d1e2572d00f595ad1a33eb516b374fd68974dfe5113b10f064abaf395937620991525ed50f9afbf8","ssdeep":"384:TX9jafzVAo+XE4ZVcGVheFcA53Dn7UGCJcz:L9K5Ao+04ZVheFcABD7UGP","tlshash":"fd72c5807996dabfda73a0a214ad0058e04c1f99c10a85f5f0ffad1509f9cb5933e77a","size":16684,"data":"","first_seen":"2026-04-27T15:50:27.827239Z","last_seen":"2026-04-27T15:50:27.827239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338645.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b900a366acc10ba4e693fc513a4f02fc","sha1":"3196e7eaa840fd005ddf09262d1558d2b2094bb5","sha256":"c591b552a82154233e37f54232c5d4d2a87c246d57e795c1a65c39b4fe34e3d3","sha512":"af67627d39780670091f18e1260da8d5bcc3b36e36cac7ecb90f648697d5b71171095123968ae11ba6c81b9eaf2373a046b8dced837571e8ff1e3fedcfb42a9f","ssdeep":"768:RKH7ktDAC7mutXqXEwjgJ9VATWqN+kSvKpj062glR8nAUvL:4baDdhtXqXEwjgJbATtN+k1ig0nFvL","tlshash":"23131914bb02027e87f710e138a92d82f1966f5dd21688e951b98f8113fae7467327fd","size":41871,"data":"","first_seen":"2026-04-27T15:50:27.8242Z","last_seen":"2026-04-27T15:50:27.8242Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338515.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"579ba1395b741ecd50f0349907ec2f9f","sha1":"d2eec9d5688507f72ba1288be1318f643b14653d","sha256":"a284474f37ec491a0be292543551f80f5dc80053281f89b3f59fc81cf1b74195","sha512":"3a0be41307c07614fdd5926492ebc2aea2244d41967dadd917b6ad60d6a84916f436e8a28b1de5d0774e8f2a011ef475df2ec805d0b0c7da057e45b77d1c5e9d","ssdeep":"96:snon9LR/+sd2lHW41QAvAyetILvg8UIskxSvyJz8xtENzANl:oohRGs82QQRyetIczVK0EN4l","tlshash":"fe819656f73595bdc7b370d368091482b5cc2f99d20a44c9e2bb5e6233a9cb0a3853b9","size":4181,"data":"","first_seen":"2026-04-27T15:50:28.106264Z","last_seen":"2026-04-27T15:50:28.106264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338626.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"516ecc7d7bed25c28b2e4001f5b58704","sha1":"de036f04f656edc2cdd13d341b678577362bc569","sha256":"81eba983bf5d4ea58a38403c02d57a039294cc26e7a32a93189b1699969ea1e0","sha512":"6f6a7fc9ea8957d68253c9984c2af0431005f9021cba838aef1121d03b59b35c58d4ba4bf1dbd1059a6c59e299fede701c6910dac41c828225e10f5e74a2e1d1","ssdeep":"384:ahxak0xRC1s65MmZXrn/y+BHm7zR8KKQUPnJU+LpZiZIi:ahxadxRCaIfZTy+BHm7zR8KKQwJUs2ZL","tlshash":"91928240f4178abed3fb9202801c28407058afded04284e5f1fe6c552b9adfa9b5cb76","size":19414,"data":"","first_seen":"2026-04-27T15:50:27.988424Z","last_seen":"2026-04-27T15:50:27.988424Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33819.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4e7b4fffb991dce9f0cc096969f44dbf","sha1":"2114d4635bc85ecef6955bdc1d2a54bf95f49e0d","sha256":"60ecb219cda2f9a2aeac5caa8a29c2ca4c55b34a9e92cb84606c6fd5ea6814b8","sha512":"447842ec99b2d5b3faf25b0730c1ab4e1922a01ef114c25c8a824ea7411d38406ab0db9dc579a18cf77efe86f89647d7846ddf15bedd431109b81569f9fee910","ssdeep":"384:DXmpfIbuRdf5M4VCpVJPV2wM//VL9FatWab1MuC8iu876XgROZLWKlcxA68hfETe:DcZfCPRDMXOxC3UZLYx13jC","tlshash":"a8e2e7e532b2f1d612e728e240ff9447e23abd45994e11f0e2089af93c715c5627af74","size":31928,"data":"","first_seen":"2025-10-03T14:24:08.823761Z","last_seen":"2026-07-20T23:29:59.32839Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338584.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ffe7cd560e316ef6442ff180cf4b9268","sha1":"db43fbec53c7dd6ea480dfbc5503292dd56c4563","sha256":"c397b45e8d3a336c9d07d9397b8944cbb6a7f8a5aa88e1186ed0b97988778dd2","sha512":"003483ba53fff89cd5101d5396509eb649fbb3d1e5aa64dc9316921139bf7f18ca74e8987abe2db4612d9ce6f3ab8b7d88bd473c92a957ead09249e375794eca","ssdeep":"384:c30SM3kMNN7xKNSdHCIFYZylCOaA0CrCbnkDCe8w6n:hZkqN7IQdHCIFYMaA0CrCbnkDCe8J","tlshash":"5352b801b47494fdb3f1a104697c08c4369c2f25e1989ce6b2bbdf2b67c6cd02669fa5","size":13272,"data":"","first_seen":"2026-04-27T15:50:27.843208Z","last_seen":"2026-04-27T15:50:27.843208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338528.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3ff094a43a0d181f43f00110f883cbe","sha1":"de86f9b9c470fcadb954a2e322530fbd22e3b9de","sha256":"db87db4d1debd98cfeeaa15b772bfe42a6720103f483d65e048729d62c188304","sha512":"11942dc95ce2447628e5b29c542659c33f3dda5039c7f875d7ddd5b743b880823a3f4da7e1fc806d83df92c85e14a95466319bf800cd6dd2971a661951bdc1ec","ssdeep":"","tlshash":"8b0120818e96cbb9c3eb04606c4860b6002c7fb5e10cb05ea6ff09106b10d79c72af36","size":766,"data":"","first_seen":"2026-04-27T15:50:28.261124Z","last_seen":"2026-04-27T15:50:28.261124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338636.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3292c674ad19321c49c64f80c3ee6d0c","sha1":"ffd9ad6bc8f2032fdaa38d9bf0be4f57aec4aa21","sha256":"715ab8d4126f55192c8b0fe6e892189a8c497e7a9b231175b307feace14c80ea","sha512":"cf018d538def5bbcc65e249899065dd03b0ec1bf481ef3053312d3d20ba3b4afd28e65e97b0d07ebb323d418c8e999fde98cec172252176c540b65db48683b59","ssdeep":"192:J701zRLPG1ByvEw4VXH+wIltsWsFgQGDbmdVCDw2wagqav7dxYT2Epeir5Kgjmb9:6zkBH+Plt1sF/G2uc2www74T9peir5vQ","tlshash":"4842b412b1934dbcd7b3a15124282444a19c2fd2d006d9f5e1bf1d3a2befef59319b19","size":12039,"data":"","first_seen":"2026-04-27T15:50:27.949099Z","last_seen":"2026-04-27T15:50:27.949099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33818.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d29c4e39f7da6c382c91e4b9f8283a1a","sha1":"3bfb5c883fe62a5fe934e5be72bf527dec667f6c","sha256":"aa54d07681d5cea1662d7149f31b77c3a539fb40fc10274b61af1a28bd7b554b","sha512":"eaa2ddfd9eedd339f20342e9e1c4f99c4181f2a66bbec6dc775b0b8aa4b741eab44c7ff8c85c32d4c9fb2da96137218bce17bfa09103a202181cf69fc3d01fa4","ssdeep":"","tlshash":"b6b092c32cb1e2a24bb14582833584abfb05248c708b93a491a4036b7a1e6817ae0446","size":113,"data":"","first_seen":"2026-04-27T15:50:27.96963Z","last_seen":"2026-04-27T15:50:27.96963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338517.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f601d7c60a9867a0a88993c53cc96d88","sha1":"9b3c036799e4245b1aa78e7a4f637909b1ece92b","sha256":"e89c2ccccda887fd077785de655257bee59002dda172d3bf7bfd741db2a81573","sha512":"d5102147a2d22bffc305f07a4022425998f8a494a56f51446f62bce2fa12ad3f6737e9af43ccb44d8aaf82410d861a08a6b06cf669e3ca71b44fc966a590baa6","ssdeep":"96:pV5kpLtMmbI42mWTzCdu/OGOEm7khqXqAQMlppx49:Vkl2mbI42m+Gaqastx49","tlshash":"7991c700f5029dbe6b7385847461285cb5086f7b80559ec8f3ba8e1627f2e24e357677","size":4265,"data":"","first_seen":"2026-04-27T15:50:28.013127Z","last_seen":"2026-04-27T15:50:28.013127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338655.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a39402414dccd60ec4d3c51fd888b79c","sha1":"d034cc7f458b1402b443234bdbf76b3bf2024a86","sha256":"966bd9288ed490bfa6ea32275731e09ba06df31da0b5f5ef7bb39b6ff9a8de53","sha512":"158ce45f49d52eabb41336fe162aadc5a88bb9f0b161b5892977f3e1669def49e451f636d315a81d0c3ce2876dba3ce33834633bf13d241309427a14831e42b8","ssdeep":"6144:73yi5zW4kShmet71AtqTDBt7PmdDOLdnR9sHBba2QvN1biZI:7iCzW4kSDp1At8Bt7PmdDOLdnR9sHBbE","tlshash":"33342a81b262a3fdf3b2408d5029b105b29839adbac0cdd5f1ba9e571d57ce1126df23","size":234431,"data":"","first_seen":"2026-04-27T15:50:28.357972Z","last_seen":"2026-04-27T15:50:28.357972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338536.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a715f36bc4749c530625057161966a8","sha1":"295219c9314462855d73b70a91a9590a4b22a680","sha256":"931ce7b32c4685bff5c8e9d60b0763e9350529a3de8370bf1865a06ab1eb3f7f","sha512":"62c076fb09810789cf7090f820a3b17a2153bc4e6c1409be53b420caf1e5b187e6431caf3a9b2990c6a6c8e1df4f78fadd695763924b68388f464ab98ef1aaa1","ssdeep":"","tlshash":"4f414044b85998b9e7b0275420452d1d0b5cb262b3c968c493b75c710a92f7f93be771","size":2297,"data":"","first_seen":"2026-04-27T15:50:27.816637Z","last_seen":"2026-04-27T15:50:27.816637Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338544.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2daa5a9c278ef07eeec92701062475ea","sha1":"554715ab8a745e8611251e51a601fbd02e5d5ae9","sha256":"cb4b1f9c767c0b3566f7be2f791f9ca965d3ac1bd4225c5aad2c0309ef68bd52","sha512":"4c076048a5039db5349257082c19ed520ad79fc4e0ac985de7d0ea5428d99f28d5d007df9a774628207ee436f3a88e523b0bb76459f14abf1f0141fd033f1081","ssdeep":"192:bFrwC2g/wOzYSYLwrbugLW/fHMFXZwNMbUoU9:pMHgYEOLwrbDLW/fHMFJ7woY","tlshash":"71f132107b22d9b9c77712f5649a0000a1493f89f30448fae1ee6bd127abdb6471ab7d","size":8159,"data":"","first_seen":"2026-04-27T15:50:27.962162Z","last_seen":"2026-04-27T15:50:27.962162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338514.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"884ea1d016d91ed119ba030558d97523","sha1":"1b66c9ebf2ea736e954cc14176a247b4630126e1","sha256":"3a74c79d6a24df7911e626398d60c075d29687312d4189975766c4cf9b0a2586","sha512":"570e40d1633bf3786af7595f9c92f6b239d16469399c70f69aa3b1a9ce8531f4c6be05362d002b8f0f16f6bb915ca4affb7d2a8c25ea65d7b57c90325b8cd70d","ssdeep":"","tlshash":"d281b410b5428dba8b738498341a10a4f1046fb6c0556dcc73b6cd1a27f3e64ab2a2b9","size":4090,"data":"","first_seen":"2026-04-27T15:50:27.952667Z","last_seen":"2026-04-27T15:50:27.952667Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338656.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338656.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-eab9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNjvRTvhhjKotPyw7J%2BBI6kS1oNeOwtpH8lKWS7Sov%2BeE7UJsvRLhp1weKLqQQy%2Bg9jlJn3WnFXm5qANLagVqN2FHjLtZs4eQutv%2BpFvA6XtELCbTSVEhx6vEWZ25cSfybsp\"}]}\r\ncf-ray: 9f2efac92a205fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60089,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (59705)","md5":"bfcd1571814212e9fa4a9eefbbc84fcc","sha1":"64923c3104d35ca18335267aac4b8590f8b6d6d7","sha256":"56c6a21f1631260be029be862738ee79af5bec3d84e1f61e9ac9ccc12dcff335","sha512":"d6369545afa9071337d116bd95507d0d8cee23e8ba9d4b0d187f8efa2f685c4df15d50466fb2c7fabf6cb2154ab303ba443186aeba13a0f60ccdc6707219be14","ssdeep":"1536:SZSIrVagjnd/kj1xVq97Y/xGf7g9FnAZXD:SZSudjnd/kLVq97Y/xL9FnAZXD","tlshash":"a2438404b52799bdd7b3a192147854d4b18c1f9ac101c8f7b1ff9c1223aacf6a749bb2","first_seen":"2026-04-27T15:50:27.776624Z","last_seen":"2026-04-27T15:50:27.776624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33822.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33822.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338657.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-893\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBLh6wWaXzfnzzA4tTS0aKe%2FpQNG3nCuJGSffPGQpibbeb6j8LGWfQa%2FyaRtvjEsYZQJO67zwLIUrxjYC8Nk4nyxVs2LpBXa4%2B0mEAdfNWQVrh8GjVmrXzb6vPFPmoGmRxUb\"}]}\r\ncf-ray: 9f2eface8ab25fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2194)","md5":"eeb64f3a431ae94a6188d4196da862a8","sha1":"069a56595f593942dbec22658cfdd692ad836acc","sha256":"677e4b35f46caf1683503b66c0f28036dbb8a1a85be9a4682eeadcf13a2503a5","sha512":"43d9f8edc0e3a1ec9b2e86108a47d95be4d9b471a693c81e67d704d6f0c6e3c36682c2e85066b2b037a4e6997a46ece9a3c797da77c5f5551fd0d5ee49cc0685","ssdeep":"","tlshash":"ab412440a02397bcd7b321f2263d8449c4cebf5cc20699dab15f441331a6ce587e5b35","first_seen":"2026-04-27T15:50:27.783093Z","last_seen":"2026-04-27T15:50:27.783093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3389.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3389.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-a41\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLEOG3dJbLsRv%2F2zDomm3khoksfrCW6J2QVwQwrPHkBkFjC4AtcMLGmmNRUdWWFqgzvIZPoGRN4bMLpFG7OfXawMB23qDnxqgza44Wj3WXrUKV1WS%2BVcgK%2BELq7PrqcAQUMc\"}]}\r\ncf-ray: 9f2efad7abe65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2625,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2624)","md5":"104398257955333e3c88786857d9c007","sha1":"b902c024bb55770e613dc3ad37c4747e853ca02f","sha256":"b28fbb3e3f0101c480558978378e52a94cf1547dbf151b9aac4d62a4a08fd217","sha512":"49738430a6a98cf2f999ce9ab1a2b540ca48a84b1f526e3252c21bea7be9d604125724bdcad454295b1c6514f629c1f212ec3a432d550e8b807d36251e793517","ssdeep":"","tlshash":"1b5176147731b1fc93b660f4219d58a2d9c83b89c6096ce8f3ab0e256335d70f309a75","first_seen":"2026-04-27T15:50:27.786839Z","last_seen":"2026-04-27T15:50:27.786839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":321,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:55 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQjkT1NXCDphFqc%2FgvjNCXHtshlTYKEa8mp2TgFRhil7yYE5zJ0gPjHGf%2BlERUgFr7mGGzc3cVMVVD%2FsXHVDIO0L7mOujWbvU1173nkpN6uu5ehExgoWnh1op%2B%2FEpr6hZ4Xl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efadaae0bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ni19N9sBRpW7bEWdVJDN5BsIlGWvjpUmCWcF%2FzaTW7zzDhVtUBTFs3lOiTzk2n1puKheL72x9qqnum1BWE3mzJk1u3kG2rk5NrlQzW15hDuhrvU5iUscxxr23CcMcT5BWSau\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad20c53c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33829.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33829.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-f77\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VObRTX%2BV9zqoO4Q%2BJaxiqqCqgqZJG%2Fin2cTQzE3i0c3tQ7agTCdz6F%2FH8GelRfSRPkgAHsPTAx6YeIYIiG3M5b%2BPZEIUOsKgd20HOsJsIWSdTu7wdjAeoZpL%2BfV1ckScDov3\"}]}\r\ncf-ray: 9f2efad44b655fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3959,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3958)","md5":"23082aa1d18fbbd04f39bdb094861cae","sha1":"2143e42d39def6734f79c931be23f7c1b2916299","sha256":"0c8ecb3b89439d86e9ab56d193bfd6d5c4e8ce78724497208c8c14759be7abe0","sha512":"e144f31c40215fbcb8336b72631ba51997a5fcdd047975b3fab20bc2a4352bcade6d989a3b4633143748b9dd624fcd5d1bcccd2333de1cbc78553f2ea139b44d","ssdeep":"","tlshash":"04811f6ab99795be6c27e0783d1843c8889c3e86c8139381e627dc3506c3a733d73b58","first_seen":"2026-04-27T15:50:27.791994Z","last_seen":"2026-04-27T15:50:27.791994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33832.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33832.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-1747\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UeccL62hpXezoK6jdqFzNfeucS36iUwNurz%2BVIciyMsooM0%2BOQdbgSpvdnEg%2F8SVzWPnuAzDzuFd%2BmHuURXQDs3HNGnDib5yYIAwhZ8u3rZ3M7ZiLW7AQEmAdw5Ixqxrfom\"}]}\r\ncf-ray: 9f2efad4db925fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5959,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5958)","md5":"195458dd11acc0026a479c9f8b1d5793","sha1":"c9a8989f34e9401308267949b797a018dc446442","sha256":"5da918e3d4f4fa3e887bb7402716179e5a1e85f080b0a3d27bc05b7277c7f072","sha512":"617829ee31e00a3bb6545b7fdb07564ae45d0d2b3eda24bdde5782428c9d703825d41dff7a9d2e4f607d34609868bb0f376860ca7c4d08b6676c4648a5dffd4b","ssdeep":"96:c/RRQktpINDsL8R0NVBcDXo+P4MV8PAhAwNdx1XmBB:tktpIBsYRd9P4IDFzx1XWB","tlshash":"d8c1ef69be35953a9c37f16e3e54a5c8e0883ea1c4034e51f713ac2a48db7732e31d68","first_seen":"2026-04-27T15:50:27.800081Z","last_seen":"2026-04-27T15:50:27.800081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33835.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33835.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHkmkuqhPCrhNfpF7bVyDDchHWFhC56v1hUwCDmFcQjC81xdW1LhHT%2FZjdufu0mLnI9tAKoCXVP5KCwN99DX%2BuZVvwOGB5YasP7aqXklS9K%2FjTyDtONURR%2FbeZ3uIYhVVEPl\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-32\"\r\ncf-ray: 9f2efad50b975fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2bf893bc350f0e6eedba1d8358a1b39c","sha1":"136eb7b688c0ad53cb314a63cfe190f217221d6d","sha256":"2b866229c324b2d241b2e55739135ab6078c2112fb400e27e0a79d8ac15cd8a6","sha512":"4673581994ce49043042d3fc8451f297bec8083c2fa265bc69e67e1f1a9ed55d76c9108b1ab23f2a56d96791c3a20cfd5604381c99821790e6aa0ad9cfadd80b","ssdeep":"","tlshash":"b2900214350624041975a3619a8125e05d042917c541128248021c295a160d2f115049","first_seen":"2026-04-27T15:50:27.803282Z","last_seen":"2026-04-27T15:50:27.803282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338622.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338622.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-26b1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J3C9A4s0dN8EL5M7ShDOH77zimC%2Bj0kZaQjYE3ULXMtsBfShAYvh5ooFQ26Cj836ZSyPmBf5lrdOYEVr4eKBdY2j%2FffsEQvztDJHgAos09K%2BxfKn4wWPSM587WHdnej4Sh8t\"}]}\r\ncf-ray: 9f2efad54bc15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9905,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9902)","md5":"ef0484cf5a271d3c98f2c7019c15a6ec","sha1":"08ed6da1e40c8c2a2f974965e0d287bc5bd77f55","sha256":"871f0928b81eb06689367335bb0744ad9c5ea3d186f6643d4e7601d3d2b104f3","sha512":"01a009bd5242505867487f5dcf283d709acadc91bf65632b564919373cff982cc8b76a84d538b380ac6ce4bc886bd0f5490156ff68b84b30000ed9580a85b0e8","ssdeep":"192:INSu4WZOkhcY6WIKGMVRhGNzsUDZO1kwkoK4vk5+5bNpPAYYi511zu6X43PchloT:OKcIK3kNoYMvC4vk5ebzPAYYifDCchY","tlshash":"dc12a700b523dabde77335d150694488e29d1fcdd10688daa1ff681136f6cb48b98e3b","first_seen":"2026-04-27T15:50:27.8071Z","last_seen":"2026-04-27T15:50:27.8071Z","times_seen":1,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338513.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338513.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-81c\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZbfdZ5Bf%2BRtifuCSXT42vA4%2FBkSjHmSDxHaSYS25pUdH%2FKGO63d6BHeDSXw%2BzY20jfJ6rh13A2hkcF%2B16oDgE5QHbdC75F0kfoxq3kTtlcZE2z5TiERKJVSdv%2F1YmNnipqd\"}]}\r\ncf-ray: 9f2efad7fbed5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1773)","md5":"cdabb1c17cfd1c8bdc11b55a9a8a2b84","sha1":"172079b870ba41e1e995d0f7e81a956fab4e12b0","sha256":"45f0d89d5f9531d3faa44a4579f84d21dc11c6cc481d525efeee46d46d05bd4b","sha512":"34a82de221e667490287bfcdce82620d2bc91aa153301f69bd3c8e9b69409a9aa0595fa2af0fb4153e8925b0d094b976992576c82633eeae687ef21958d44edb","ssdeep":"","tlshash":"9241313aee909bfd965a01c02f4d48a40e206f66c28d9c4ef7d31a06172ac34878be95","first_seen":"2026-04-27T15:50:27.81011Z","last_seen":"2026-04-27T15:50:27.81011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338536.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338536.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-8f9\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idO53W2KlFN8O3o8Ks%2BG74yqqT1eVY35pxp0VXiYKaHC8K1bHpi4AxXeMXWr3ZEHuUm4VLzhSE2%2F3DUHEAUBma3LU4%2FWiJqvLqKmoFewEU%2FAzCLRq2PEuO1cHwOg7gzgnY58\"}]}\r\ncf-ray: 9f2efad8dc055fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2297,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2296)","md5":"1a715f36bc4749c530625057161966a8","sha1":"295219c9314462855d73b70a91a9590a4b22a680","sha256":"931ce7b32c4685bff5c8e9d60b0763e9350529a3de8370bf1865a06ab1eb3f7f","sha512":"62c076fb09810789cf7090f820a3b17a2153bc4e6c1409be53b420caf1e5b187e6431caf3a9b2990c6a6c8e1df4f78fadd695763924b68388f464ab98ef1aaa1","ssdeep":"","tlshash":"4f414044b85998b9e7b0275420452d1d0b5cb262b3c968c493b75c710a92f7f93be771","first_seen":"2026-04-27T15:50:27.816637Z","last_seen":"2026-04-27T15:50:27.816637Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338621.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338621.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-5b01\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDqW%2Bk9UW8TD%2FHESVzbplNrmzlZ5c45%2FsiIXG4Kvw8hWD8Jj%2Fbda9hQ4Rayp6Uopr1jsrUrJbDKfgxuabmCSmUllZ8Ju5KP8P%2Fnir8WQyRBRyBqTMmM2HPeDD3aYD%2BL9a4XN\"}]}\r\ncf-ray: 9f2efad53bb95fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23197)","md5":"2c3839a4acd7307fd40b4e88ad09a9c3","sha1":"914260cc79996257fd52809137f0d5661dd8fdfb","sha256":"b1a7b698e4c1441dea3aefee83f47a1344ae4d5449051a2dd4a3a0e370494948","sha512":"9c538b85adf0923768a837b95becb784e13bcfae790ae3e4eb3ae95b90d45ff5ef54c64247dba717b996f9fd8e3501bcf1d38a7492c9e8998cd18faaa29f1f0b","ssdeep":"384:2jwwgL3iTZpqopK0ytw5lfOIxIBkEbHODm5r/LJqHh05TtcXtkc3sSPFSlWjGmTP:2jwwcSLq1tRuGr/LJqeItkcckF3","tlshash":"56a2f76beb4922370fdb02a22f4e45d5f72caa68b3b515143ca9d54c2345e38c33b3a5","first_seen":"2026-04-27T15:50:27.819448Z","last_seen":"2026-04-27T15:50:27.819448Z","times_seen":1,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"9095.etherfund.cc/socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket","fqdn":"9095.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"172.67.180.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"GET /socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: 9095.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://etherfund.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7c7saUvR2pRf+1R6Y5e5jw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 27 Apr 2026 15:49:56 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6338\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=npUH9EqPRzFmh8n780DN2jdLkuMzQu7aGbtZTVf9W34hj%2Fwh3l11FZDafWNSBnPVJ0TmS8q3T1gYi4NHG%2FAOgVjIQ1gfM47RxWb%2FRaxS4XRdR4sQVn1OTxz1ALC8lf7%2F3RvbEw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f2efae26cda8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=481\u0026min_rtt=453\u0026rtt_var=142\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3190\u0026recv_bytes=1366\u0026delivery_rate=7729537\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=b3724c361bb24bd3\u0026ts=561\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":550,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338645.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338645.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-a38f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1q3YU406Y7JQSbjp952DdQKXzNj5tDHwqmYPiwNz0yEXQEw4k9o3o1EzZsqHlj2yE24XxN9zBYFp6LVqCQiyso%2Fi%2FkUC9sOYqCtSF%2FDarBn4xkVqhG9piIt5udcXiJvWhWw\"}]}\r\ncf-ray: 9f2efad53bb35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41871,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41866)","md5":"b900a366acc10ba4e693fc513a4f02fc","sha1":"3196e7eaa840fd005ddf09262d1558d2b2094bb5","sha256":"c591b552a82154233e37f54232c5d4d2a87c246d57e795c1a65c39b4fe34e3d3","sha512":"af67627d39780670091f18e1260da8d5bcc3b36e36cac7ecb90f648697d5b71171095123968ae11ba6c81b9eaf2373a046b8dced837571e8ff1e3fedcfb42a9f","ssdeep":"768:RKH7ktDAC7mutXqXEwjgJ9VATWqN+kSvKpj062glR8nAUvL:4baDdhtXqXEwjgJbATtN+k1ig0nFvL","tlshash":"23131914bb02027e87f710e138a92d82f1966f5dd21688e951b98f8113fae7467327fd","first_seen":"2026-04-27T15:50:27.8242Z","last_seen":"2026-04-27T15:50:27.8242Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33813.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33813.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-412c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYKaMtZrEoaQyAAzMFDY0aFD0p4xNez2egCMTIlG8zWvjnGE5rkXDv3Unz76fVv8LzbW5%2BOOd2%2Bj7rKy98rBdHzTCzgSzzFCU4gOZPZfiyjxx4rjYOUcCfj4lGykUZQtaNvR\"}]}\r\ncf-ray: 9f2efad53bb45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16683)","md5":"4b6339b166f1c2788940e12e915b58fe","sha1":"a5c161f7271bf9b11397b5ec9799271b6f5ed854","sha256":"ae2e114b60bc885a933e147fb521961ba83652b1a0a4ec6e6a2c7dcefd87ad7b","sha512":"634295d8d8355a15214ac8fa18a1aa810faf96aa1ff600a5d1e2572d00f595ad1a33eb516b374fd68974dfe5113b10f064abaf395937620991525ed50f9afbf8","ssdeep":"384:TX9jafzVAo+XE4ZVcGVheFcA53Dn7UGCJcz:L9K5Ao+04ZVheFcABD7UGP","tlshash":"fd72c5807996dabfda73a0a214ad0058e04c1f99c10a85f5f0ffad1509f9cb5933e77a","first_seen":"2026-04-27T15:50:27.827239Z","last_seen":"2026-04-27T15:50:27.827239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338610.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338610.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1896\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oP0w%2F3neDeD%2FeKTxLyirUGxChjTzUiWWgDyijO48tIXeJtrSjX2Wkycz8f2blI1IQIrA9byfAIU%2FE7cJ12KbUeo2pj1mrDsHctRm5c7iFUVWMsL6tTPp52znF7iZiXoS53%2Bh\"}]}\r\ncf-ray: 9f2efad90c115fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6293)","md5":"871904027ea2ff8b3930454d92652eea","sha1":"9020b4b56c0c48cc8ce8590a3ceba43050dbee49","sha256":"1288f65144f3917bdf403dcc24d7e73355aa7003762bd22c8cf7b0127f1edaf2","sha512":"ead52668adfdbe78dbfc1aaee0e2aa62a86c97fab347f50aec3b8efe49525efcc9db6a9acd5b91f081576af7ad8934960be074cf3a1a57e6adc3d86f52c2e2bc","ssdeep":"192:kxs17yozZ8nL0AcPBWMSa9ExfZDTZqKSJImlBnr:kxs9yZwBWMSWEZZ5IDr","tlshash":"5bd19710b213863dd77365d390198584908c2fe9e11688dfe0ff582216fedb6ab5477a","first_seen":"2026-04-27T15:50:27.830498Z","last_seen":"2026-04-27T15:50:27.830498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338516.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338516.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338514.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpkrnWf89JnthVsAf7MrAKWZBS%2Bghf4e%2F%2BSqYI0hrlx5AZciA%2BZwxTsz2LRLEFwlJfxXObS9Z%2BdOV8dBtdC6OPNMvbRwq029tvbzG4WrnGQBw7et1Mtlh65k1FoQBCoqWtyy\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-3f7\"\r\ncf-ray: 9f2efada3c285fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1014)","md5":"ca7e9f47bf4ce3e85ffe9c2219f5555c","sha1":"adf82aaf59e55aff5cfdeb5381320b5b41fb32fe","sha256":"3a85c7e7fc9b219fdd2b9322aebfb85e1c8c1a314f97894c2991bf9077c47d9b","sha512":"afdc62ce2c4174e762a1fdfa243ae441928baf8696394d9c7008d72891c7b9c766ef1da01039a5eee64baa237bb4dcadc3269f680a47ad39d372344d210e98ff","ssdeep":"","tlshash":"7b1102196603cafa97b9881095cc643367f8eb98710c35c9a277865d6313e1a2f0cb75","first_seen":"2026-04-27T15:50:27.83443Z","last_seen":"2026-04-27T15:50:27.83443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:55.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efade4ebbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"07f48b070b718aa3f9ea04345b18112e","sha1":"57b268cf85fb30e94f9450c1311d0fb3a47cc1a3","sha256":"157878b9ac5c5532a4ef4f305bd154c1e7fc7cf793e1beb8cecdbb0da41b8823","sha512":"dabbb18f1436e96e6b146722096af7eabea4fb913d3dba52a4d96e5d07ae9112a197c2a4dfcd0bda908d75fa8f8d30c652f216c5f9f37636928b105304cc5fc6","ssdeep":"","tlshash":"6b11b71f7fed893b0e0d168802971ce113d559504bda0c85234cf175324ebf9a1053a6","first_seen":"2026-04-27T15:50:27.837658Z","last_seen":"2026-04-27T15:50:27.837658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:57 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efae53fb8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99c5022130f908b4ecb48bf43a8cd24a","sha1":"a8a003c77f15217e49cf9c6fd5c2e29c6cdcb074","sha256":"cf2b62e9bf07edd4d154c513eb2377349df775f3d188d5ec72f09ecdbbe16a4f","sha512":"93f3f7507b7262387fcb0c227bf24561680523c72c2456b24e43e1132a86e15edc7be87dc79d1d22edd93e1003f41d784f7c3c0ea0a2ad2c7d753ed97285d4a6","ssdeep":"","tlshash":"3c11b71f77ec893b0a1e268802a72cd127d5190147da4c85134cf575310ebf9a10529a","first_seen":"2026-04-27T15:50:27.840471Z","last_seen":"2026-04-27T15:50:27.840471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338584.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338584.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-33d8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLB87SkSXCftVU6d0dhlI4h%2BqsqKBpLq8PPXCHTg%2FelsEtQEzKLuXciaDWpQulCicSTKkVuAEGqQxcc5MzgrqcoBSxipG2McyzGNZbCLXT35JuAY%2F5W453j4x5fT7kWHJSxq\"}]}\r\ncf-ray: 9f2efac90a155fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13272,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13119)","md5":"ffe7cd560e316ef6442ff180cf4b9268","sha1":"db43fbec53c7dd6ea480dfbc5503292dd56c4563","sha256":"c397b45e8d3a336c9d07d9397b8944cbb6a7f8a5aa88e1186ed0b97988778dd2","sha512":"003483ba53fff89cd5101d5396509eb649fbb3d1e5aa64dc9316921139bf7f18ca74e8987abe2db4612d9ce6f3ab8b7d88bd473c92a957ead09249e375794eca","ssdeep":"384:c30SM3kMNN7xKNSdHCIFYZylCOaA0CrCbnkDCe8w6n:hZkqN7IQdHCIFYMaA0CrCbnkDCe8J","tlshash":"5352b801b47494fdb3f1a104697c08c4369c2f25e1989ce6b2bbdf2b67c6cd02669fa5","first_seen":"2026-04-27T15:50:27.843208Z","last_seen":"2026-04-27T15:50:27.843208Z","times_seen":1,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338654.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338654.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-10a31\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Olv4TMDsPLXjWgJ1JZ5vc7WLBdaD5nUPiEL2%2BzUu62S7W489YdVY66PHKdPucDHuL2szjOsQDcr%2BzZgtCjhva7hLJ44QJ8gazD75%2FDK25LE6aamvNTqmh%2FRMHKJF4c15gYp9\"}]}\r\ncf-ray: 9f2efaccda6e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68145,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"20e298f66c9a137d5eac8b2109ae3fb7","sha1":"e60577b0d8113b920fd4289555bcd030c0f0bebb","sha256":"ec4d233252e591cc0454c76090f01ff52d8705c192b10a4b6b9235e80ad043ee","sha512":"9e2d3669e822bce26bfcef835f7f4d16a612aeac956744858cb023c9e1017d3b3a91ffa24987cbea62eab8c95c68ae0ecd4f28615a939512586f62788232b786","ssdeep":"1536:iT1yaAxYc8KGzoWtEGoxFzk7BADRFkoVd:ePc8KVfFzkla","tlshash":"4763e740ba3199b9e7bb9091e0a90944b28c1fbdd02044f7b1fe1f9527d6ca12355bbf","first_seen":"2026-04-27T15:50:27.846045Z","last_seen":"2026-04-27T15:50:27.846045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f2efacda9ff8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dfcdddac71bb9d20cdcb09e9927c4ee8","sha1":"ede090f45b0acc1d7a1ffc9cd2cf1452c6666c16","sha256":"05899c7146020ff48a236e0fb6e08d44369c99ceb16b7e6cde60fac48d75854f","sha512":"4edd5d94fbea6820fb153cdcb5c0c49796cb67829e6fc404e50c48376a504f9c6cc2bc9f4d8eec9724bd6b924268c5c6300445ea1b55d2e1b43f5145c85cb861","ssdeep":"","tlshash":"f111b71f77fc8d3b1a0d1688021b28d123e51d004bd94c9a135cf275310abf9a505196","first_seen":"2026-04-27T15:50:27.848738Z","last_seen":"2026-04-27T15:50:27.848738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/static/img/home/notice.svg?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/static/img/home/notice.svg?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZC7%2B%2FzcbgoUcBiU9qmoUaQK991g3Hpp%2ByOLWx%2BG9bLn43R1KEUV%2B64d2OIyO9DcezWo2VS04mBXcMzV0iNmVJtOWrpfE%2Blx%2B7dSP1AXdfPIZEF4fvtoz3Rm5Sd%2Fri%2BT6KfW\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-3ed\"\r\ncf-ray: 9f2efad0db235fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ba6c18bece0f9d811538d26cc0f528e","sha1":"795aea736b5ef889206da20733f189bc5ea26c39","sha256":"aca26b8c33d1afa42af449aea6303685a21ad42afa4c30eae6fa69e698583cd7","sha512":"f97aa8d6e6f8e065d7850fb2b89b2f3b170d5b3efa1682dc079b1ba386d7722dcf6a5d59e6911b1cd19220be8139c2c7d2a39bd7931db8b5d4745b3d29d96d1a","ssdeep":"","tlshash":"e011c9f21b5d91acd29f9b8b0f3e0108237e6032788b80e0674df7312407968eb63c90","first_seen":"2026-04-27T15:50:27.851518Z","last_seen":"2026-04-27T15:50:27.851518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33891.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33891.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-15f6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUT7noaNKUfJVlKCqsFgWDwT3kSVxp2NhNfY118pV9RzCmjlsOm1BYaKu8DCb0c07YOuSTs48TUYTSAS4HX9Z%2FVGTQVyo1USm9rpmbLS8opr0EdlXLK0dXRrz0rmMPheEh2o\"}]}\r\ncf-ray: 9f2efad49b7b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5621)","md5":"e811b59fc7d1d4b61c0c0882b23cb728","sha1":"fef24a771b58b7ecfe363517f6649975d068a3c1","sha256":"17973974ac0789a63f8c162bf22f6bd9755a348f0d4c6ba872436344ba09e6b0","sha512":"6f68723a82f0140316e731b9014567e50c4a3a27f1e5fd8264b0b940e0d9059efe6d80b02ebdc9aa6b3036da8269ff08b99aa58b0cc4a17ea1f15ffce49e2f07","ssdeep":"96:oy5yBpiU215WRySfyB3jaK25MAlEfztCWf8dsQd9nGMGbM:1sBpMDxSqB3japMgiCvdx9GY","tlshash":"4cc1ecf7f84944294ab3eb2cbda0abdc4189b1e1e51347f5f79b6b6007c67b0082171a","first_seen":"2026-04-27T15:50:27.854305Z","last_seen":"2026-04-27T15:50:27.854305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33816.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33816.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OdtbDf%2B3ayFD5KMubeF%2BtpipeBAiJcBzLmovOmVQ0PEa7HmUEzbWU0UBTQmZkkW%2BvfJBMV85FwN94BV%2F23G4SOm1pe0a4NnlvDeKmJZwuva%2BIzcL75g2i5Sdj9yLuYBv5Qs\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-280\"\r\ncf-ray: 9f2efad4ab835fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (639)","md5":"8dc250dc00bfa34a10fb6932de7cb6b6","sha1":"3dce5d88ed743523e655d0fab2c9a520b08f312b","sha256":"2c54ec6cdc9526136f3c04c81ba609d7aebb3b1bac6f6844dcb31fb408bec748","sha512":"81a34821d94ec47b090859669d3595cb3170257e5da5c21b2d48cf7a7d2f91dbcdd487b07e3b3c9517d155e85e0a7da356ecd15d5b7ea11f6099c7f00474e7fe","ssdeep":"","tlshash":"93f0a77d92fc4c104879dbdab650b7144404b931d686aaf1f2e15f5d08d66a213cc28c","first_seen":"2026-04-27T15:50:27.857064Z","last_seen":"2026-04-27T15:50:27.857064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338529.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338529.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnUzV2ydKrPhIMfLCENp51dwjfbev%2FNd1PuAsBkZAsDT2b%2FFvYHdkSMd1WiQV3aQQSarg%2BzrmX6pErbCGVHWqtc7Iw5LAyF7PnCCQ8AMamp12udTUGGJ7t1j7MjeowtPq%2Fga\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-32c\"\r\ncf-ray: 9f2efad8fc0d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (811)","md5":"df6819f9e5c02cfa87691c33fd74f958","sha1":"ba02fb208cfc065c5beb1ad35a46c2f5889748dc","sha256":"8255fcf7e77338e3f30944a0a54092a4a4448a70ec32ad46aba9b4ae37571c90","sha512":"2a33e92a13470d3f18c29751c2509ea71aac84f9bf348bf6f26b737b07ece1cc35dd82772efc8d225b4b4f46b0f6645d9e587d5c17db6c8b7b0bf1a68c8261b3","ssdeep":"","tlshash":"7f01af204ba9e2fd92a30165264432133c407de8d288b89ef2e6060d6f91db4da55b69","first_seen":"2026-04-27T15:50:27.860084Z","last_seen":"2026-04-27T15:50:27.860084Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338533.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338533.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d4e\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpaygeBvd7uWFNOw3eXz2aeZ%2BD5l%2FlpOK9CiVkIUMkCci0q2Z3Hz5YU4Vpb2YWfnUVv8%2BaeYxnX4mvydOysfcM9my%2By3pk3TPgR02fTlsPb%2BCGCnArwseExJ7tTkWrMaPlJH\"}]}\r\ncf-ray: 9f2efaccfa775fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3405)","md5":"bf48d3c184062685d1486ecd312cb0e8","sha1":"cbe03c719ddcb77a87367f2a0506f505c370a0e7","sha256":"67e45b6efc4f2009dbd27dec85acf2dda38cc725463cbb80b149d072a671781d","sha512":"bee8ace520ce5b5398b04ff09fd24f7b30113ed5c0427634ea1b54e91ebe406d090d625f189893270db8eaa252035e19d2adc58866f06606951b62bf2ea88a90","ssdeep":"","tlshash":"c061248234e9ed79d71a5246625706b1b32d2390e12a99d4b02f5e19375fccca07fd2c","first_seen":"2026-04-27T15:50:27.862746Z","last_seen":"2026-04-27T15:50:27.862746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33833.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33833.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LM6H7PipaXDdPJChYyrUBMitVQ3ljV7qL9c23YmcdUCUgGXLpbaLPGAYsElBdjINf6E8jMTAqhLESYLpx2OH5ooQrw4P8hSFDbJopF4UlTk7tPu0ATW08go0n%2FpI47fMrWO5\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-d9\"\r\ncf-ray: 9f2efad4eb955fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7713bc4490c55427ba275a5726264f80","sha1":"4a17becf42538c36b1efc089516d0af631c3aa7b","sha256":"f7baa39be93db009452a1445a214300818664599c1c8f2419286d71386169cc3","sha512":"e0ec75749b4045e25c5e08a358c9bc536193f7d29173b468f693c68732c4bdbebe10db7aa6fff73cc44e428fcabea3fe06e1886def8dd66dd06b20deb6764c32","ssdeep":"","tlshash":"d7d0a77b3595b1290c9285c520023e7e0313420399277314dc6fd9709e92021170209c","first_seen":"2026-04-27T15:50:27.865425Z","last_seen":"2026-04-27T15:50:27.865425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338526.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338526.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4cf\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bnh0mhuJcQbDPJdYbxxBhdS8BagMwi5C1Bx60IryG7hHNGYA%2FEez8Um%2FwJluanKqSXuidoEyDlxGBaOB51ETGScyp1c8lvfFYpNhVhwEv0KEXhVxCSY%2F60TCweJtvtFJ1xPH\"}]}\r\ncf-ray: 9f2efad8ec075fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1230)","md5":"f5a4e3f118b012a07c10b882e7678f9c","sha1":"6cf426953b69583999652883fef025419c481e6e","sha256":"ab6665bc67fd767a646682621c9a26ce281f0598286bd5f28b46fb996e81e33e","sha512":"1c8d0fdf951f244902808e191d974e813186ab9634420b203a58b82baf98a50ecabe908009fc78f2259be45a2afe121d2d43e50d74f96e0ad3d4178f9e4c578f","ssdeep":"","tlshash":"e421df039783a23e837740103a4c142025547fa7b05ce8ab61b656d9a7a1e79d75f723","first_seen":"2026-04-27T15:50:27.868082Z","last_seen":"2026-04-27T15:50:27.868082Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33820.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33820.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcbrzAk3yqQLai1jEPj2jGHzYMAK2c8UxrrgDtFuPD%2BkEqnLRwVF6EWhVkmJeqc%2BzHV%2B6H5k8RzhKflXWE2dijt9p3%2FQf8tZPS3xLVqX8OCsJr1UrdIYGqksczVP5YipVFoy\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c25-18d\"\r\ncf-ray: 9f2efaccea755fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (396)","md5":"0dbe49a894c304482c313eb94ae6d094","sha1":"85103a4453dbfbba53c407ce99501bfcbcbeea16","sha256":"5d516d61e0d27b32e193da3370c7f9e54715c63d257ed94fc0be0c8a7ed5554b","sha512":"d7c3d0f2edadec0318b68611389738936e5500dd673f20ccd9d3baa1fc6cf97da77720670d784dee4f97a96ac9c8110d4be46bf451aac12805d19ef92adc3b2e","ssdeep":"","tlshash":"c8e0611225d728e80b7c0455091eab71d5500b3c32dfd8dfd7268e4b5561c6d57bc632","first_seen":"2026-04-27T15:50:27.870795Z","last_seen":"2026-04-27T15:50:27.870795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33894.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33894.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-3111\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzZ44KZ%2BuoQh4JVOhF1OBhEXvUb7Ds5zhwfjuUu41nY%2BfWRR0%2FKTs6uiJNutpqcPxz5cx6xTRe9OFc3c3m5DUdeHCjJ45uGLHaZCE1pQ90Z0zO5WjXY3b8SPhsnaA560hm1F\"}]}\r\ncf-ray: 9f2efad49b7d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12560)","md5":"f038949785b94446d80a61dfb47f397f","sha1":"9c33d230235ae2583e31cc742866412790afab60","sha256":"6fe45ac97f9f19ad3e66ae2130aeab64562fe0e40475c3cde71e81f7b53dca1d","sha512":"1807a8e0dde7bffb4572fdebe8649d8f4a2359e50adf86fce872d52d0f4b0b3c8bcf4db6a518d1d8af422275c0391f32ca461aac67e49e10681aac5f43fc8b2f","ssdeep":"192:19QuGbiLgpLdg6rlRl0lqp2vsGG4CSwselxxYRWP/z73tc8VlLG8usyiR16HXNWU:3dYiLgpLyQlRl0lqp2vsDfYeA/2ulX","tlshash":"9342612af569963b6cbbe97d3e608bdcc581ea41c6020b21fb475d325dcf6a33420674","first_seen":"2026-04-27T15:50:27.873659Z","last_seen":"2026-04-27T15:50:27.873659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338537.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338537.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1721\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxVrimAnMCuALkAiEu5eqWbrTZdbr3Y8oCZ07qR86LrGPONEPHciEO5l84frzbwumnUtdJzN3paVnW%2FRpJd4Xp%2F%2FHXqxGeN3%2BLId4aTFt04q6ZKoB5rqGVRdSxmeeSuUhAI5\"}]}\r\ncf-ray: 9f2efad54bc05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5921,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5920)","md5":"2a3bca934889a1d13a5bdc7d3c87b67b","sha1":"1a0fee238fc1e0e3abcb0c4ba04149d7aea85dbf","sha256":"d1d4eb9c602cece1819d1639ac07ae5877661ce1bc6fe47e0712fa1b7bf2c97d","sha512":"adae0b67312f84bc1dd071fcc8628abea445c728d4f64b1752742b7e21ee6dabace93d40a91308e7c7482fc0db5148fe4eca6d76470128e86d89a5c9d4021420","ssdeep":"96:ahJ1+dliO9mEWyNnD108UwthDta8nMaQVF+CrJjLlJghiCPKfVynm+UmzddvCdmt:ahmdlIaqwtJta2MaQHJjRGiCay3rzbCS","tlshash":"abc183017612983edbb651d26d381441e0895f599308c0faa6bfef7927cbd79638873c","first_seen":"2026-04-27T15:50:27.876307Z","last_seen":"2026-04-27T15:50:27.876307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338632.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338632.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-593b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbm96CmseSk%2B%2BM1FJx%2Fue3gkuSdIZgMGPMRDHyjt5F%2F0BOIW2YXBJ6n9XVCdKExdBn%2FigLltScl%2FSQeECXxq7APwZAwrb5GxsUs%2FOByk0RMZloXKdjR4vidC3c0D43snYEyw\"}]}\r\ncf-ray: 9f2efad8cbfe5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22842)","md5":"8c9a72e31b468ac74cb4d25f796f0b33","sha1":"a7f8d3d691ead8d9a5344db1a6c835ca54611f6f","sha256":"19cf519010a8d6f1c812c256fb99153c8bd16d67c2fc5bbf8e630613bc3db352","sha512":"5186dc3c06e5fbd8f2fb35fe922cd925a768995324e693101e519839c30db058f215e06fe842ead1acf746bd933b1ef87f4543e9933fd93178564316af28d062","ssdeep":"384:UP/QiadPllHnKJO81aAvDtXR95dPb5u1heIg4V3Yr/wUWg3vS6lufuJvOMIruP86:UP/7atzHSvDVrb5ahep4pYJvOlxg/FN","tlshash":"2ca2d701f906defdc3f7d15050a81548602a2fd9e406ccf6a2bd590667e3db4eb25e2b","first_seen":"2026-04-27T15:50:27.879039Z","last_seen":"2026-04-27T15:50:27.879039Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/address","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v31/earn/address HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sMlH0CIcIQi9xKrkbpHkw7fggnm2w2xq5x%2B1BmEWXENmmEr1quvDgDx50CiBVsWeHagINWCzXgGd0l1kb6e2uw87DA5XoAcg%2FFIaiCgVXkiuSONr21hlunuc38ZuQE5Y7BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad09c948be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/static/img/home/lang.svg?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/static/img/home/lang.svg?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kqt%2BXdzf14H4zUYIp8phSCoVWxGOoEYUA%2BGFuZuL3qFR7HHAVF2uvytfpmnWtRcwBiP0J2g1yCr%2Bq5rqKzYRhFEbrUe8SEEj%2BMcPp2scxNClmyPCa1stgvre7t660lBP1XGk\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-539\"\r\ncf-ray: 9f2efad0db245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec2aa9665701f092d61e72f60a594c8b","sha1":"0488e313ede5e5a0ecfba48aa3f9af1e16e03e5c","sha256":"f1ab9f4f56bf13855aec31c02b07fd243003854c0cee3ef42b6f23917be41337","sha512":"0dd917e19def646b2c1242a853aae645b9e65fe327cc51748e6f405fcfc16d7168b714bb8fae6f60bf592142a582437143da42f7fdfe0dd8bc19272719a2cf4f","ssdeep":"","tlshash":"1b218ff8592922ee486fee26992b5022571d54f33618c1b8c9dc9198d4475dce71b814","first_seen":"2026-04-27T15:50:27.881724Z","last_seen":"2026-04-27T15:50:27.881724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"9095.etherfund.cc/socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket","fqdn":"9095.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"172.67.180.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"GET /socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: 9095.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://etherfund.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: iBQjzroVazWB3TAgivtNWg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 27 Apr 2026 15:49:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6338\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ULW%2BDKpBz4SuPbS0ZmUI0DfBdEzVssCcixUmCb5%2BGYAPU9j1luhaFIS1TZht3DSKBBlXZUa06iBl6F5CiFtYkEjYoPcAvzP3on61T3mhANMBf0BD4HqenmYLXD6YAfzbOqbvZA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f2efad29f225a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=555\u0026min_rtt=501\u0026rtt_var=191\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1239\u0026delivery_rate=6196861\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=a915b1c37e82e2c8\u0026ts=553\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":539,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33823.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33823.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7W8Me2eg3WwMIGF5UC1t4sfsjLzIxD0PEZAV%2Fd8FHCz0jf36yAXpGteo7DK8DN%2FRyoINaLMkMxcLcBPjTQymGEmQtbpfqNMq61EaqIiKGmDiYveulSNC3KQ1ziD03E1fuRW\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-1f7\"\r\ncf-ray: 9f2efad46b705fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (502)","md5":"19d6290c8c8bb492fa6d980075675f9b","sha1":"d193b10c520334c9113acd1bf243fd39196d485f","sha256":"c7a7ecc6a270ec71e512fbac1d946288a6c53ba0680acb7c405b6158fdf7dc40","sha512":"927b18f57fd2d94de208f5f9c9b20499b27261f87425db2ded4033dfc0270a62b8650026690ce313f1a91f516a6ec078e2fee0003adccf33da109979238e19c0","ssdeep":"","tlshash":"acf0c032f291973e341b8d3d1bd4c6c88104dd418e170b30f227aa7141cb1930b3113a","first_seen":"2026-04-27T15:50:27.884508Z","last_seen":"2026-04-27T15:50:27.884508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33815.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33815.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a62LcHGznFSp8VjXcJHTmM4P9sKRRV6HfgVM68u0QQblamgltFC0wKazq6I6Q2iyLcum%2FQhNpshjt%2B%2B%2BfsgnJPpd%2FWKnsrsRCtm62kClZUldkmAuqladzEFcs75dwGCqmwgn\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-26f\"\r\ncf-ray: 9f2efad4ab825fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (622)","md5":"7998dc331b77628d793e09be1dc91681","sha1":"5bb10e1987fc076f0d7ac33d879d33e42466e9ff","sha256":"50af476e123ec0e70d55f1d538fd8052d8e4c32ec901a43e3b04e480d5a715d1","sha512":"1db6d98ab271cd00672a03f623f6c88365fe3d46146fc5a389c3c6dd4d03fa45c6fc4820300e9da28e981c6bef23a1c8f4f8284918ff5ddcce2940d2c8493349","ssdeep":"","tlshash":"44f0441ca208d5366a77dbb4fdd4b9e894056e6ba50263e2ef839c058ce23f6260553c","first_seen":"2026-04-27T15:50:27.887323Z","last_seen":"2026-04-27T15:50:27.887323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33828.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33828.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FgXD4o5kSbvb4vwGRZXJm4gn%2Fhjs9tlIVpC2szjHr%2FD%2B3TlvED%2F9ZVRerxfsskNeNdHMNvdKnAawctaXmSD66bjmaJUel2B0XsVsMzEPK96Jh5VFO9FfGS2ccfN5tD%2Bjcjm\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-1f9\"\r\ncf-ray: 9f2efad4cb8d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (504)","md5":"2010501a57be719505a7be26eaa06c95","sha1":"895d795160e04ff7aeee748d656961af444da380","sha256":"9110b81c408fd29c3ef1092a55a6dc41c298878df78a519974f6140c4ceb9734","sha512":"082d86f7f11c1af043d6d4c3d2ecc432e1b99c1da52c13f0167ebb300221771335713579bfb6d525e451e30122c613a2ef71a9875c3d233b8c3e2f0b55669c47","ssdeep":"","tlshash":"e6f05030b56d24256d73f0d53ccc05cdd9847f60d5125195d6a76c3545c76632b33459","first_seen":"2026-04-27T15:50:27.889985Z","last_seen":"2026-04-27T15:50:27.889985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338543.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338543.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4bf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FpBaCyceaimC6UashEV0IMMUWVmALMqDf3B2mvCQq58ELVKmvGytpuHFGKCTTDMJ15P8RVYaV2iEh82ZXcQ%2Ffcjn%2FXxRDHydHCTFKSDOgm19AqxcB%2F9yITTBUL365Rvpotf\"}]}\r\ncf-ray: 9f2efad55bca5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1212)","md5":"777b25bf1a5af2b5d9805363c5b557dd","sha1":"3346e62c39e26d3a3117116f5153249e215e0f47","sha256":"1ffe272809ef0b512bdab064374cdcddb366afa6be1d5f6712fc066f91270ddc","sha512":"994bc8c88d11094fef146d59597f918290e7d3c069add55171f4e7f0b055424e4fdfc3e99092824de74b4b443aea4b8caad4038ea4f5ab7e917f83466d299be5","ssdeep":"","tlshash":"c72114003e46c9fe97671141786d8820d1897aa9a24cb8d6f7fe1c116677835738b736","first_seen":"2026-04-27T15:50:27.900709Z","last_seen":"2026-04-27T15:50:27.900709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33884.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33884.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-341a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQOeH9mazsiZMnh3l2DZULq8bttbebO2ySLNLJ4SYglnUSayUvJKcekSMdIuP6uMZ5tY9W7nSHBoW4D4IKV52gUiGVmdfVj5HbelngtBWZAG8z5zw2d9CytqOB0n1K%2BtbPNq\"}]}\r\ncf-ray: 9f2efac899ff5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13337)","md5":"0f053ff5ba0438ba8cab4c67b11cc1d1","sha1":"c6a3d9aa5015d520b568cf97ca30b0c0fea1ba98","sha256":"24ccf73e869e5f2ce79e5b7c75e425bb81d9daa0f3e14f085791505147f7f4ee","sha512":"ebb3af3a5e1e169dc84f56e672062cf9109daf87043d4073227bd9dcf6bdc50d479e4dc77c18e9fc41b6ea2c4138f2b7ab2651ea009bf39f630e070e27d2ea5f","ssdeep":"192:/GEzd/8Q5Co10xqZB4BpWkVD2DBQ+n9CSTnsF8cAW:dbBgkYSGm9CSTSR","tlshash":"ec52116cb518a1a9ad77d16a3d5ccbcd9100bea2c9130782e797e93189c76f33d3129c","first_seen":"2026-04-27T15:50:27.914768Z","last_seen":"2026-04-27T15:50:27.914768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338521.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338521.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-630\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECFdsyT54WBXPeX45YdFybpMlWX6dh6oSObsLzVnj1Jis03zE1YgetPRBmCZnlVSPxP%2Fi9CR6XHJeZTUvFwQxDsBhrhbE40oXxJMOF8DA19903chFmUHy%2BxJXHxt58dvW4eP\"}]}\r\ncf-ray: 9f2efad52baa5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1581)","md5":"a7d50cd240828b7dbcd14feeaf33370b","sha1":"a49c02f82d646ff37a7feabe5011c25f4d2486d9","sha256":"1ccadbff33e512e4b023e0446d626e266fdc66e8a68d944ddff3aea8bb5fb51c","sha512":"0d842248c8c7b1f1b48321712f912c266bdc478c61fa299a073f3da10ee054918afee5583fdd4da3a717c4679448d6130cfd82653d0e79b617487e73aa89b750","ssdeep":"","tlshash":"9a3153049a3295bfdb5734161c1e4085e1c87f6ad548a495e3bb5c212761cf6876e322","first_seen":"2026-04-27T15:50:27.919674Z","last_seen":"2026-04-27T15:50:27.919674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338627.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338627.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1294\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr7OBssA6Tdzy%2BWwyHQeAJtFJtaHB2NTlUpXtjxpruScEUri40dc6QGQQ0A3Ddg0Hotjdw7CMaSTOFhADrXGzya4QbnLJklWiu1OycaWs0X95DXCSPd%2FZh1wdu%2BUecQ0rzpH\"}]}\r\ncf-ray: 9f2efad8bbf95fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4755)","md5":"bbb4394b0c1757af43cf752dc3cc75b9","sha1":"1c0a30f6547f02070cbb70975f756cda892a3563","sha256":"9818e057c55a6cf1aad05ebedc6959d2ab4ebc2d2c6e53553fa187e2031cfd5b","sha512":"bcf5e7d3e9e7f19526aba8d0d25641509b4cdf42475f126179a8a79fa0fccc2bf47cc44960ac213f327c0447f6da464c252c6cb43ea4d6c68a12abec3f1d48ee","ssdeep":"96:pOFYwxuNrTnHxlbcPFWWOruFfLz2Ardiw53scLBVpchX7HE7kecV2MUCWt+v:JworTHxwVOmXriwNscvqxRbV2B+v","tlshash":"49a1b642f505953c933bb646c0a944c6a1ac1f94f00a84dde07f9c123bb69fddb97a36","first_seen":"2026-04-27T15:50:27.922728Z","last_seen":"2026-04-27T15:50:27.922728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33824.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33824.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338538.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-81a\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zy%2BeC%2BDqfalqRF5lhwsK0FJUpH48S2UVkJPk0G%2F%2FEUhggnrC1NTyfvkrn3aZlauEM7O47gjZ7CTnxWsC3o0kiWVi46Cbt53hDcz1Lpdu%2FAqqcDphBF8uLirdEArFWh1Wg5F\"}]}\r\ncf-ray: 9f2efada6c2f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2074,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2073)","md5":"0cc2d88c590745d80f0e805513796790","sha1":"847e3be21e11c7649dba43a67da293ffa89861b9","sha256":"e0c7047347265f6eb6ba32f103267b4efa9e8c1e7fce3a9ca96ff04abcbe5ef0","sha512":"5285f083002ffea9bcd1c19c6897e3223fb2530c91ec5f7c772f00444219b4be545530e096828d92474ce1b85e43e518da78d21d70eb63e4d1c14cd659e79d66","ssdeep":"","tlshash":"2641659236aa66f6c3f40a8024a815dc59792b58781fd8ef326e5b5213f3c0ad42dc33","first_seen":"2026-04-27T15:50:27.931073Z","last_seen":"2026-04-27T15:50:27.931073Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33827.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:51.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33827.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-c960\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTLKPIejfee7FcDlf5L6mxFoSDS9QoV4VII5iLslN4OiWQwpGRg%2B%2B9sIudPfWV3qqFKCnTpfsMKfuLVR3O7qSJpycU7U%2Bg2%2Fhd4TljEAkupszdKiFXPI2njM1tMNoJSR3Q4L\"}]}\r\ncf-ray: 9f2efac2795b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51552,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (51538)","md5":"db1900db62c430d484d3ee5b23aeec4a","sha1":"d8e96f6d6ac764f0abdd4178fdb931fc2ce70394","sha256":"b9b591b13b0cae79f948e9850373c1d13b7dd92097a088eff539c047cf2dec8b","sha512":"0fe651a3ed47ac8c8284f81803218efe95efe468c76ae67f8dc8087947b2fd4619b0717927249d0fdc9623cd0a3b3a828b80c541974133633b3f1dcffbc31696","ssdeep":"1536:MW3wcC8Ye+FDsHU7yoAR5DKJ23qB+xjKXCUXF9:MxcC8P+FI07yoAR5DKJMqB0j6CK","tlshash":"9b33f918a90b1d1ec7e213dd7791fd6d1a280de103a684fd0a9c38a603e3ef4f65b919","first_seen":"2026-04-27T15:50:27.934066Z","last_seen":"2026-04-27T15:50:27.934066Z","times_seen":1,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33874.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33874.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-111b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EBe5V%2BRYjtDBBTW85wE%2F29rW5Vz9lCzvBzkaB%2B0me3HlR8OYehwMQ%2BJ2FkZq1r0smY1%2BRJovqVUQ9EImR%2BAwrx5ES74jE5j3VY7B2QyQoBywfDv7%2FCsVRJdtazPgdCQvITW\"}]}\r\ncf-ray: 9f2efad4db935fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4378)","md5":"e6acc89c71b0518c4a88a23b9a7e3a2d","sha1":"334a06cf1eb30e2d75ca2132d0cdbc3d6dddaa15","sha256":"f993f4b09aaa23906145aff8190a101e546837ca1703911333f923eb45320a07","sha512":"f8a8fbb8c89a6dd99d6507586f743e3b399d473aaf09fd18bbd5250430dbade539524ee98c6ed8c8b43e139844302760eea808612801edad0d54b00c85f35eef","ssdeep":"48:c3z3wstu0z16LWZSq/NfxyttOZ3wQVoto/ySSZ3A4IEmwqVf1QekL96w9H3EQB4+:cDf1gCqg6JSQ+3bk56M5n4mcPi","tlshash":"cc91ed71f269b63ce833d5663e949acc910c7a41c8231b94da13ad355ccb6b33e36368","first_seen":"2026-04-27T15:50:27.936646Z","last_seen":"2026-04-27T15:50:27.936646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:55.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efade4ebcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"51acccf768d3077ea46daaab22d26567","sha1":"9937d20c9fc1d32170a9a99d1f8538511fbab935","sha256":"17d2c8f167dc6697381405066dc75ad7176fbe717418ab3f4633c8c68d17af7c","sha512":"f50281936863edb9c73990cd66a7c51fef7ea485cbcf3ad3d01c5d87f4414d83a5c9a6e292fda9f14d27be21c080d87fd106c8f788bac1225967cab438d35cc2","ssdeep":"","tlshash":"6d11b71f7fec8d3b0a0d168802971ce113d519504bda0c89234cf175324ebf9a1053a7","first_seen":"2026-04-27T15:50:27.939178Z","last_seen":"2026-04-27T15:50:27.939178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6loTmhsa7Z%2FzixXj7Hj95ukfV%2B%2Bbei60CdXjmbgpuJcI0YCVYvyyAeckWACYf7ajpbHluYeUp9AkCF4d8fBgZb%2B5XXCbReC9P0zDifYx6n5WulCcQHmdFmkC%2Bs7zKjCSiAgX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efae1df38c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-112d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByCKSuXz3Dz7GwNawn%2F4UUHimD6%2BM%2FxNG9yNb6P9UMqUlnFNVL8UHuMI%2BUwcZeI5ldVUtWIPKbFd3Q%2B%2BHRWVn9Oe5rbG%2FF7mubzkx833mslX7ujQkZoEkOcx6TvsQh5rcZGk\"}]}\r\ncf-ray: 9f2efac8aa015fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4396)","md5":"1dd5e367dd0fde91e8e1c163aea6e76f","sha1":"28bf7b824418c7bf9239cd8bf71a836209658139","sha256":"78b538d43e7961e37c726249d53c92e5b6d31051b99e2c974624cda6a6c42ad9","sha512":"9aba5591cb364e85d6ecf3668d0c147da9adae885777e322b2bb99c9004399d0d54c9e19c9a606d86c7b6b4dea496590fcc06fc1e372f1896b461f245b2fded9","ssdeep":"48:7Os+sFk8brNiqpbs+sR8XDIcC9AY5qULC2gUEUhCoQAY+U8F1mCfUjO1p:wqIcCiKqcC2gBgGAY+/1mCfOO1p","tlshash":"b8919f30b71ca5618723f62c87b447c8a62479848f713757bb03d92696cf293f73252a","first_seen":"2026-04-27T15:50:27.941701Z","last_seen":"2026-04-27T15:50:27.941701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338534.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338534.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338657.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-32519\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6fM%2Bf25Gf4%2Foeu2Quhco7t%2FkvCl%2BVOuVYBPb%2FA8qnXxFYeeGiAu9S%2B3tkYXG6qSAUjKCrSAWEFkagHU1DWE2mB0CTKvCEUkFL15nGD9odntKRJ4pngNFNDzzixugfxzbjVv\"}]}\r\ncf-ray: 9f2eface8ab45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206105,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65337)","md5":"37183f0fe7548432ddbb3344047b12bb","sha1":"e422b2d640c9210e1f3d500524145fbc47ef4772","sha256":"d6eb2fb0e53966195c288259ebbcdb921642a97dac83274e4453a19028e95ac8","sha512":"39da7098d7abab8d0de0982b114dc025bfb82a8161cdd48ea436bda8309c92c9eee4f20f2ef4b51b2defeb7b1d5fd37f2907b5212d17abc998534a33a29070c8","ssdeep":"6144:Rd7kg9glTZGiszEgFumXnenRegLqwJIn01eimBUrCKSx:RKvszEgFBv0k","tlshash":"ed14e794fa7170195263a1b9023f1907b336365ed44b86acb56ec9d92cbc08a3677f3c","first_seen":"2026-04-27T15:50:27.944211Z","last_seen":"2026-04-27T15:50:27.944211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33812.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33812.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-514\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jED7G2bYTwI6qlp6lav%2Bw4cwrKgyZRPNtS2hZ2iIIqoOf6XwoEUZk4JEl2weX2d1RATwn%2Bl4jbjwzF9P3vHlKPn6k8yy30mQkwdNQPtuKrum%2F8eeOkDws7ItmVlA4yKXfZh2\"}]}\r\ncf-ray: 9f2efad49b7e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1299)","md5":"6bc66960fd87499a44dc90b3df275e90","sha1":"61c28be25f3179517066f6fe7a540668bbd9c13b","sha256":"9d5270a5dd706186280a8cacb3c719fbd2b61928e440e94602dc6df64648a5d5","sha512":"f2c96dd53dd198ac58cc4d9fe20c0cd35370231196adc3f51b4ea84e697df5ec773f2fb9d0c80844e2e3d054f39a30eff71592e795814ef7ced3c379bf82d7dd","ssdeep":"","tlshash":"f6214938755ae755a523a531b9acde4cce923e91cd453b02fb4bac27068faf31b31124","first_seen":"2026-04-27T15:50:27.946698Z","last_seen":"2026-04-27T15:50:27.946698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338636.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338636.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2f07\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sY8iJlkNHOmNSDZQ80yBDjkiOz6gDcdRtH0s36Alk%2BLEGzeFoUSyE%2FxNXPTaI1yfY4tHKG6ZEp9W2Mh25spdUpk9UTD9jkJIQsvX3rFDcPE3PntVLc5%2FoErgfDE2%2FWyquv3\"}]}\r\ncf-ray: 9f2efad53bb65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12039,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12026)","md5":"3292c674ad19321c49c64f80c3ee6d0c","sha1":"ffd9ad6bc8f2032fdaa38d9bf0be4f57aec4aa21","sha256":"715ab8d4126f55192c8b0fe6e892189a8c497e7a9b231175b307feace14c80ea","sha512":"cf018d538def5bbcc65e249899065dd03b0ec1bf481ef3053312d3d20ba3b4afd28e65e97b0d07ebb323d418c8e999fde98cec172252176c540b65db48683b59","ssdeep":"192:J701zRLPG1ByvEw4VXH+wIltsWsFgQGDbmdVCDw2wagqav7dxYT2Epeir5Kgjmb9:6zkBH+Plt1sF/G2uc2www74T9peir5vQ","tlshash":"4842b412b1934dbcd7b3a15124282444a19c2fd2d006d9f5e1bf1d3a2befef59319b19","first_seen":"2026-04-27T15:50:27.949099Z","last_seen":"2026-04-27T15:50:27.949099Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338514.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338514.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-ffa\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KppFSffnaFOfOkcl3aucBDDRFEk232fuhWOUMEnRP35jGkLxNz9Odtx9jy0m4A5cZivOwE8xmTMFPGbNQ24y9jdhvK4dJcaM0ejfL39lk8LGb%2FjnbuDjRFkBC3F1SSaR4XQ\"}]}\r\ncf-ray: 9f2efad81bf05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4089)","md5":"884ea1d016d91ed119ba030558d97523","sha1":"1b66c9ebf2ea736e954cc14176a247b4630126e1","sha256":"3a74c79d6a24df7911e626398d60c075d29687312d4189975766c4cf9b0a2586","sha512":"570e40d1633bf3786af7595f9c92f6b239d16469399c70f69aa3b1a9ce8531f4c6be05362d002b8f0f16f6bb915ca4affb7d2a8c25ea65d7b57c90325b8cd70d","ssdeep":"","tlshash":"d281b410b5428dba8b738498341a10a4f1046fb6c0556dcc73b6cd1a27f3e64ab2a2b9","first_seen":"2026-04-27T15:50:27.952667Z","last_seen":"2026-04-27T15:50:27.952667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33888.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33888.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-b9f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hy1Hz1FMA76G%2FRfFFeXpM2TpXklGlnO2StNItA6qrQw6eJYvgsZXsjPlcUtie5QLcR8bqvrQScLPMbM4gus6i4nKkbl0ANEc3z00ea2Fctn42xObhOuXlNWGG%2BjAP70Huu0\"}]}\r\ncf-ray: 9f2efac8aa005fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2974)","md5":"aeafb4213e753da91cf8995d39a6e3f6","sha1":"cf725036ec6e901d846531f83fdaada76509a791","sha256":"5de6c55465d8ba9b93783023533438049bce0fd4c5d77572b2059d98939c681c","sha512":"ed7b2723b34e6cd187629a95f09a099c45bddb78464a306ebd00ac4fdca91b6d58960713486fae4d4c3a6e892a1cb7eb5d0b3cd4ed6ad9fce830ab3abe131067","ssdeep":"","tlshash":"cf51bb27257d343f8473b3a63ad69e9ca0fc6253d60a8170f2135c2008a7763a6765bc","first_seen":"2026-04-27T15:50:27.956853Z","last_seen":"2026-04-27T15:50:27.956853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338657.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338657.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-24897\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlICB58LvscKUHiiybHhUDYKEKdYGHYyplekpq441yXSnsj28aVRJ8aFU0nV%2FCRLTbYCzMUaSroJ3DUfx0wmevTo3pP%2FniqHs5Mpvgv57Fqpcv2ux%2FsR7oqTH%2Fgg3pkqMwlY\"}]}\r\ncf-ray: 9f2efac91a1c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149655,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65217)","md5":"eefa1cca9bdef770fc325f9500db7dbe","sha1":"0f4af85cf4679e3a3ea3d81be14fc010074b7eca","sha256":"651c582f5e054536e7141b4acb3903c96e1623c59ca980ed6e4cc6bb981f798f","sha512":"7e5b43e98cf8f230cc2f0814de87916c338a18aadf11a9ead6905e1f8fa35ba74cb77c0e11295f1bad058f44013e57c0dfedd642450153607970cc06c589bfa8","ssdeep":"3072:6aazLOLk6LEZm4xood3uO40yQ6OKLRTrqJ5HH2GkbR/uV3zts+XAy+exe:JazL/Zm4xood3uayQ6OKLRTrm5HH2Gkt","tlshash":"94e3e850b53a45bed7b390d290aa0484a29c0fadd11484e7f2ff8f7127dacb51355b3a","first_seen":"2026-04-27T15:50:27.959667Z","last_seen":"2026-04-27T15:50:27.959667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338544.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338544.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1fdf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tepniGnpeyZT6m3eC%2FbdUlJomSBJ2a2qlhSM1iFdckwT%2BluX0G02d8c26ymORtCJ4bF0k8VixXpNuS3osYVoO5i2eV8QSNLj5DxEfRXjAiGXdPmh8%2Fv3ZdFlz97Y6ehwyU5X\"}]}\r\ncf-ray: 9f2efad56bcb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (8151)","md5":"2daa5a9c278ef07eeec92701062475ea","sha1":"554715ab8a745e8611251e51a601fbd02e5d5ae9","sha256":"cb4b1f9c767c0b3566f7be2f791f9ca965d3ac1bd4225c5aad2c0309ef68bd52","sha512":"4c076048a5039db5349257082c19ed520ad79fc4e0ac985de7d0ea5428d99f28d5d007df9a774628207ee436f3a88e523b0bb76459f14abf1f0141fd033f1081","ssdeep":"192:bFrwC2g/wOzYSYLwrbugLW/fHMFXZwNMbUoU9:pMHgYEOLwrbDLW/fHMFJ7woY","tlshash":"71f132107b22d9b9c77712f5649a0000a1493f89f30448fae1ee6bd127abdb6471ab7d","first_seen":"2026-04-27T15:50:27.962162Z","last_seen":"2026-04-27T15:50:27.962162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338559.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338559.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-3fbf3\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2Bh3%2B29y7w1bLRnVgmSEsGmg8aKmIsMal0LwbsqyLoDeWuENWjtYdIXAAZVENZzupJx276pJ%2BpDvIz6ClGcCELbQGNcBfBs3LWZB32P16PQ0sZAu8coI36o%2FFahqyx1GHjT4\"}]}\r\ncf-ray: 9f2efac95a295fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30164)","md5":"db16a715db86b99da60703fa053dff93","sha1":"6c603064b9938a080430e8ac907cd4ea1bf663c2","sha256":"174b3189074f82a7eea8deeb3e55960afc559693a89037ae5c073905962cfe54","sha512":"1a7a1a4f756d4fd25f52c9893e8dfb35c12b3c07f0b6fbca661c0eb6213a9f3e7b82f49681e81c360f65c231ec991a7b7c8dc02b2457bfe569b6b8f6aafd1760","ssdeep":"6144:P+aGKQPmIq50a7CtKxNHZq711yESQC3DDdWj8MBMsyehJUoWU+04cQB7c3Izngl5:W1mP50a2AxNHZd3PdWj8MBMsyehJUoWQ","tlshash":"ec4409d132e3f07647e624d608760002e2699d55744e84acf2ac9cdb7dbaccd95baf38","first_seen":"2026-04-27T15:50:27.964686Z","last_seen":"2026-04-27T15:50:27.964686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33898.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33898.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-46b4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EsIk%2BhXGrTS0PIvXSrMO5nYhv%2Bu7ufxQG1sfa%2BqZKhOkqOWviOflXKuNXiqz60asfT2PUrKRDC1AAynZmd%2Bp2a9%2FTDoCnxeUEQpb2w0cYMrLbmTgWpLC4J%2FXAjSOJRNRjbc\"}]}\r\ncf-ray: 9f2efac8ca085fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18099)","md5":"96935ae6e1d5f154b9990ed1d2ebe179","sha1":"ae9b9deae24b05b96492714db1d79ba1d6d75439","sha256":"66ed142dc00ab9a32dc28311a97cec907da97b52571780db2b91872028dbf8f3","sha512":"30a6d0ed0efd826ab87c48c87078e43b0c132963c34726770e39b2bbc356ee45c06769031974d854c949eaee674659ad175d6fe0ab4a71d27c57807f51111bb7","ssdeep":"384:eKfbg9rDREqZz+2At+BLqRD1HZwZ23vmjo4ipZwDu4Md7tPupuGwrqlqpql:eK+rDREkK/8PEgQrqlqpql","tlshash":"368243257a2d453b5c33e16a7f29db8cf658be51ca034766f723b82108cb7a33931624","first_seen":"2026-04-27T15:50:27.967167Z","last_seen":"2026-04-27T15:50:27.967167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33818.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33818.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mp5ZbTZ%2Brr2irI1Mmg8popzRb5jJPpYXklZ%2B7Xh4aNo%2FOrxBdU7ddE5d7XglUGHCP2ciutBhXfg0YcDy592VH4z7EdLpXp6PKaxtE4E8PWOkikHQOmENjuGY8Rh0JlnVVhgl\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-71\"\r\ncf-ray: 9f2efac90a165fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d29c4e39f7da6c382c91e4b9f8283a1a","sha1":"3bfb5c883fe62a5fe934e5be72bf527dec667f6c","sha256":"aa54d07681d5cea1662d7149f31b77c3a539fb40fc10274b61af1a28bd7b554b","sha512":"eaa2ddfd9eedd339f20342e9e1c4f99c4181f2a66bbec6dc775b0b8aa4b741eab44c7ff8c85c32d4c9fb2da96137218bce17bfa09103a202181cf69fc3d01fa4","ssdeep":"","tlshash":"b6b092c32cb1e2a24bb14582833584abfb05248c708b93a491a4036b7a1e6817ae0446","first_seen":"2026-04-27T15:50:27.96963Z","last_seen":"2026-04-27T15:50:27.96963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33880.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33880.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-b27\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0ECJgFm7NNzCtPV1C5uWM%2FZi%2BZoVOtsH%2FAEGsYEYdQsXQMm4v1Nc%2FNEODUi%2BmcvqROLAP7L8GPRjZogz4wJ%2FL9m%2BrPJrR7iRpd1HNy7fKyu%2FTp8cLO%2BCezZlBWPsCNzD7D5\"}]}\r\ncf-ray: 9f2efad48b7a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2854)","md5":"2aa508de5800e5750a00ff01630a1f00","sha1":"f1422e75be3431f5da878bc2a23a00b5c9934939","sha256":"de8c342a6b416a1579b9c4bfd313e7023e28c7ac39f5c1eedf9089171b56630a","sha512":"1b0df478f2a1a84b524bbc3c2c0ec48712345c333911cba55a8811016e7bbdc5f8ab62a4e17a2859817977c4d3dda8275bf66556293366cb9bc062de09894830","ssdeep":"","tlshash":"cf51e01e67b9d505b8b39df63ae3abf49600ba2689130f61f2234c324c8b973657131c","first_seen":"2026-04-27T15:50:27.972033Z","last_seen":"2026-04-27T15:50:27.972033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33813.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33813.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJkg%2BjJBj62qOQqTgMNoTsrif9PJNXl%2BGf6lG7tPXfiAJt5LSHBM8fn6lVGRcfVfUjKvKoQWod0UaRu1pVX2jIciBdSN1qU3GdBVnCZA30uUPLXkikxayZ3zFEK%2BrwP%2BCUne\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-2f6\"\r\ncf-ray: 9f2efad49b7f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (757)","md5":"b77b5956868f0799ec84b30f7ccc7f66","sha1":"7ab5cb32cae5e823426d8530fb0e01482241400f","sha256":"b8fe54786b18928c282ebcdc345bbd52ab0bd426ed1f946b9361eebbf27df031","sha512":"bc4bed992cd2b3b878a81a936c499061164abe4cdb34eee87a57323e90c992a13a7c2b3074deb106b1758c14b8e15664f524f3e73644354814cc054aa0f95f2f","ssdeep":"","tlshash":"c601d0bd3e2cc5205223b291ee446e86dc4665b1e065d38190637d3964d5373117334a","first_seen":"2026-04-27T15:50:27.974349Z","last_seen":"2026-04-27T15:50:27.974349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338546.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338546.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-fde\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjt3mzeib1VLKbITnZODVnulHdS5vUfxcTCQS10lae59f%2BSgbriWIZ0UDXybdsoncmsLEgKKzbh5ZseMJITesCoRgf2bdL0pHqkk7PXGy47SGh32SmXvDCKMcneRsMktdotA\"}]}\r\ncf-ray: 9f2efad5fbd55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4057)","md5":"72b6e11d70d4627c2ebe6770466d9d64","sha1":"860f922c71d75321757eb2c00ed8a65e0c9832be","sha256":"50b2db454d7edf785bacc885c6ecac7cea074e20a60c0871c864542b6c627709","sha512":"1cdb5c7665eaac5ef58ea64e429dead7b8489acc47235a5c8f9be8f2a34284d1a6558f830d2e24e8cec345f02003114775518def768306011c440401ba7c9c93","ssdeep":"","tlshash":"2c812240aa16db3ed7b308645a891ca470193fe7a14425e1e2aa5c213bf1cfe979cf35","first_seen":"2026-04-27T15:50:27.976705Z","last_seen":"2026-04-27T15:50:27.976705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338524.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338524.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338515.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-478\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SOGMp3%2FvMyPWitUHnthDY0O3dPY5FfedGLQ94QqaPpokf6JEDjm36c53PEsL9DuZj%2FYtjYeNWAqe0pNT%2Bckb1DnATcQsOrofy5%2FCm3PHpqFBxY9MIUEAMCbYILBXStl3KWa\"}]}\r\ncf-ray: 9f2efada2c265fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1143)","md5":"8d45ffbf7e53ac228e2cb13e986c4bb3","sha1":"b2b13e82a5266a8c198f405993053028c6b4f282","sha256":"20899eb10e58805ca93b8a486ce4baed355f178fa57240d811635df919a0b112","sha512":"b6c750d44eb21ec7f0ab7026c882a9de54a3de04ee238eefc4d0a08d83d45742a4695e01131dae92401aa920e0955dc2a9f748aedcdbba3d980dc56a70cf4fe6","ssdeep":"","tlshash":"4c21ace8b0da91b703b3952a813fb857fba97980a2ac0b40d25090cdb4a59c80127c2d","first_seen":"2025-09-10T13:52:39.470976Z","last_seen":"2026-05-17T19:46:11.849005Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Un%2FKPnyNJeUTnIHIUcD0z1mMiBl1TrWzbysZb5BPCB8umaYWFn52pguRUFdmO%2FV8luK3Mtopbi70RtpJzfZCv3haO%2F1JDvw%2F%2Fdfivohwbd1xXK0uY8D28Bqppul3XKutkfLa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efae1bf31c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33899.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33899.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-12a9f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FXRgpqqYx%2B49pILqrBms5vgQ9e1H4nYjg%2Fsb%2B0T56CmH2Qxbfii7j9c9zHdZ0InVZ4cDNh3mAWM%2FingkgojXejfvE6E5Y8TzBopXlZWj8R3XKqjNZ4k9QwdCoWtH4t9OQkS\"}]}\r\ncf-ray: 9f2efac8ba075fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2997c7cb8127c3ce47e416490750ddaf","sha1":"ee41b1e48b5a521b1f9106bb47a131fef33bfa19","sha256":"102d210815b085db258b5aa15a6a2bd06beb028350a4cd9572ca3fac101e2936","sha512":"e85cf82f507a7e3f5db2a30aa3c7369e50b230e59373259770dfd5eecda7fabe7bc426043cda869fda11525eb1097589a1c3980f880397172d8eea8d56d8a72d","ssdeep":"1536:5wzlzNyrdbo1/42LpDBujTRiMq20Hg2HMfpt:WzlzUhbKpDEa20Hg2H0","tlshash":"e2736275b639893aac33e1793fa84bcde150be90c9120791ea179d354cc7bb33a31658","first_seen":"2026-04-27T15:50:27.983057Z","last_seen":"2026-04-27T15:50:27.983057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33817.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33817.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-bea\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ge8YqJ8mtN4YoCIIaR124BvFGT1cABICniXBi5SBsFcaUnWqKtuRXy4WLspVp%2BM9mUkFecKjgoqIQe8fuzjYDQX8AUrKpILHW2dG7yvI4tCFya5nofFNCraC0RSSIA96tQga\"}]}\r\ncf-ray: 9f2efac90a0f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3050,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3007)","md5":"bf03b629c9dac3722e33837d53e9eb7f","sha1":"350907ea568b4ddb8a0ee09a89c9c6f2e54bb67d","sha256":"fb099439471ff63c840595f85d44f446366ed18789cf58b7e844bef9b2701f78","sha512":"0cb5fc22b23139a5dbfe86f0d8d185c9ed75c96dca3da1f8037470f20b8d23d27a82c2fd9a6e140b05d51813c101d33aa6400d9b404f5c0d7b151f984fd6a4f5","ssdeep":"","tlshash":"ab510e798859497edba514d80138b02b44ac4f2ca9dd88bb9b7f3e0c67f68b47f45b00","first_seen":"2026-04-27T15:50:27.985622Z","last_seen":"2026-04-27T15:50:27.985622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338626.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338626.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-4bd6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rp%2FLLzWVwSLG4HyoTVZEFudjz43xkkI63QvOPLrTr5uqD9KZ2WAcbqgtb%2FL%2BmNs4SekEZbN6%2FcybDK0Wrh5qO%2BTNWzP7L63i5uQgubQJZZtFGWxVisMMhQrXUF64MPyeKw0R\"}]}\r\ncf-ray: 9f2efac90a105fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19414,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (19411)","md5":"516ecc7d7bed25c28b2e4001f5b58704","sha1":"de036f04f656edc2cdd13d341b678577362bc569","sha256":"81eba983bf5d4ea58a38403c02d57a039294cc26e7a32a93189b1699969ea1e0","sha512":"6f6a7fc9ea8957d68253c9984c2af0431005f9021cba838aef1121d03b59b35c58d4ba4bf1dbd1059a6c59e299fede701c6910dac41c828225e10f5e74a2e1d1","ssdeep":"384:ahxak0xRC1s65MmZXrn/y+BHm7zR8KKQUPnJU+LpZiZIi:ahxadxRCaIfZTy+BHm7zR8KKQwJUs2ZL","tlshash":"91928240f4178abed3fb9202801c28407058afded04284e5f1fe6c552b9adfa9b5cb76","first_seen":"2026-04-27T15:50:27.988424Z","last_seen":"2026-04-27T15:50:27.988424Z","times_seen":1,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338530.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338530.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-414\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rca%2BNxYWceRdQJZOPi1tzhGEF9yWNnua8lOQ420ahvG%2F%2BuulEkYgiiTvjCXbezWCJ9HIiQz7D8nlfsAieF9K6iA%2FdwdsxXOf%2B3381sc36vCkBKcf4SCSR9iK6Co7sksQu8Pi\"}]}\r\ncf-ray: 9f2efad54bbd5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1043)","md5":"0cd4a9f69a25da5a8467fd14a69055d9","sha1":"be63a73c59343d0b8b75d0f75496ca39b8fdfb44","sha256":"454af7acddb08e531187d5ebf9b2075448da5902b6b87393a95ec790996673d0","sha512":"3075dfbf3577c1d313528fad9a79cb8f03ebbcf64fa9b02239530121c6a5cc2598a1ba25420e6ce73f503502fa96287fbcd37e96413ca1cd75273f821404c714","ssdeep":"","tlshash":"35113503677a9cfd57752148854400910844677ba3eda9d683b78c9d651353a9628722","first_seen":"2026-04-27T15:50:27.991268Z","last_seen":"2026-04-27T15:50:27.991268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338632.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338632.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-593b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7p%2ByPMeW%2FFFLAWxAVNv2sX9fda%2B7ErenM4x9kDJgCKVNRI9r028Js0Ov6mPSEM2jNbom%2FVqUaTImzKEPUgg69A0DNIiOnVXFIvT7ynrsbkolaojKn7g%2B2a1AMl6%2FCjnhxQLQ\"}]}\r\ncf-ray: 9f2efad54bc25fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22842)","md5":"8c9a72e31b468ac74cb4d25f796f0b33","sha1":"a7f8d3d691ead8d9a5344db1a6c835ca54611f6f","sha256":"19cf519010a8d6f1c812c256fb99153c8bd16d67c2fc5bbf8e630613bc3db352","sha512":"5186dc3c06e5fbd8f2fb35fe922cd925a768995324e693101e519839c30db058f215e06fe842ead1acf746bd933b1ef87f4543e9933fd93178564316af28d062","ssdeep":"384:UP/QiadPllHnKJO81aAvDtXR95dPb5u1heIg4V3Yr/wUWg3vS6lufuJvOMIruP86:UP/7atzHSvDVrb5ahep4pYJvOlxg/FN","tlshash":"2ca2d701f906defdc3f7d15050a81548602a2fd9e406ccf6a2bd590667e3db4eb25e2b","first_seen":"2026-04-27T15:50:27.879039Z","last_seen":"2026-04-27T15:50:27.879039Z","times_seen":1,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/js/iconpark.js?v=0.0.4","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:49.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/js/iconpark.js?v=0.0.4 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c23-2c5cf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHcNTF8cZe5p2gsdyf6vrLq%2Fezy6hte%2BDRL9REMShD9bNbMKjqt5S3qnR0IK9uHkWDLDeTZbma53hfOomdaI2B9hKU3tiDvSi%2FbZK26E8GvAEJRCCN62ZZy974bRnH%2BmzAUJ\"}]}\r\ncf-ray: 9f2efab788f75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b6639e466b0942410e73539c48871854","sha1":"1ba6e733eb595e90241726766d4ca9fa4087ff06","sha256":"e5076a0be4906182d2d45347ea6ef9df033f6a1a12701cf22f51d517a8fd5194","sha512":"e0cfcdaa888db0b08eff9ee05522e7f0dfa15af3cfa7c0fefe1ee9070a17c0f1ddb7d7eb56b56d366f1def1387676ba2cb7566595a380bf7e6b7d0368ae126de","ssdeep":"3072:Ih756XnI9iAGDrDBNvYIAPSNxgtVoV2YElgkkQ:IV67DOblp","tlshash":"ff04f9e73364d29c65c3479a9ff5ac55231e70b470d682f05aafc7a821878e4f68bc60","first_seen":"2026-04-27T15:50:27.994907Z","last_seen":"2026-04-27T15:50:27.994907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33882.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33882.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7OiDWGcrGEBgKebwspaWLQvY1sBzEc9IK2SuxJaP4CVPt31%2FfGAWYzoRwEbYNdGCmTSo2jq1WzCMmfwTfBB5%2BGhpDzkFvGl%2F8jTJ6dYK3Xbbyc%2FLCBFqzHm5%2Fj4QsbArR41\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-108\"\r\ncf-ray: 9f2efad4bb885fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1c6102b7d71abe1ca8301e287fb4aec6","sha1":"79816ef7a7cff2a917b62f55bf14fa1404d839f7","sha256":"e38f48e7a77f860f481c8e8c363fd879b13e7f63bbb365cf21a3ed65a9f908ca","sha512":"f365e39642f4badc2c01947f642522388e10f89e0971b4a19bfae7c2ae97fab9ae3cc2efc3ad052af9b6e29144152ae1111a737bc01a3130b63079edd4d482e6","ssdeep":"","tlshash":"7ad05e387b2ad1105071e8f2b8c20decee82334569638141ef53aca6caab9532663589","first_seen":"2026-04-27T15:50:27.999054Z","last_seen":"2026-04-27T15:50:27.999054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338525.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338525.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-509\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeDgsM6EbiRDFxGvJu%2BHhYA0%2B3z0z4ybojc19wES%2B9chgiytkPPqLYbwwrFllE0cZSj8kmMwPyja10rSTq2Q8e7lS5cRLR8hrFqh5Zi8oWbHOlXon4l4rVEs2j7zuRiUtmnM\"}]}\r\ncf-ray: 9f2efad8cbfd5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1288)","md5":"7bb90f9e2516cd87e177874030115850","sha1":"237528a05444823974ad5971381e4714c59af2ca","sha256":"ed391eae2f772036fba1d3f6f2ba0416cc9db89f8cc7ff5b039e78d1987d7b0f","sha512":"94458035f4ac2424e0b402e7e3b34ea005c28d41c3998ecd0a901409bec94c5118f86615ba4e81b09bd2f1ebc2a9d85d668979f48d659ff449bcca11e4c94585","ssdeep":"","tlshash":"c12112105a46d97bd75304a0d81c1c3054683faba74cbd9561ff08155716d6c9b4ab3b","first_seen":"2026-04-27T15:50:28.001491Z","last_seen":"2026-04-27T15:50:28.001491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33871.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33871.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ankMsuRS49GJwZOPttmPWARI7D%2FY97cGrWb5hMnd%2BuTLrY38JSTltQ7iZvubQ162lwTmsHzzS8guoRBRzD2m%2FcVkE3yUPt3H%2BQs%2BGMZVBE%2BPRkNk%2FTI8h6Dxc%2F9HIfZ9D9aO\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-ce\"\r\ncf-ray: 9f2efac899fc5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5d7b8edf688cc8fdf9c4c80551444623","sha1":"cf5b160ce578f920bcaa356901eb8dc0494f378a","sha256":"06c8494b896bb84c4e4578cec8a53ea96e75e992c665a40e768937cbeee4fa33","sha512":"1d2991a7cc7bbd8c01021c4900cb7e7f516e6bf95d454425832a25f235cc090a99ee3c872f381de895979541df197b416f4b52272915e52985b432f89078e7de","ssdeep":"","tlshash":"c3d0c965791c47220ddb9c2cb52a93ba901c3de28e128f69e63b66171de399232a1414","first_seen":"2026-04-27T15:50:28.003882Z","last_seen":"2026-04-27T15:50:28.003882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/static/img/home/arrow_b.svg?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/static/img/home/arrow_b.svg?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BM0JCxYgW2oNy8SSbMu%2FRZGbs9edC%2BJjRIrge4DAVdXVgZOCJwW5HFklzqwQLUXNxlF6Y0hA2GJ8k9u14qqnex%2B8V5OSJEf47IpZMgiMxSYsMM7vdytw%2FyMVlSPf5WcK6jGg\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-715\"\r\ncf-ray: 9f2efad04b0d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13a96248f8130b771c4937dbf03fb96a","sha1":"3c864e79e85b995d26d8c8cac714a5cf76974212","sha256":"4d8023c715be78509c1a1c9e352449b0b38332a749411f8bd6bfbdb6f3173161","sha512":"bf977f84eacaa8e174470d36353f576aa8f8293e9e0f2795f9fa6adcedc4b7c3f0b142e809f36a0db1581fa6e794f1c7eb6354afcc1e6a9b2a66aefd21a14837","ssdeep":"","tlshash":"a13115e2a1e9a1c0620a9785ec278966b93f34f83fa9ceda4240f851b683165a80dc54","first_seen":"2026-04-27T15:50:28.008058Z","last_seen":"2026-04-27T15:50:28.008058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338584.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338584.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338657.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-33d8\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXYEkXQzDLggnKLT55gV06YN3QTDujvZc53ExDkaoSUEG8UZNy7NoY4bO9B%2Bmi0pY3vskqgpp2rpJDx4Qq5KZTmKQ8dP8GAm%2FG%2BZIiZnJxjb%2FnPl03auN2ocb%2B%2Fy73XjAhm6\"}]}\r\ncf-ray: 9f2eface8ab35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13272,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13119)","md5":"ffe7cd560e316ef6442ff180cf4b9268","sha1":"db43fbec53c7dd6ea480dfbc5503292dd56c4563","sha256":"c397b45e8d3a336c9d07d9397b8944cbb6a7f8a5aa88e1186ed0b97988778dd2","sha512":"003483ba53fff89cd5101d5396509eb649fbb3d1e5aa64dc9316921139bf7f18ca74e8987abe2db4612d9ce6f3ab8b7d88bd473c92a957ead09249e375794eca","ssdeep":"384:c30SM3kMNN7xKNSdHCIFYZylCOaA0CrCbnkDCe8w6n:hZkqN7IQdHCIFYMaA0CrCbnkDCe8J","tlshash":"5352b801b47494fdb3f1a104697c08c4369c2f25e1989ce6b2bbdf2b67c6cd02669fa5","first_seen":"2026-04-27T15:50:27.843208Z","last_seen":"2026-04-27T15:50:27.843208Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3384.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3384.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IzvLBU8s1oz1%2BPsRUh958qp55x9JXtw1FXWFXEeHYDO7FhXziPESPLp%2F4N5F%2BIomVIV5E0ZSkdMAhZr8KBd%2BzvovOWHobE4soDh3Go2v7i6mCrOxbKwC5oVHYMB1BXq%2BwHFs\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-1a4\"\r\ncf-ray: 9f2efad45b685fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (419)","md5":"fea063f117351808dd5746ee93d6f590","sha1":"58802c4bd8ff692f25888de25bf73b28641b5bbf","sha256":"5b497a2fe3dd99b8ef96efab9354733e93ba250e15939be4638eaf74a2d62c3d","sha512":"c6c31f82edb9c7fef0fad3cdea056a2d6aceab60dbed3d709a8f0806c54f61ba8865e6581045648c6c2651c0cb78762c9eb9df28f1304f57b66db882d4841c9a","ssdeep":"","tlshash":"4be05c4bba448627892f51b87e241fadd5395b00c31573a1d2039c2188cfb735520d18","first_seen":"2026-04-27T15:50:28.010474Z","last_seen":"2026-04-27T15:50:28.010474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338517.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338517.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-10a9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pQvmuC7IbfCStrSo6BJyUzXoghIMmUXkQmig%2BrjB8xvCNQhb99dfAsGa%2BkSkdEfAd4vfO%2BbQ%2FMlxKry1nE1rw15ahbAvmgoGQFmsrSupNYc7iDMRL%2BnBpZF9qQSeQUPChmf\"}]}\r\ncf-ray: 9f2efad51b9f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4265,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4264)","md5":"f601d7c60a9867a0a88993c53cc96d88","sha1":"9b3c036799e4245b1aa78e7a4f637909b1ece92b","sha256":"e89c2ccccda887fd077785de655257bee59002dda172d3bf7bfd741db2a81573","sha512":"d5102147a2d22bffc305f07a4022425998f8a494a56f51446f62bce2fa12ad3f6737e9af43ccb44d8aaf82410d861a08a6b06cf669e3ca71b44fc966a590baa6","ssdeep":"96:pV5kpLtMmbI42mWTzCdu/OGOEm7khqXqAQMlppx49:Vkl2mbI42m+Gaqastx49","tlshash":"7991c700f5029dbe6b7385847461285cb5086f7b80559ec8f3ba8e1627f2e24e357677","first_seen":"2026-04-27T15:50:28.013127Z","last_seen":"2026-04-27T15:50:28.013127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338619.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338619.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1b6d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anZYJELiC2SAWMYlRiLvm7xQtqeCx6E1EPETjBsBwMgOFAv267lKHCFxOw0v2%2FNohXEWU0NFPgc4Xpkk3fFXP8WcAUWq9I6civjhrIqzSO326dgAIJp%2BcC%2FsFvz7zffNZ1NB\"}]}\r\ncf-ray: 9f2efad52bad5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7021,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7020)","md5":"ae37712c4ff9b3fe24c34e2332e0fc32","sha1":"b6fd829fb59302001877a7c1c7776032ee558fff","sha256":"6c69db7fb27d4c7f3d8261078e97248d32815ef7883efeabddc2d47d57b30e3d","sha512":"907d68be93f89f666d796ecaa047ec4d59959288695f03d45f55464477ef02a71061593bfe129fefdb42d26d0c1161089fc7fd6e32dede7abf07842aba8f2382","ssdeep":"192:LselMp8oauCoxBMtEaCE4LWOhaCAVLme+HDb4B75gvvab4bf:LseGp833IBMtr6sdgDb4Blcvp","tlshash":"30e19560b612aa3cd37760c6106c4089f0a91fa9e118d1c6f1bfcc252675eb1d6ee73e","first_seen":"2026-04-27T15:50:28.015566Z","last_seen":"2026-04-27T15:50:28.015566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/fonts/BinancePlex-Regular.woff2","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:50.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/fonts/BinancePlex-Regular.woff2 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26076\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c25-65dc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWZ0L56mrlgqqHhXIMgjr64AK17DYFN4aLHuar33K6nhQ00HOatjcFnlt5ROq2wKm3vQLc9d25jpAvkVe%2BuI4y%2FzvuXgVIHT1tM0zaK1uGnWQ6oVg%2BLxii8m8LT4vqZLYDgO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efabf393d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26076, version 1.0","md5":"52da8a3659dbec455e0cd9cc00a518a8","sha1":"f969c3ed17bae6e9d432a6aeb80d557ce2814a86","sha256":"4675a3d0b6e29f17dc8c2c7cc8fa0269bdb1a5838f43784d130480494114f84e","sha512":"3cf2429c9ab2f732bfd4d108a58396e53fcbc1b50b010d5d3fd4a6f9fae53e19de6692fd343453880511c9d23580a7cb2f8bb4d7efd8658af38584eb1253018b","ssdeep":"384:7aJuBO6IVwcgUCLKPxDOK/elCQdGVKAoMGIWAE89SDopkmr1G3s/C4kA635VF:WJucTxCLKPx6vlCG2ZoMGISDofg3smVF","tlshash":"6dc2f1ee52eab227ef004648ff067adfd6fc246c1a0056a2421a77d300a05a7b16cc5a","first_seen":"2024-07-15T22:11:14Z","last_seen":"2026-07-27T12:10:25.668344Z","times_seen":271,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":534,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338656.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338656.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-eab9\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT0UZSZ7Dsr2yHIodw3DWWsQdPfciUGSTk0lC2Y7dGP1X7Sgant8YCGE7nPLRf6%2Fth7FjAEr%2B1N2%2FW1E5vy99b8ay4qcZUElo3AKdoPZhZkpl2aauGOQqa9GVfB7tyjUDngF\"}]}\r\ncf-ray: 9f2efacc9a675fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60089,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (59705)","md5":"bfcd1571814212e9fa4a9eefbbc84fcc","sha1":"64923c3104d35ca18335267aac4b8590f8b6d6d7","sha256":"56c6a21f1631260be029be862738ee79af5bec3d84e1f61e9ac9ccc12dcff335","sha512":"d6369545afa9071337d116bd95507d0d8cee23e8ba9d4b0d187f8efa2f685c4df15d50466fb2c7fabf6cb2154ab303ba443186aeba13a0f60ccdc6707219be14","ssdeep":"1536:SZSIrVagjnd/kj1xVq97Y/xGf7g9FnAZXD:SZSudjnd/kLVq97Y/xL9FnAZXD","tlshash":"a2438404b52799bdd7b3a192147854d4b18c1f9ac101c8f7b1ff9c1223aacf6a749bb2","first_seen":"2026-04-27T15:50:27.776624Z","last_seen":"2026-04-27T15:50:27.776624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33831.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33831.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNu%2FvsyvAmBWDyoHoNm60GjG7PYE7W2EJVehAta9qnYi5IJNRNRtyqE9oVaIzoZoNFlCp6kjBIigsrgCUkUrZBxTE8j3uLMQzvOtiTqg4mHF%2BuGfwJDAxk4FqylphUUIwoKr\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-388\"\r\ncf-ray: 9f2efad4db915fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (903)","md5":"c260852152f9e4801c77b30e9c6c77a8","sha1":"5cca5129b19e55037d2407201fc7dc95897c5ef5","sha256":"2fc2bf35ddeddf4d0ec731b52a2958440dd90d03a02e385d27ac89df3bb4aaec","sha512":"4dadafd62beec4781d6c3935788db7b00cdf606057c25c71aa59228a623d88336a5144c544d9a7c8bddfc6d2321fa69968e4bbdfe3368c834507ea3bd5b43e47","ssdeep":"","tlshash":"4c117a1aa66ee06e993798bebe2dded86c002d41861242d3ed036c714d83ab63712524","first_seen":"2026-04-27T15:50:28.020499Z","last_seen":"2026-04-27T15:50:28.020499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338618.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338618.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2456\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9FGJfpEsk7T6GX6NJCoPYY1FqfVIGx3GZdMP4Zy3Q6APl6l9qJMGRyMSzoWo%2FCh4ILCfeTLseCAOd%2Bv%2Be59CroNNUKHF%2BO8kiiSQwLdGd%2Fcy2M215UMQIbVRprc9Ej6v1sd\"}]}\r\ncf-ray: 9f2efad52bac5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9302,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9301)","md5":"530de6ede2602a56847893663bedcbc4","sha1":"847c9162e0adc262a9a565411f9ab4096f2df3a3","sha256":"a5aaf440f8d9df663e1066e1347f6047cc71c17b3988ac90d03987daec8261b3","sha512":"3bdabbcdb56989fbb7b17d3aa9dfb02da52b6f9a9055d1a7fc4086401b416f3069f5af135d45ceafe24bf1f640da8efa2e5dc804e5657c07886695f1ee761aaf","ssdeep":"192:qL8wQThvwjgBJqb4Qj2tqAwhsAheiw7F6bGzS0b9XXs5jG3VSKcz0bC:qLluhMgCXcpwGzS0bt0jG5i","tlshash":"5112b400b815ad7eeb73105528390994b0443f9dc144e4daf2fe6c322ba3df6ab58a79","first_seen":"2026-04-27T15:50:28.023002Z","last_seen":"2026-04-27T15:50:28.023002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338442.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338442.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-464\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zChJZMjXkNJIV%2FyI7I30XEvEqgr7XHlcSFMZcVURt6OTzRLB7k2uTag5nFOdrwCKIhp8qTi5z8q97HlHFJ3m1KAPPU%2BpLuDlpZYGtw91wE%2Fqnl%2F0rHXNOUKN4wJoEbwgOhVe\"}]}\r\ncf-ray: 9f2efac8fa0b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1123)","md5":"a7ae156688953ce250b78e00557ad937","sha1":"7eaaa445c3cecdd39a140b438d8c0435e3d7d243","sha256":"8d3cb77d11800afd70e62dbea0da3b54a402f0480eee9748cf420cc6088d54b5","sha512":"a16cdabe17491fb76d3d11980d6084fe97b0b3167fe1a4aa158ce412e733a93d8f16f7784f05d4583a73f224344f2c94c8ce25e0b78cf538a2298a924dbf2a20","ssdeep":"","tlshash":"4721828d160ebd7e01b2960aa1ce3a1aa9940ef4c2dc4803058cd79553ff2a7bd471fa","first_seen":"2025-04-19T13:46:27.724205Z","last_seen":"2026-04-27T15:50:28.025644Z","times_seen":56,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FUGgqs3FF16fUKtDv98vYN4dTdaXfiPxp3pvltC72ti9pvkB6nHd2z%2FHUnuinDnBu5V%2B%2BxxAKA3WRRaWa4X69jnOGwnr5SxQvC6aodUssHyYe75tc%2FL%2B%2Be3T%2FCHJscabbrz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad20c52c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338538.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338538.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d81\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qg5rtt8F6VZEKlK7GJxZ3D1U1RfbrFqPd2wsdZAPReeWAearNKmlefWUMGoSbmYnj5VjSv0CAdIwVTX75MCz%2BsunCYwqndKnwq6eJO7sb6mm6ow8%2B7GHPwci5ERQFf4xF06e\"}]}\r\ncf-ray: 9f2efad55bc35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3457,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3456)","md5":"163282d985b80da29f3cf04a48f097a9","sha1":"2aa6b070c1063a6fbb66df940c8e021dc7d5f102","sha256":"e594e03e716f2e0f5fdd95a5f7de9da2247c733869dc9325d5fc5f70dac4fd59","sha512":"1a7c6b682777e117e52b6b6a1ceb4832cd0139c8797c60e63ee6980521ec94d41338008441fbf075af7ddfb45899f9cccdef9bfaf48e843ab22b905ee9513fa6","ssdeep":"","tlshash":"c46161107d32967dc7bb22628018164182e93f6dd10a28de72bf591223e3db5e76ce33","first_seen":"2026-04-27T15:50:28.027964Z","last_seen":"2026-04-27T15:50:28.027964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338519.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338519.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338620.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-56e\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRnreDjHt%2BjiNIk3jg9CmuLXFIUkaY%2FP2XWYNydl3qG2kz2U1%2F7Wem5txGLZngD%2FR1yESrDMk3%2B%2FAr1hcoF5SFdnD5FBvZOJyagjD%2Fwj72nPdzyoR6qbtYwOEQgdoYCUiXsh\"}]}\r\ncf-ray: 9f2efada4c2c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1389)","md5":"08102519452c0838fe37da127046f7c2","sha1":"8a04f8126202473a7a5c15080739691ee99cb527","sha256":"4ac701a4bcf843187630ee228fe905d160e3d580c3e9b6016e25ef4d58bf622e","sha512":"89804515c6b8bcd066acfcea78a31badcaff3b1f715ca5a1065104050e3ea542fad03e0badbbe1d1a20fe5cc221745d1a85bd84ece65680ad6559fb74a798c5c","ssdeep":"","tlshash":"e621df222d221abc8a73218a2499580199d82ffdc08968e6721b1723175bbf197e5b17","first_seen":"2026-04-27T15:50:28.030417Z","last_seen":"2026-04-27T15:50:28.030417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:55.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:55 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cohv7QzboZMgxTRp7I5FGMXIXItawWz6fpIlasMnyYlPWmilgOuhh48LqzsuLJsnQI3kRftg3f51nzN8CCBLFUK2iLIPussoI4K8HzBomJmnLgUoaBwGWnI99r%2FPjsJ2FET\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efadabe0dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:57 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efae51fb4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ee5f9071a5b8c7fffeb4072cadc2afa3","sha1":"e913c6f1515f05a297cf5d197afc5afb7d4b14ca","sha256":"96633ab7f70a203df067325c58bf7935fb98b3ec81d5df2f2e4a65cc843f6919","sha512":"d4b55d9f90870e21a7c9f5edbf76077d5bd05798137aa83ebe4dffd74e3b0767d4f9ca5951e173aaf8d622b04eb10a4935f036651b214d164806c0b6895af931","ssdeep":"","tlshash":"4e11b71f77ec8a3b0a0d268802a72cd123e5194047da4c85134cf575310ebfae10929b","first_seen":"2026-04-27T15:50:28.032929Z","last_seen":"2026-04-27T15:50:28.032929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33815.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33815.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-674\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwjVTzNmY%2ByAI6oFEdRO9FAOwSU5oMviAbUiM6PrQnAIo4chQFaQqYt1pJrYo9uXfbOzLLeQxJyC6LiGUc9QN%2B5KSgi0Fk4inSp4EwmCD7Foo%2Bnj07EZuBSSqx2kfn3p%2Fndq\"}]}\r\ncf-ray: 9f2efac91a175fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1651)","md5":"63c16aae49a9084045a6c66cbbe918f9","sha1":"3b1dea0d0cbf0f9ee77f30f77660d966da8779fb","sha256":"6db96e1849411c42a0c9062476c78f2e74e866af37cbd589fa1ba708832b68da","sha512":"cd8e6cfbdc37920c1aa8d7e12dedc09a19deb4e2cd79b873086b2cc4adb81cd1e96731c57fa8c459c72f3e2e328c5496fee6e0045803e3dcccf059e6ea175f0f","ssdeep":"","tlshash":"6a3133403558e57357fd9d4ac02412a151003be873196cd6302f1d36a74eab57b962f7","first_seen":"2026-04-27T15:50:28.035251Z","last_seen":"2026-04-27T15:50:28.035251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338535.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338535.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-199e\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Flc3xSotfs43GWQHOWuAwrzrAlOE3k%2FPZ%2B6RjMPkU%2F8MhSN7xbPQOICetJm1T%2FhegNcu%2BBjnhSnSVTXbYxpfta%2BFB6XzVeHtur32uKnZFExdEh8tF%2Fv0mpeSlDdZp2mM8NVK\"}]}\r\ncf-ray: 9f2efaccea745fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6558,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6555)","md5":"fd8545e3e0d0699f10b1e37d40e3cf21","sha1":"f450a1016e4a458f3622af81691e2c9e4e15a453","sha256":"7a2a9c83d767c6c223a9b7fc0053dc666593e00de2f980954df5cce3bb0fc4bf","sha512":"fc4cc18303b07af5643ea7d285311997f63b7eda796e57a4ff1d4938f5727b0c0c2ad074f318a32752b92813888df2661fb5359d052a03252fe375b122ce90fa","ssdeep":"192:LTCTKukxqyE/KmPEAyRZlXifSUG70/yXNB5ltgRXw0:LTMLyn8ER8kXNB5K","tlshash":"49d1d9023918abf65fe715f290f51810038c6f9cd16960e1e1fbae2523cdc9497b9fa8","first_seen":"2026-04-27T15:50:28.039343Z","last_seen":"2026-04-27T15:50:28.039343Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338541.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338541.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-f68\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7AnLu9DJIir3NhTIpnPMz5%2Bol642udBgexk6L7P4WFjQCYtjhfy83VT785gSPp1DhaOk5wuKnj54O31tBAA9peoKXWWv1IWRFXzYqAzxwtuRmbIj5ULd1Fq5LsLJ88AaJ55\"}]}\r\ncf-ray: 9f2efad50b985fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3944,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3943)","md5":"7c4310983d7c3aa802ee8c8e6cbc7933","sha1":"80d2f99cb2b78c228f3b75e01c33e991879baacc","sha256":"4f877c9b573036ef3d979323d455cf22c07a977106d7a08ff74df8e20e4707b0","sha512":"82527536d86fb25ab70603d8502ad0a0af20aa35e20a83e5500fd7e838ac43486c6823178e6f71bc7201912156d35ba6e65dca9335e13b86d6cfb174bf00f497","ssdeep":"","tlshash":"67814154a405e6b9dae22170c06e07d0631abf6ae95a5865f3fd4c513345cbde30fb12","first_seen":"2026-04-27T15:50:28.041805Z","last_seen":"2026-04-27T15:50:28.041805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338543.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338543.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4bf\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0H9qKYPUgyK%2FPrIP7as3DSvd%2BhjedmXl0RMsHdbEUYAicNZmpB3Am%2FQ0tzJaHPgSN9c4N2aWSJfCk%2Be7RYwlteQIxPL7XiQzzD4ZgiB4oNZ5NDYX%2BQrB4ap8vu6KPYt27Gta\"}]}\r\ncf-ray: 9f2efad9fc1c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1212)","md5":"777b25bf1a5af2b5d9805363c5b557dd","sha1":"3346e62c39e26d3a3117116f5153249e215e0f47","sha256":"1ffe272809ef0b512bdab064374cdcddb366afa6be1d5f6712fc066f91270ddc","sha512":"994bc8c88d11094fef146d59597f918290e7d3c069add55171f4e7f0b055424e4fdfc3e99092824de74b4b443aea4b8caad4038ea4f5ab7e917f83466d299be5","ssdeep":"","tlshash":"c72114003e46c9fe97671141786d8820d1897aa9a24cb8d6f7fe1c116677835738b736","first_seen":"2026-04-27T15:50:27.900709Z","last_seen":"2026-04-27T15:50:27.900709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338612.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338612.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2fcb\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXut%2BLPF%2BPsiNCMV4%2BvyUUxVDx3Mdx6Ni9BAXS%2BHts3ahvlymQMRwSAiOz5mTAgXVGqwl64tNKTd3Xs4MlEKhdO3R9U7rVOLWd5sLri2YQuq0%2FFz%2BURcUhtH8tKSG4OGlaVX\"}]}\r\ncf-ray: 9f2efada1c215fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12235,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12234)","md5":"8d8d8828e4282ad1e5609582f48918cc","sha1":"01ff7bb811c0b355100c3d7cfbcab05c5ae404a6","sha256":"9603375ee31731aa145f9aabfaf4474ec210b1197122e2a5860de8ab2f845e87","sha512":"90ad644ad4f32d7bdccc8abbf61c12c73dcca337fb37a1c9be563a08024db3cf75d8e1a5c281c70d1d46f4b9ac7bbe44bd2cc685ca88b40925365c824e49ba29","ssdeep":"192:rJcRZHbHyRa9M5cC/C72k/kxDjvHSrDXt0KObSQYRnAiSomfmNm+9s3vzf2x:riH/SNxnHEXEbYRAijSmLufs","tlshash":"a7421b9983a65bf4ea174330a8b844427fa92df9d60d4ae353f48d51e391cf87b0d670","first_seen":"2026-04-27T15:50:28.044242Z","last_seen":"2026-04-27T15:50:28.044242Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"9095.etherfund.cc/socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket","fqdn":"9095.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"172.67.180.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:59.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"GET /socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: 9095.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://etherfund.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DLzE7BV6uhc3PE4Lo0LtUQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 27 Apr 2026 15:50:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6338\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EEwvMnYGWxEDRaPTKrWOWTlVKmasYNGMsZNOgDg7kO5ThPhl5%2Fd3kcUz2868dCtqY07vHqX2xh74icgwOpm4ldrphE0bvt7HUzNk20zTJj7x0szCqSyOkzd%2BbGuZ7QrLPKWWEA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f2efaf958737127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=575\u0026min_rtt=536\u0026rtt_var=175\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3190\u0026recv_bytes=1366\u0026delivery_rate=6473919\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=0c4e77cee2533c87\u0026ts=558\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":541,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33896.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33896.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-9305\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVNFOOXgqJq6vMqtYadMG3secHaWccO3OImWB1sChCXF137S5driVANOJRtHh%2BOFTHp0Z8A1qWB8xrLG%2BQEqZYcKI9uYwGrh%2BPakbAT016v%2F4Lohdsc6%2Flg7CygejBjqH2W6\"}]}\r\ncf-ray: 9f2efac8ba065fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37637,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37636)","md5":"3a8e62c065eb8569628aa4f66f713bf4","sha1":"e76403549605981829ff7edcc9a05874965dcf14","sha256":"37ab1450b196345ad9ac88784aec5c2115c6b940335f75db76390426dc87aeed","sha512":"70ec77ada53486ad7c2ddf0e5dd8c88c0339fe689dd1fd472ceef0a1288509f8e22f42e1e4b7b4c19174916443cc719328611d839baf41d79782760787905b37","ssdeep":"192:yOMcp7k0UYqVloc4TgcfxprGlQZguYOxLcotn80A6mvChcJYPxvVLob3uXWg0KeB:yOMcpqYqVlobgcfxBguWrJ2VLoLg0Lgy","tlshash":"8ef28565b669693aac33f5793f648accd190be51c8134251ea13db250ccb7b33e316a8","first_seen":"2026-04-27T15:50:28.046703Z","last_seen":"2026-04-27T15:50:28.046703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338636.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338636.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2f07\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2MejG75NCO6AVVYquI8y8S%2BFxCoVfj4bBRDXGYrRLDjo3qlG2X%2BvQCJ4pu6E5pmLa%2F%2F5ixw%2BsQfCz7eyfteNtvUUI0tFCVlfW2zWyAB%2FGpcM1ZUU2z6gLs0qKAL7NTP9bwk\"}]}\r\ncf-ray: 9f2efad7abe75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12039,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12026)","md5":"3292c674ad19321c49c64f80c3ee6d0c","sha1":"ffd9ad6bc8f2032fdaa38d9bf0be4f57aec4aa21","sha256":"715ab8d4126f55192c8b0fe6e892189a8c497e7a9b231175b307feace14c80ea","sha512":"cf018d538def5bbcc65e249899065dd03b0ec1bf481ef3053312d3d20ba3b4afd28e65e97b0d07ebb323d418c8e999fde98cec172252176c540b65db48683b59","ssdeep":"192:J701zRLPG1ByvEw4VXH+wIltsWsFgQGDbmdVCDw2wagqav7dxYT2Epeir5Kgjmb9:6zkBH+Plt1sF/G2uc2www74T9peir5vQ","tlshash":"4842b412b1934dbcd7b3a15124282444a19c2fd2d006d9f5e1bf1d3a2befef59319b19","first_seen":"2026-04-27T15:50:27.949099Z","last_seen":"2026-04-27T15:50:27.949099Z","times_seen":1,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":321,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33892.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33892.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-70f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeXKEQSdB%2FWhuz3N8RRiKcqPJPunxpvDGzZLtucSnbGCCxKrfpgE648ZI5s%2F1IPK9O%2Fvxm%2F9fxb3jjWTnjS5GeP%2BsLRvWCJMN3KVgI6msiUG7VS8kr2uPc5c5OkOxg0q0JaZ\"}]}\r\ncf-ray: 9f2efad4cb905fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1806)","md5":"a2eab6c6014c85060b0ac7e11f7a3950","sha1":"1912209d274bd8bc27b3663c6db65873ae4fe697","sha256":"4d165037dc7664883e21213092f4015f65b2b62074fbe784f2238724353e95b2","sha512":"c31a628b383066913d0873cce23b2df1128e17ae33d80659150ac35271aa2a7e2bfbdd4d54b54b17b19415805de25ccb9510cdc6633efbb31ffdd6dcd49d550f","ssdeep":"","tlshash":"ac317abef23d4526a833b37f19989f88c2087b61c44a1365ae431995cdd73d13930d6a","first_seen":"2026-04-27T15:50:28.052741Z","last_seen":"2026-04-27T15:50:28.052741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338641.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338641.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4c1c\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrOP5EMl0il5BBwATLrKcU63pqCoueURmnsOZ%2B6xsE4IRuomJY9f2kgC4KCI0Vt5zmaAH%2BL0MTk1ZMn8IJsHxCw0jHq%2FMls25kMYVqXtFsAeiIxdAOEjefrOAvt2Itu%2BSoXS\"}]}\r\ncf-ray: 9f2efad92c125fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19484,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19483)","md5":"64af81c9ac39e7268aa50bfe3f704d63","sha1":"e33099318b5e09aae140b7d80a6f36d4d9886883","sha256":"41eefec610a18e35b1bdff052bc14eb0a557114a25fd8bc45383fa854a210fc0","sha512":"492cb799a0a7cb925fb8364c2b61080916cad85d63ffee12c81ce51ef9bf167b86fbde3619372628f6255710eb55187b87e76f3632e6028e41d529da24dc4007","ssdeep":"384:ClkIlmnDEBaue2wdMhuo3oXpQg3r2mmYnUw:Ca0cIBaue2wd+uo3oXpQg3r2mmWX","tlshash":"3a921000b6138f7debf72276006ca89962dc2f98c00691e7b1fe59045767df49b09ba7","first_seen":"2026-04-27T15:50:28.055051Z","last_seen":"2026-04-27T15:50:28.055051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/apple-touch-icon.png?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:51.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/apple-touch-icon.png?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 11602\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=6,i=?0\r\netag: \"69778c23-2d52\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPHQvSauRmpUqrgDYGRc0ywKiePViVNqGksdw0YqudfX2YmG7h%2Bq0EQiuwkqX%2Bsx8Jstnh%2Fp9r7GtgJAdKPRCHrNTlRQLNeMjk6h6Dm6Dg0UwZ2w1JMepSmFT9vflNyzgcfY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efac5698f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0619e2e86f4c0b127a1d3969b0793f18","sha1":"d182c7425300fa19f55520e1298f5c35dfc92a90","sha256":"564aac9fcaecab4f44b9eb3e7c38b84e99468b8dfd8ac1fbf6a904d5bae4b74b","sha512":"69f6410a1d2010f0d07a78e9643c0ae4e57e14675fbbe4d5d5e3487b85b57edc8cee1056535cf0e0411a26e5146750b1bee2baeaeb7844f80b34e70c7a10cdb7","ssdeep":"192:nSH2gOGb5adTFgTRL0rA7y5Nucq96+1mfT8SLtaNSmZJTIlCgKWI1X5IzYvb4V:SWgOGb2yT6yyd+hsT8SASmQlkW4XC","tlshash":"1c32bfdd482c2cc970ea3b9d08fc4e0059aec3156848366e58afb6318d7cff0365a923","first_seen":"2026-04-27T15:50:28.06784Z","last_seen":"2026-04-27T15:50:28.06784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":545,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33819.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33819.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-7cb8\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj5FpXZHnGvDQQXCdi%2BH10SjjwxDsajRxn2pelmkWbrQjrIgq6Wuv8gGnmdRb1tyAvesekpVl1tV%2F1fVvV1%2FSW5MrjPewH1TCZzvmFqLYjLKxTiOSKRhVpzVDiKgRoSh56hY\"}]}\r\ncf-ray: 9f2efaccea735fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31928,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (31720)","md5":"4e7b4fffb991dce9f0cc096969f44dbf","sha1":"2114d4635bc85ecef6955bdc1d2a54bf95f49e0d","sha256":"60ecb219cda2f9a2aeac5caa8a29c2ca4c55b34a9e92cb84606c6fd5ea6814b8","sha512":"447842ec99b2d5b3faf25b0730c1ab4e1922a01ef114c25c8a824ea7411d38406ab0db9dc579a18cf77efe86f89647d7846ddf15bedd431109b81569f9fee910","ssdeep":"384:DXmpfIbuRdf5M4VCpVJPV2wM//VL9FatWab1MuC8iu876XgROZLWKlcxA68hfETe:DcZfCPRDMXOxC3UZLYx13jC","tlshash":"a8e2e7e532b2f1d612e728e240ff9447e23abd45994e11f0e2089af93c715c5627af74","first_seen":"2025-10-03T14:24:08.823761Z","last_seen":"2026-07-20T23:29:59.32839Z","times_seen":54,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bighW%2BeA68mmUbVi3PPVKBMDu2cdQ4brNfEC7ll7kb%2B%2FsKqkBT3dcnEVm4ZX7EDEXIuWXi5g53UJNCLsuohyZsbDKnHlY%2F9C2sfIdQzz0go1Chqt97ikkIxtTqnQ%2FXk62OHM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad1fc51c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338541.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338541.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-f68\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5pv5ziz55Sp8rmG7xHnX4E0Y94TtxM4L6atedlW1zhpjQmzcBR%2Bd5ZQGDMYBkaIfJA54QYcZZMVWqaKtfgbu5kxf667e%2B43GfJ43e79Uxw7ds7DG7e0BBbrXEQyidRAcLmz\"}]}\r\ncf-ray: 9f2efad7dbea5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3944,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3943)","md5":"7c4310983d7c3aa802ee8c8e6cbc7933","sha1":"80d2f99cb2b78c228f3b75e01c33e991879baacc","sha256":"4f877c9b573036ef3d979323d455cf22c07a977106d7a08ff74df8e20e4707b0","sha512":"82527536d86fb25ab70603d8502ad0a0af20aa35e20a83e5500fd7e838ac43486c6823178e6f71bc7201912156d35ba6e65dca9335e13b86d6cfb174bf00f497","ssdeep":"","tlshash":"67814154a405e6b9dae22170c06e07d0631abf6ae95a5865f3fd4c513345cbde30fb12","first_seen":"2026-04-27T15:50:28.041805Z","last_seen":"2026-04-27T15:50:28.041805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338611.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338611.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d1a\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yoOzPgBGHzOAUKdQgX4zW13WpR4xOCg31Rck5eKm8z3kTAl1vMWuI3pm1DoL6%2F4wkvpJKk0Gl4UqhtAcs7jN%2F2u2mUdqBtKT6%2FLHOyCurZWZWyOvMEZreGyKS80Ga1gCfqJ\"}]}\r\ncf-ray: 9f2efad92c135fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3354,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3353)","md5":"0bbc80a0a359c4eb5552691499373b5b","sha1":"65ce50c9ba521f817f320f3fa18d176ae874f24f","sha256":"f6c23622972103dd86656bd7733f3153560814cdf52473ab05d8c03bff560e91","sha512":"804680c0a1034e603482277a8244dff0a291032d26244146931f1b03e60a3220708ccc4712520c0132805af987f4125b1bf531314645589d2678bce0a4e88a7b","ssdeep":"","tlshash":"4961ca05a532d13ecbf66181105d80e5a65d3f89f00b94abf2fe449123a6db9e30eb31","first_seen":"2026-04-27T15:50:28.073008Z","last_seen":"2026-04-27T15:50:28.073008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33817.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33817.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-bea\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqVgAoWqx4b2T%2F6v8A9%2F2RYAjH05ov6ijw7eWwunBt9xxSde7drzlRyh9fUfczxwqcNJEKOz7QX0fcp9pHOEGRRwF75ciWD%2FhXCOhR6Rhdyoofb59zp39DXmfyALeR77SJkI\"}]}\r\ncf-ray: 9f2efaccda705fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3050,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3007)","md5":"bf03b629c9dac3722e33837d53e9eb7f","sha1":"350907ea568b4ddb8a0ee09a89c9c6f2e54bb67d","sha256":"fb099439471ff63c840595f85d44f446366ed18789cf58b7e844bef9b2701f78","sha512":"0cb5fc22b23139a5dbfe86f0d8d185c9ed75c96dca3da1f8037470f20b8d23d27a82c2fd9a6e140b05d51813c101d33aa6400d9b404f5c0d7b151f984fd6a4f5","ssdeep":"","tlshash":"ab510e798859497edba514d80138b02b44ac4f2ca9dd88bb9b7f3e0c67f68b47f45b00","first_seen":"2026-04-27T15:50:27.985622Z","last_seen":"2026-04-27T15:50:27.985622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338520.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338520.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-79b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RuD9wdwQh5hSHQChLyQwtidKICBBh9EZ9XS1hsi0mFDEvfZqql1mr0gwwCuAZQl%2BtfY6ndWbRy0b5l2XJH5bTtULXbLPbCY3bfjdpdie6m08HaaCGH5nKYCbht7cvnjL%2BDv\"}]}\r\ncf-ray: 9f2efad51ba45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1944)","md5":"f1580c338b13d0ddf99cb35f07a21826","sha1":"2ae8cc20c3ca087433a1795256b155b9dc53a0f8","sha256":"e341d3e7c4cde3558080df49e53feb72f28b573263b62497dbb10a8276846115","sha512":"8ca9eab10e38c6b9ddf68d9502f684c837c257610826a6ba415dcf855efbcd4d3e4f488e2a407d5bc349633760206d51f5522dde7263f838ba8874fa2a4ea154","ssdeep":"","tlshash":"4c413415e413867fbe6354413c1c44a4d4847eaec2087d52f3ba2c713a99d76a79d332","first_seen":"2026-04-27T15:50:28.075467Z","last_seen":"2026-04-27T15:50:28.075467Z","times_seen":1,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338527.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338527.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a42DwUXnLdkK32vTRuFj19FP7neOKYmiMaD3g27QDrQUIxEC%2FZ2nP5%2FGe17oTuXstswKBKrPO3Zy33cm8S2%2FzkAFC92GKTkK3swzSMtEHZikNRPRYEIozR%2Bw4Gbti%2FSN9zVD\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-3af\"\r\ncf-ray: 9f2efad53bba5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":943,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (942)","md5":"d6e59c857a24784c22222cfc755f09ab","sha1":"83668d344ca4367e11e5186f91ccc1dd94b8230b","sha256":"4b1d02ca32bccb7e934dccbab838eb433cb68bb029aa41c1a7c9bc54bc1d9d29","sha512":"c8a27a101cc16ab55c075a233bd2cddf01fb6907ed894277637c7601635124f91009a219aa2ac33aba59ccfdca3f2cbc5c3ec7af75a5a48fbbd8b33019c22f24","ssdeep":"","tlshash":"541104129f01d7b9c3b700541edc641136643ff0f1d8b18af5e6442d650a9f5db4eb58","first_seen":"2026-04-27T15:50:28.0796Z","last_seen":"2026-04-27T15:50:28.0796Z","times_seen":1,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 15\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"dedup\":false}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad58ce3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e5223c4dfa0ee1255d2bfb5dc080fe18","sha1":"a34409628c5ba7f1b0133ab560ad09a7f201dd26","sha256":"aecae6de9df352973ec5419f5f4ba99b1686560ba14f0159cae3c94412bdf0b9","sha512":"73d71298f7fd78ed627e514eb38d5c85ae41babcf46f7b3bf2a5b33e403202068fc911acfbbef64cf0a23512d68047aeed500970602d3c74a915ffa278d88e3c","ssdeep":"","tlshash":"2111671f7bed9d3f1a0d368802572cd523d5691147e90c96138cf579320bbf9a505396","first_seen":"2026-04-27T15:50:28.081991Z","last_seen":"2026-04-27T15:50:28.081991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338534.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338534.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-32519\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FmVfEH7%2F0hLRXuomri6DhOzv%2Fpt%2Bglwa9%2BpIP%2Be7jJaMiP4EpbpgMoRo4yR43t1kA4dJrwzKve7HZynsCoC778h0Hf7u5Z3Y8Xz6R5gW5OvWlQKRRg0WmIaz%2BNf11I0byvs\"}]}\r\ncf-ray: 9f2efac91a185fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206105,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65337)","md5":"37183f0fe7548432ddbb3344047b12bb","sha1":"e422b2d640c9210e1f3d500524145fbc47ef4772","sha256":"d6eb2fb0e53966195c288259ebbcdb921642a97dac83274e4453a19028e95ac8","sha512":"39da7098d7abab8d0de0982b114dc025bfb82a8161cdd48ea436bda8309c92c9eee4f20f2ef4b51b2defeb7b1d5fd37f2907b5212d17abc998534a33a29070c8","ssdeep":"6144:Rd7kg9glTZGiszEgFumXnenRegLqwJIn01eimBUrCKSx:RKvszEgFBv0k","tlshash":"ed14e794fa7170195263a1b9023f1907b336365ed44b86acb56ec9d92cbc08a3677f3c","first_seen":"2026-04-27T15:50:27.944211Z","last_seen":"2026-04-27T15:50:27.944211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":503,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338559.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338559.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-3fbf3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSPy4kRxxN8BD8i%2BTSYF%2BSCYci03dk4GHZWwNyZVb1v%2FTJJXh0Ry%2B%2B84pvO%2BANGa87kgqwNgqzbrgQ%2FfqX4GhompJkmiNIJ5xnoKz3dGdJPoVhfowKwEKm%2FSRsUv2q4s5wcE\"}]}\r\ncf-ray: 9f2efac92a235fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30164)","md5":"db16a715db86b99da60703fa053dff93","sha1":"6c603064b9938a080430e8ac907cd4ea1bf663c2","sha256":"174b3189074f82a7eea8deeb3e55960afc559693a89037ae5c073905962cfe54","sha512":"1a7a1a4f756d4fd25f52c9893e8dfb35c12b3c07f0b6fbca661c0eb6213a9f3e7b82f49681e81c360f65c231ec991a7b7c8dc02b2457bfe569b6b8f6aafd1760","ssdeep":"6144:P+aGKQPmIq50a7CtKxNHZq711yESQC3DDdWj8MBMsyehJUoWU+04cQB7c3Izngl5:W1mP50a2AxNHZd3PdWj8MBMsyehJUoWQ","tlshash":"ec4409d132e3f07647e624d608760002e2699d55744e84acf2ac9cdb7dbaccd95baf38","first_seen":"2026-04-27T15:50:27.964686Z","last_seen":"2026-04-27T15:50:27.964686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vm1kYX3JwKEdKAPJ1lI8CLioKe1k%2FP4Fd4bz6deIOiFFGahFtnUn8rbnOKLR59P%2Fectp35kzmejktKq9xiUrSXlzEg9cj4rgiO3ThBTJ5cCBNQXfMS8ZqmQGe2lKHgxaNSyF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efaca3c278be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":137,"dns":101,"connect":1,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3389.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3389.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQalx0j2mTI62emkzLuX5Ai04oT3xELF93bVK4y%2FfdMfxLyh1BcoM6xmLgaRZxf%2FDSnx6r7riHHZ1BNl11FRIVn5qox3mz4iUTHsqm2E4yoASuSa3c2hAF%2BfPIFZEBgzZGDe\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-120\"\r\ncf-ray: 9f2efad48b795fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4605e375ede51ab506e32ac5370976af","sha1":"2e577e2f875283fe31147545d38137176b475bc9","sha256":"e1e6110b02033ff02705faa708aae66b06a5be000a5e4f518fe01b7e6f3e0c19","sha512":"630347b313da0f950d4935c9df871b8307926c740a21822702cdd92ca56e0b7d16392a94096430f9c9c05cac16dcf8b64610521d3c175deea973093d3d0649fe","ssdeep":"","tlshash":"9ad08c8ece52daaf2e53407d491a89d8801739894b2307a1e2c7a4340492fa0aa35020","first_seen":"2026-04-27T15:50:28.086154Z","last_seen":"2026-04-27T15:50:28.086154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/kth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/kth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad5ace8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffef385cd69443c9899feefac5a541d2","sha1":"e840929c534a3372c2b2df11f9b3c01d6528ecba","sha256":"51d1440747331f824fdacaf7a00facb47b0feb22c66c2eb0f690399eba4e3877","sha512":"bf9184a2c174b3fcb846ced06844e6320597893c019cd837168747066a29c7b21524f3b68d8f3d5cac23eb8ec33c04f8b793678d8badd2de67ead2a9b345ce60","ssdeep":"","tlshash":"4211b70f7bec9d3b1a0e1688025738d117d5691147e90c8a138cf175310bbf9e505296","first_seen":"2026-04-27T15:50:28.090396Z","last_seen":"2026-04-27T15:50:28.090396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338621.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338621.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-5b01\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT1zjqqwqmwnqYYxS5W5yXX1pUl5SfZBHpldBVTbtgWA2SJmUYDyWVBNA0D45MdvFbKl6Y10CRpsScOMGhlVU%2FI4gQE41lh3zn3DJ7S3ZFJy3cH%2FOMWuQqYOsXIsPxEniOrl\"}]}\r\ncf-ray: 9f2efada1c225fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23197)","md5":"2c3839a4acd7307fd40b4e88ad09a9c3","sha1":"914260cc79996257fd52809137f0d5661dd8fdfb","sha256":"b1a7b698e4c1441dea3aefee83f47a1344ae4d5449051a2dd4a3a0e370494948","sha512":"9c538b85adf0923768a837b95becb784e13bcfae790ae3e4eb3ae95b90d45ff5ef54c64247dba717b996f9fd8e3501bcf1d38a7492c9e8998cd18faaa29f1f0b","ssdeep":"384:2jwwgL3iTZpqopK0ytw5lfOIxIBkEbHODm5r/LJqHh05TtcXtkc3sSPFSlWjGmTP:2jwwcSLq1tRuGr/LJqeItkcckF3","tlshash":"56a2f76beb4922370fdb02a22f4e45d5f72caa68b3b515143ca9d54c2345e38c33b3a5","first_seen":"2026-04-27T15:50:27.819448Z","last_seen":"2026-04-27T15:50:27.819448Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:55.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:55 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Pn9U0xoPeyR%2FkvluWHyHWGUp0PW6JKLt7MIVvdQkStjOttmpcQu45CSdrmSlIat%2BtZeSaTWv%2BGPUOsjlapTbqgmfRBHZuVhwvxswnjEOzjWfhW52b9sKM8Ub7gVEyeZ3pd0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efadabe0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T15:49:48.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 15:49:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srTetqYm2bG3BoWmipEqcYLoXRmHXhlPYSHZiSAjRIJJNALqB6WRkAhSyepvZkJLXX307DnCFTLhY5%2BKCgWECE%2FD2Zu%2FsJ6hluaZBABI2hHR63jegkvbtZYQQN6DRorzRMPy\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f2efab32dce76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12024,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"3bb5137f2e8aa1ecb83883476dd0f3d9","sha1":"9d1eabf4a8e67cf7c3f8e56be169d14caea958de","sha256":"9fa2521720b9bde274537d20c71bee41d868a6d66e052b56eed051938c527bbc","sha512":"6193e159577946352b118908f4dcf68d05442e68822f0af4783e0f57679483c3ad4f7806838213ae14b163e4f4faabdc51455b16c302cc6ec1040c550064b52f","ssdeep":"192:4NFBRfBqdAAPH/BaXcRSTY92nDCTGUcbYWX1jkbDSu6sW88888D9PDiKUT+5VvM:47fxcrvM","tlshash":"4a4274669df3901d600264285bef3229a779e1078c06dd687b5c07c94fd1ed8c7ab78e","first_seen":"2026-04-27T15:50:28.093437Z","last_seen":"2026-04-27T15:50:28.093437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":70,"dns":50,"connect":1,"send":0,"wait":563,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338649.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338649.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-18bce\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rel7ClhXd3a1EISdM5t%2BoRWZba0dDYM67xt1Xd1%2F6Rso68%2BdvA%2Fgo%2F4qBser5%2BJbSPrpococnK8UEYcfczheh2rY%2B%2BGY6JOgR%2FvF3Pi%2BFl3S41%2Fj7nmumeJz9nXCPy8bG0og\"}]}\r\ncf-ray: 9f2efac91a195fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101326,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (58788), with no line terminators","md5":"c0641b431bf2a32c4b4cdb620bb52f40","sha1":"73e76597e6b54ca4ceca462c6ce65e9a6b1dadd9","sha256":"bb95b1ec403c03343778843dc3f325f08d7ee7108f04c1a789d8ca1c9bf82a9e","sha512":"6982d6bcc6e89aef3e9b8e0c51014bf60eb4ea3528bdb439850187a44d9a74fdfe0a7c3ef2bb71cf14bd6781af141692024b8bcf6a36b30a8c759813cc6bf589","ssdeep":"1536:tzn1OTkTmE9xoNzOFE1wcthVkvsPCjKEKS6T5itBehlY6fiZLtBfIpMxYfuKxKh0:t6+xczOFE1NdPGDup7fuKxKhV6t","tlshash":"eea3221871857821d1739af2f8010945abe4ef6ee56172886cfdc6641fb7ce0f60e78a","first_seen":"2026-04-27T15:50:28.09641Z","last_seen":"2026-04-27T15:50:28.09641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338532.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338532.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-554\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hh7Z%2BV0mmh6Od6OI4Od7amuMpIERssjMa0G18AY%2F7JMrEEJVYjDPYgGm71R9XuK2PRJr7V2BRh%2FDJFIIj2HFmmcnN7fFozyJEnYUdAgD%2F6ul%2FTmXJSgwIFi%2BdXxPR4%2F%2FAZO3\"}]}\r\ncf-ray: 9f2efaccea725fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1363)","md5":"3327427e95ca342277f98d07704e681c","sha1":"f1926e4b7d4a408302b367577ac58119050a08c1","sha256":"f38e1d04675daed682ac5d484ac318d2b8be0b2d8fddad6b636287cf85b89e91","sha512":"0f4a8302e846ca290eddf4b064004ad0626c6b1e42f7b43af1bacaa2c29b06a75abc89e60905516ee5a98663dabc6c162131645a744e196d5d1e529e6e2cc860","ssdeep":"","tlshash":"96213111eab1e8f6cba707a8331f4428a1842fd9d4086462f3eb09255658ce55b0eb0b","first_seen":"2026-04-27T15:50:28.100771Z","last_seen":"2026-04-27T15:50:28.100771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33810.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33810.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-8c2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RL8NF8QriX%2BKXdia%2Fd49wGZaNFTX9n%2BWszpIJVm6%2B5o%2BSUDrRODI6Dy6tS3%2BzStMSc0J1Kl%2FnYT17aAaqwrrYxzCC8El7qNjqKm4whuy7K6e4zhCPdgtmm3cgWU7aKsE0iji\"}]}\r\ncf-ray: 9f2efad51ba25fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2242,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2241)","md5":"ab2bd04be6cd4c4badb953be2d311b9a","sha1":"aae55c9c9c159a2b5ae20aee8b537a070cfc3aee","sha256":"8414fbe72aadc540b8c4edb0f7cafaa7a77ed0c7298203548ac556620b42e5ab","sha512":"1fdb743ae41fa9a362da25691f4bef3ccce6b37a33a5bf1ab89c5ff4f4ea6d2cfa682ddab2ab58465ee5b5a19064f9b0cf239a022825f6a024e214d660f50066","ssdeep":"","tlshash":"2d418301bb19c1f58ff614c924a970430d093b1a9b5888d913bf2d39137afb5a7177ae","first_seen":"2026-04-27T15:50:28.103479Z","last_seen":"2026-04-27T15:50:28.103479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338515.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338515.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1055\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GU6PrCmJQOv9se8grAG4Q8TOH%2FJxUSt%2FmsUUin2R1JkitKk%2BJIrxXf7Pp87xUmNLUrgypkoaMxrO36SDAQmsu8I10qfT0B7GS363zBij2w98uzRRKBEfMvV3m7sPKJwRNWSm\"}]}\r\ncf-ray: 9f2efad51ba55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4178)","md5":"579ba1395b741ecd50f0349907ec2f9f","sha1":"d2eec9d5688507f72ba1288be1318f643b14653d","sha256":"a284474f37ec491a0be292543551f80f5dc80053281f89b3f59fc81cf1b74195","sha512":"3a0be41307c07614fdd5926492ebc2aea2244d41967dadd917b6ad60d6a84916f436e8a28b1de5d0774e8f2a011ef475df2ec805d0b0c7da057e45b77d1c5e9d","ssdeep":"96:snon9LR/+sd2lHW41QAvAyetILvg8UIskxSvyJz8xtENzANl:oohRGs82QQRyetIczVK0EN4l","tlshash":"fe819656f73595bdc7b370d368091482b5cc2f99d20a44c9e2bb5e6233a9cb0a3853b9","first_seen":"2026-04-27T15:50:28.106264Z","last_seen":"2026-04-27T15:50:28.106264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338542.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338542.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-feb\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgD9SVKI3hWPGx%2F4H8narq1qbqLrhvYQpPSjOkkILSHBCXVunTNb7PD7cCq5S3EHJjKfT67zPTU7aZbBOakNwI5o4bht6Ukl1wkneLB5LbIbvyLK3jzZyfD%2F0uXF8A7skYOU\"}]}\r\ncf-ray: 9f2efad7bbe85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4074)","md5":"653c7802a90200282208b62812cc4d8a","sha1":"874698065824a28d593d581113c0bf9b5bebe2de","sha256":"e285131516804e7843577f88dd9117cfcaa79a5bdb0dc4aee6edf75fa2e58581","sha512":"e9335c77a137206170f0a2e1aaad9c323570ef4f61f00c8cec4c5dc5d8b38f0334c0aea73f458fe3cf255d3be1f292f48164e5bde9e40412dfe707b162bbdc9a","ssdeep":"","tlshash":"4e81f241bc16d5f9dbb225008e6d0c5a96653faaf10484eaf3bc80233352dbc6b9d734","first_seen":"2026-04-27T15:50:28.10919Z","last_seen":"2026-04-27T15:50:28.10919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338657.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338657.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-24897\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GB%2B%2F5bbbbvZL5YhcB2V1Xa8MFYiPeJ5JOJE7r8YF1BL8uJNRjWs845MqquX2Rl00JUQ9v%2FEk%2FS3bNoO46FDaqksTqr6L%2B9csEHJCO3T7id2ooM%2Bd%2Bdq%2FDJHKcsKzonKre%2BEX\"}]}\r\ncf-ray: 9f2efacc6a625fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149655,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65217)","md5":"eefa1cca9bdef770fc325f9500db7dbe","sha1":"0f4af85cf4679e3a3ea3d81be14fc010074b7eca","sha256":"651c582f5e054536e7141b4acb3903c96e1623c59ca980ed6e4cc6bb981f798f","sha512":"7e5b43e98cf8f230cc2f0814de87916c338a18aadf11a9ead6905e1f8fa35ba74cb77c0e11295f1bad058f44013e57c0dfedd642450153607970cc06c589bfa8","ssdeep":"3072:6aazLOLk6LEZm4xood3uO40yQ6OKLRTrqJ5HH2GkbR/uV3zts+XAy+exe:JazL/Zm4xood3uayQ6OKLRTrm5HH2Gkt","tlshash":"94e3e850b53a45bed7b390d290aa0484a29c0fadd11484e7f2ff8f7127dacb51355b3a","first_seen":"2026-04-27T15:50:27.959667Z","last_seen":"2026-04-27T15:50:27.959667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338628.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338628.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2f09\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUMHJPDBPxHNh%2FOGvuj5NlJl%2FDT2OeQNSpfjH2yS0X%2FwtbwZGlCxA3ob3wm4YQUv4erRbmuKwDzXTflVSUkhEyshbPtZjGmjuXRC4TFEmow1PHhHEcIfAAU7Jyq%2BaCVinDiD\"}]}\r\ncf-ray: 9f2efad56bcd5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12041,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12039)","md5":"1e22b9cb2e58e086aa5687dca98a16d3","sha1":"70964a67924f65e5f126d5a0ac5743f07cadd381","sha256":"3a7a3e14d92b34f6878a375fb261b4fc48f07c8cdd995c545aeba02a6e5cd6a0","sha512":"45c744a15f164aa6f506c965c8112de4a2bcec2a0a97c8345f679f0ab2f687c560b8f6f430439b8b9dbc246fad54482146cf66b79c3ea6cb21d576c23959a7d4","ssdeep":"192:HbSjffQhFPLh2TjNRbx2E1V8B7j73TQrbf6QpVHHftPMh50DgB4HxHKHxL3mpGBR:7SjfYrP4TjNR4E1V8B7j73TQrbf6QpRc","tlshash":"af4264107332af7cd2b371b61134544494982f9cc512cad9f1bf2a223b76cb56b987ba","first_seen":"2026-04-27T15:50:28.112368Z","last_seen":"2026-04-27T15:50:28.112368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33823.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33823.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338636.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBZrTnLnS0kxibaZ0UzBYrMtNoA0G%2BJ6JOsqLcI%2BDh8Uq30uoJN%2BMjdPG2vsmtYrz%2B9kEPQUfyd17wJpi0N9Ncx8hpn5Muw%2FXPR%2BY1%2B963WnMQBNENIF3k90XjJywX1j1%2BqQ\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-121\"\r\ncf-ray: 9f2efada6c2e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"60e9c59383ca746e536661af68282c60","sha1":"57a7617c2a9fd67b061d91b5bf8303a013141d25","sha256":"7116dbe57d0a86ed3c6f9820db411675d6f997e88796f26df8803baaa491bf4d","sha512":"c205267fbd5f0bc8425735ae2349d78447c27247a9f264667fad15a76acea9c9bdbcb9623d39ae278e405a346215b99c7daf0b10f5d9351ce7375fea1f30c27b","ssdeep":"","tlshash":"5cd02b3347c640b617250c5c9764e4a30130033a3f99d8dc38ae2e143305dc5ba76d56","first_seen":"2026-04-27T15:50:28.115487Z","last_seen":"2026-04-27T15:50:28.115487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/img/crypto/ETH.svg?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/img/crypto/ETH.svg?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR3NqWpYMN3m%2B7v4ebOhToOdzUxnmjKqfiIWAFZ%2Bbw97spN4s97gLLUJXesLU7mm346pp%2F0XX0YTg4Al9nagUek6n4nXxSWVECOsgcmziURsS8uCoXdj2p8V445HURndP4bD\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-20f\"\r\ncf-ray: 9f2efad04b0a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ab23ef349dc3af3c75b73e1cc368d05","sha1":"7b18e2b38ba70f97dd765d9217179d6cb26cfcfe","sha256":"01bfbbcf6664ee69adb0aa77a3e227bfe6f52cca808de99839d7ac65034f6533","sha512":"3950b22fea322286d445bf705bf3cf2250f62f8f3e34ba3b1d016a53c531c4125cd2260fc25e7f319183268b62467d8c3827483eef880234038a39f07fdb8471","ssdeep":"","tlshash":"4ef059b9b67c805a1e0497611f7c71b3003231dd224902ae3254eb2ce08e3bb2824fe5","first_seen":"2026-02-04T13:42:26.026027Z","last_seen":"2026-04-27T15:50:28.118461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33879.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33879.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UDbS8iSYjOTpjwUyEsJ3OHbWdU71OExxAzW7k8bQ8oKIDNhxNdRjYsZ%2BTKyrufNFdNurzG%2F7yR3hFHRj4qYGE3iBR0G7eIr9KuRL2bVJlLk4ew9aE3gZiXVi6%2FwzKn5McMV\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-124\"\r\ncf-ray: 9f2efad48b785fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0d1d5a4262659e3e939bae57eca4d649","sha1":"91d43f681b3f1b4559349f0d8f8bb0b0b0ad8758","sha256":"0e4ba2b572d5eff5e727346c9612f3300fd752055e9bf776d9766ac8f574870d","sha512":"c2a84c87bfb7147bd8626ee3190731d2e9e42e37b4e220f13a8b89e78d711cb1cb7b39f73bbc361185aff90729459ebd51d88105860fe292dd4607be3753e94a","ssdeep":"","tlshash":"cfe086aa3d5a2446e967c2da74050dda910b2329c7008252238351312b4f79e7910210","first_seen":"2026-04-27T15:50:28.12199Z","last_seen":"2026-04-27T15:50:28.12199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338531.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338531.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-6eb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEx0Wpxv346qffG70gVgVhb5ISF3Ap3qBBmOAgp8F3t3apJY75LRjhG5NQIv0MWOJvBT3eXYxPrXD1Th44kyILVQgJbe3QmqeWm%2FEfnaWqTCNepuflIVRj6M2KgFManLjBL4\"}]}\r\ncf-ray: 9f2efad54bbe5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1770)","md5":"8e80ead8c31883453afe5e5f5f165108","sha1":"74658c89843ef2730a17253c69d1760c27482579","sha256":"0470b3710ca9c27efa2e5de43f02377ad15681b5b93844ff99d53b2f2ad20a6e","sha512":"d810f9a4ed66f09f1e6c232fef51c5fc934a5ad5fb0b5027790962ab1a4f795f882edd21c69bfcee4066e8459277e76ca473c1f5b8a32dd4d27cbd3ef92cf168","ssdeep":"","tlshash":"ab312f456e508c7eebb32998264118441f6c27ba319da8c9e2d7ec190645e7cd29d332","first_seen":"2026-04-27T15:50:28.126702Z","last_seen":"2026-04-27T15:50:28.126702Z","times_seen":1,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338544.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338544.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1fdf\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDbj%2BZChJQf004gPoqOodoFs5TrrAhm1L%2Fv9Pg10lEFrNsMV6a38odvNydn1btDq5LpvOMDjx7HJ4Zr7XdWtJHjvQ9gcymDjNLjRj%2FBYeeUEzYaxvsdunxWnEhi1Td1mGE5Z\"}]}\r\ncf-ray: 9f2efad8fc0e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (8151)","md5":"2daa5a9c278ef07eeec92701062475ea","sha1":"554715ab8a745e8611251e51a601fbd02e5d5ae9","sha256":"cb4b1f9c767c0b3566f7be2f791f9ca965d3ac1bd4225c5aad2c0309ef68bd52","sha512":"4c076048a5039db5349257082c19ed520ad79fc4e0ac985de7d0ea5428d99f28d5d007df9a774628207ee436f3a88e523b0bb76459f14abf1f0141fd033f1081","ssdeep":"192:bFrwC2g/wOzYSYLwrbugLW/fHMFXZwNMbUoU9:pMHgYEOLwrbDLW/fHMFJ7woY","tlshash":"71f132107b22d9b9c77712f5649a0000a1493f89f30448fae1ee6bd127abdb6471ab7d","first_seen":"2026-04-27T15:50:27.962162Z","last_seen":"2026-04-27T15:50:27.962162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/weblogo_light.png?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/weblogo_light.png?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 16635\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c23-40fb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRqPS%2FEyvxohCGV4yV3wAgkf17a30%2B3x0FtbUhqEHOIEUNXuGaPA7d5I9%2BH9npU41ydQDpvq9JtNgQO2Pzh5qqxA7DPP5gsxXQz%2BvuGQxFk1h%2FG1hkUfmcgSuLNa0Mk38VNw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad03b095fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 96, 8-bit/color RGBA, non-interlaced","md5":"fe54475258458c88f77d02969185d540","sha1":"980dc58fd063f9b6d7969db50f69d3532f15843d","sha256":"af878defb75e2101108cb558d7fadd04f5cbca7fdb119078390997334c7ce321","sha512":"983cd1ed2f359c564776f94f4e5619f87d0fe25edbd096177cf1a28d879ceb3590bbfba44b705fa53bdc68333907600c2be019760f4f20a667e0c32e6a0bb233","ssdeep":"384:5P5JHUfxnRE468Aak2e9AwR4JDoiIpWxaRsBJ6E:55JH0LElovtbNwRsX","tlshash":"6472c0905148222b68e844e0b44946f5c93f5f7b8c4a0edacdb09e24ce3d9b157c6efa","first_seen":"2026-04-27T15:50:28.130784Z","last_seen":"2026-04-27T15:50:28.130784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/fonts/BinancePlex-SemiBold.woff2","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/fonts/BinancePlex-SemiBold.woff2 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27956\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c25-6d34\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqg6LhBOR%2F9syDx4aVjkWZKTch1zswLRB01UyoF4i8jOV2YXtjaqfXDgIKowb4mudKkLRfm6QgGunajEm%2FHsLttGRtwzjxPT5zPmF0h%2B9G4wlN8dYVCpziC95x8aHSTFx3wD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad0ab1a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27956, version 1.0","md5":"661d32758f274ba9357e60e2f4696cad","sha1":"865ea2bd29f9d2c41170c6e164c5a85528c1e1da","sha256":"74fa68ea2158126b534a8c76809695c965e15a77915d1785f7ad9f1f682f5b8f","sha512":"fba7cfe71f187584d6c42fde007e6a71504b70b3fa7c03f3fae41407989b645a8656c6c283001c190d5eded4860db3f99568b19e6186974f667da117d0463fb1","ssdeep":"384:RRt/b70n0a0p7TT1egPbxCu5JgGGPjkko+d7YObCiTxQ3zh3becT076HXWyF81ck:5A0phecQ6gGGLdDYKCiT4zl3g7fAG","tlshash":"dbc2e1ec57a17b88d0fc3804ff7717a0c4d2d55652eee5af15122e2ca2d0a989e148e5","first_seen":"2024-07-15T22:11:13Z","last_seen":"2026-04-27T15:50:28.134811Z","times_seen":262,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338620.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338620.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1cda\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQaDX%2FAD%2FX8OuGFCxjYKaykgXRe6sKdENzfpEjP0fYVBP6yjkNaAsW08SZyrLhbekj99vZmRDOGdrggpiyXPDlPWEE9ZWOmUfZcbLzmQwW5V%2BglB7Wpx9xqpdPg%2Fv3t8SQmb\"}]}\r\ncf-ray: 9f2efad53bb05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7371)","md5":"f0c4b277a03ccb2bdc69bf9c26e623ad","sha1":"d56b80658bb26ba9f85a37f63aa46aa0fe135260","sha256":"ed79a70c77d46ee76a0e7f0906c47bf7ff0690cc7c5ecc185a39f9ad1b3a8d3d","sha512":"82ca32662cf9f420a1160e6616d129d8b9ab5f3c52ecd76959492e8b410af4d8c01fbb66acdfd463868f443a7e9620d5cc37e8a3a8988e98ea84af50a8be037a","ssdeep":"192:LzLwrISMJXwGThTMWcy9zjKtcW2L44ejiMKZ:LYrISdGT1ZcyRjKtcWg4n+j","tlshash":"9ce19312b70389bfab7b95d0384c04d4a1186fee800c15c5f2f90f9a27a6eb5572477e","first_seen":"2026-04-27T15:50:28.140808Z","last_seen":"2026-04-27T15:50:28.140808Z","times_seen":1,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338526.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338526.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4cf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoTG0sMEUL2ri9LnrMV8qGZo41bsZhvBN1QAf2IOe9yYuTbULL1sGvJF3AQpMFPF%2Ff%2FStRar2LZw44cVKP10tDbwVehz%2BqEEIeZT9KNYZiCQR7V2dUKLQ1nhHvs3QW6H2Og1\"}]}\r\ncf-ray: 9f2efad53bb85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1230)","md5":"f5a4e3f118b012a07c10b882e7678f9c","sha1":"6cf426953b69583999652883fef025419c481e6e","sha256":"ab6665bc67fd767a646682621c9a26ce281f0598286bd5f28b46fb996e81e33e","sha512":"1c8d0fdf951f244902808e191d974e813186ab9634420b203a58b82baf98a50ecabe908009fc78f2259be45a2afe121d2d43e50d74f96e0ad3d4178f9e4c578f","ssdeep":"","tlshash":"e421df039783a23e837740103a4c142025547fa7b05ce8ab61b656d9a7a1e79d75f723","first_seen":"2026-04-27T15:50:27.868082Z","last_seen":"2026-04-27T15:50:27.868082Z","times_seen":1,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33824.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33824.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-81a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7BA2fWtW5YSr%2BnQ2Sqi%2B5z2AMoTkIr7xnqClnG%2Bqw6TO0xEQ34NA%2F4MidsXu1oPpmy3DcWxg6QHxto2ilANbQAThV0Ez8PEFgDCTRN2%2BsqIuQzBAxamaTbg7h3YgM3rzFC%2B\"}]}\r\ncf-ray: 9f2efad55bc45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2074,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2073)","md5":"0cc2d88c590745d80f0e805513796790","sha1":"847e3be21e11c7649dba43a67da293ffa89861b9","sha256":"e0c7047347265f6eb6ba32f103267b4efa9e8c1e7fce3a9ca96ff04abcbe5ef0","sha512":"5285f083002ffea9bcd1c19c6897e3223fb2530c91ec5f7c772f00444219b4be545530e096828d92474ce1b85e43e518da78d21d70eb63e4d1c14cd659e79d66","ssdeep":"","tlshash":"2641659236aa66f6c3f40a8024a815dc59792b58781fd8ef326e5b5213f3c0ad42dc33","first_seen":"2026-04-27T15:50:27.931073Z","last_seen":"2026-04-27T15:50:27.931073Z","times_seen":1,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33895.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33895.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4b22\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vz%2BrnJgPTySCuZQ%2BocEiHAWapV9luNKlO5Pqh5uEysVf%2FI9cRDcn2WIsZNwW9jUpcyuogjJ3s9adLlu1mYoJfS6K6qX80ExLOOm0pbGbQde7FBM44pJGvpc2%2BjM%2BltVbCrYn\"}]}\r\ncf-ray: 9f2efac8aa035fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19233)","md5":"88cc030c58c93970c3a7aff3711d8690","sha1":"8f64b514cfff1188f8d9a3d21a9e8949318158d8","sha256":"fed967670672dfbdcb06e33903c187c59942005fcf1967ac41cdd32bcd7399ef","sha512":"ca3266fd8047c8fd63350cf6d4d73e710d1b17eddf051a451dc6d0f2e323748accf342c556c206fbe70fec86b18be0de057a4a62a530e5e7d05da17a566dfb40","ssdeep":"192:+7aDm8oUPTuWr3ArtoTUleli3L9asZQbCCpakWSR6YPx9/aoBRli9axZ1EiQMcgG:+e6pqTxjeiTWAqPYDovOX0g88M1B","tlshash":"0f8222b87a49703a493bb0797e2884ccd424ae50c813a2d1fa8f94360dc77f23b77655","first_seen":"2026-04-27T15:50:28.150523Z","last_seen":"2026-04-27T15:50:28.150523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3387.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3387.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdWh9I6FxD1xD%2B7XReyrq%2FkYHTycOen8J%2FI4evORjEuonA9yJ%2BZM4ALmCR4LP9qDbSPq%2BXMyTteOxfhRvEjP%2ByLrlFzPa6%2FtkqNB2o3VHE3FKJm450OO0GvplVVi3SKWiAZU\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-19f\"\r\ncf-ray: 9f2efad47b735fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (414)","md5":"4f4a784245b5782f80ecbdfe0eb4f047","sha1":"1864f14b145cff98991cb40fd06e49cfb3fd2538","sha256":"99671f5f769eb8717dcb123558f65c724c42819b00e07c54b687d176846e4fed","sha512":"22a12ed3641ef32b01ff2d8815b546f5818340fce36404a02d8fc0e851248ffaad8b6c098e01d1f14f0a09bd29a750a6ecee14b50d1b91614b01105226717729","ssdeep":"","tlshash":"4de0ec1fa6bef64d476788a33e654f44ec00ea04910641f0ed435e324d9e9723fa511c","first_seen":"2026-04-27T15:50:28.155469Z","last_seen":"2026-04-27T15:50:28.155469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338618.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338618.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2456\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BnoJai2G5Fb0mrX54q%2BDPNYLqu7LMiHjvEDnk5nId6iNc9pAK6w8NlQ7XBxxgEFh2c8bdAFqFMrSyfRLPgd6qYcm%2FTWWUM0V11gmoKzTxDCrhuh%2Bi1yopaqmZayVSQG9eEL\"}]}\r\ncf-ray: 9f2efad7fbee5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9302,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9301)","md5":"530de6ede2602a56847893663bedcbc4","sha1":"847c9162e0adc262a9a565411f9ab4096f2df3a3","sha256":"a5aaf440f8d9df663e1066e1347f6047cc71c17b3988ac90d03987daec8261b3","sha512":"3bdabbcdb56989fbb7b17d3aa9dfb02da52b6f9a9055d1a7fc4086401b416f3069f5af135d45ceafe24bf1f640da8efa2e5dc804e5657c07886695f1ee761aaf","ssdeep":"192:qL8wQThvwjgBJqb4Qj2tqAwhsAheiw7F6bGzS0b9XXs5jG3VSKcz0bC:qLluhMgCXcpwGzS0bt0jG5i","tlshash":"5112b400b815ad7eeb73105528390994b0443f9dc144e4daf2fe6c322ba3df6ab58a79","first_seen":"2026-04-27T15:50:28.023002Z","last_seen":"2026-04-27T15:50:28.023002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33897.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33897.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-11065\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVQnLrzevz%2FvbnDliCTIoJUm%2BVXcfOZfY6D0sDiaSM1zv85yGlcQfLXkI4VjdpVde5K3IFcXxIMe%2FkbsM2nXjf5jLkrqIJDkYY%2F3vU5tCz0S7xM%2BKmM7pxChPOcGKKLN9F27\"}]}\r\ncf-ray: 9f2efac8ba045fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69733,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"cd3e532b7ad9b6ae84db6f1f36bbaf9c","sha1":"e611f8a2aacbaa088fbe860cf704391dd83a1301","sha256":"d9989de7344f6d59922cc70f23bdcbce33755b962c54adeb432321541f2e1154","sha512":"4cb4b2311a7a1c9addb4076e2ff897c3e66a49f3f34e135982a849be9101f87b7dc3922900d1b22cd7b1f66d1332570d2b0e83fbb5c02f6fee24d4146cbdd928","ssdeep":"1536:GK/wG3ztM3ztM3F96/biZym8+o/lUf8fRowzTP:GK/wG3z6za9bZdUowzj","tlshash":"0e630a76f2691579f833e665e6a4af4d6d00f8b3c922074df50778358ccb3b22a2199c","first_seen":"2026-04-27T15:50:28.159661Z","last_seen":"2026-04-27T15:50:28.159661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjVedTrUSO8sWWsBZQGGSBohbCwtXQQzfQfWP06lugc31F%2B4AEb4x3sNJf6m1T4CNQhLgEJP%2F45hWcvfTwskkQNT0yOuMUBc%2BIh6Xul88aVj%2BeDUfuyMbrJF56ji3Kvx1Z3g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efaca3c0c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":816,"timings":{"blocked":136,"dns":98,"connect":1,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3388.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3388.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wILMiH22l3mZM%2BCNS%2Fbr2OvedAXNDFG7yME4HYTOZF5ka0Ifn7s%2Bpm5m3iihRKbZJd7RYzlsKwFChAwVxYA6kmWdQF3FKuF6g6%2BTOvOwIJ8WtObA3%2F4VKKTgWJ7zGTmtpY38\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-140\"\r\ncf-ray: 9f2efad48b755fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"4640fe93f14d2c336bb45c6dfb6919a7","sha1":"2a3527cddb9430e11e21e5c32b3f75aa98980b37","sha256":"a7c458248ce76ff8621243b66ca80cc9a807d5cb3bf4bfe3487ef0ab669f028d","sha512":"ae31fec18b046537efe0eba18a04be663e1ef88f9530edb649b3d2854fca1bd09a0166fc89ac78f7d1a8ee5c3b11db8310ce7f2f8c6708da050599eb063420d5","ssdeep":"","tlshash":"d2e020196b34f114997fd55937406d5c8520b50148371241e3031f666a977333a2c544","first_seen":"2026-04-27T15:50:28.166Z","last_seen":"2026-04-27T15:50:28.166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33885.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33885.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5qSFAnyaPiMzCodT2X6EIGlqjmJ6s5%2FsZU9SbIUrtfG%2FxMP481R70d5lY6E6seQf1kpp0G289jFVXiEfMjuty1Sgvn9uH8OehOyfoXMadj5FoXg5NJMBSJXyHfoqdctTJS4\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-33\"\r\ncf-ray: 9f2efad48b765fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4046391d491878e9510a1b80417f4147","sha1":"a837e220e0c5c11134a50edc454caf80d01eb60c","sha256":"369853dc437d57f96a5a70b1bd11f1c2c06ac241b08d6f9b652dbb541d2d5333","sha512":"5b42f980132757b8008ddcdc9eae4634008b14617aae09f617fed870aa62b07952829aab74917f7fb0987f710e136241a9ce8f259b19be5283cca31cfbc7728f","ssdeep":"","tlshash":"7d9002146525955508a559d0a5612b54d95521121e1922978a550c055a825c011a5458","first_seen":"2026-04-27T15:50:28.169727Z","last_seen":"2026-04-27T15:50:28.169727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338539.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338539.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-848\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pzp7qKDOjtPTtn4WnAAiGifmoKhUsaK3xoOg0fIlov2%2F0F8nHAyh9w4a7YuSVgmFefEilVIFyVI8niu7Lo1bUWTb1BEACHHLTOoXrlJPNI2mXI623zq8laB6LGDvnLLJH7D%2F\"}]}\r\ncf-ray: 9f2efad55bc55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2119)","md5":"2190109237a357338d029776e3fb4091","sha1":"7ed21ce3ca74df98a7f5c8f504ad65e8c41bf3e7","sha256":"8f4a3c6f84e7b78d9ba23ae0642b6920aef28776222028586c0402b1d11211de","sha512":"043acdc66cac7beaa73ce24a1f6fca21e54403f6f4f5be6dde5b3cc151f144945ca7653170fd88deb92ec80260c1b4f994a37d0f9083d79b764674a83f5aac28","ssdeep":"","tlshash":"7841dd21bd02e27ee7b3485090190590215a7fe5f15c70eeb7ff0a655b92c39fb0aa36","first_seen":"2026-04-27T15:50:28.173286Z","last_seen":"2026-04-27T15:50:28.173286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338523.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338523.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338515.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-5c8b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huCH5GVf4yLLfeFnoaPUGVI2yW%2FWxHyTngnjPsStp4glz1AZ%2FRWeMDHQSEQrDnqOswaViv%2FkItP3FH7N0uzKKha2S7TchAE3BIJKI7yEk0ANAjLuRTnj6UBhXVqmu0FyIwig\"}]}\r\ncf-ray: 9f2efada1c245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23690)","md5":"0aab90f9ffbbd4227beca004d37895a4","sha1":"62c3ea6ec826063ba224a7762020aaf1bb2d2908","sha256":"b3399f995a3bbc4fc997b187ef129c70ba71b8c3264dd87e89056fff490c52eb","sha512":"1cd4fae2b92a3ad7cabcd1d7d23758847fee6daef9d1d1edb825ff8f5f05d823bc94048bf76e0adc91130ecc63a7fb557222a60a84aa1b1f749f6301b6d91130","ssdeep":"384:mdR31ChFSs8jT9TboIMCZ15cbvjBCyPTAP7v9c2J55+/GHAdDwWsh/TrU9Kvl45N:m0SjT9TbocZ15iDcP7m2JfHcEDhIM4UI","tlshash":"9ab2faddb2d1b56a439725e9003f0409f2bea824341d55acea58d8c3bd78d7a81b7f2c","first_seen":"2026-04-27T15:50:28.176614Z","last_seen":"2026-04-27T15:50:28.176614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:49.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-178f5b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2YkXQo%2F02YKCFR0I%2Bv8Ux5dtDtR94QROZOY9%2Fa42va122wul2lilcLrONoGqXF5uel9hn6aXd%2B5Bcbv2AvjJqoH78v1uM7TumhE%2BJpYSwF1nZBU9%2FNbz4m72vapJcvht7Sx\"}]}\r\ncf-ray: 9f2efab788f55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1544027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40888)","md5":"49b8759305cae0f047537f14299bd9de","sha1":"cc6ba29c55a992ae826a6b4c666ecd47f3bd7179","sha256":"b16b8e9ad18be6b4f2bd1d9e14deabddcb3e5a215dec53e166af1978a4242dc5","sha512":"b9ce5d2024f1b426708b9ccd08193cc184c920ac4ec9cfae82c19d78b5e44c5fd1160a6728e2ed02695d6d3aaaec7d66229cd6ce0895f0acc5b46b70d22e306b","ssdeep":"24576:NIxhxV3lc55jXe1v9JMkJle0650qw2FiLiPiv59U4V8Z8oo5as6EGv:NIxhxV3lc55+9JMkJle0650qw2FiLiP9","tlshash":"a3257de5729070a543b715f9112b2090b1395c55384d8098fa6caef73ebb889d2bff39","first_seen":"2026-04-27T15:50:28.181877Z","last_seen":"2026-04-27T15:50:28.181877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":1026,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/fonts/BinancePlex-Bold.woff2","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/fonts/BinancePlex-Bold.woff2 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19024\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c25-4a50\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iP3ASpLtPm%2FjP02AElS1R8%2BQb75MDyljXmH14ac9Boz7XcvIOpbtFO8TZJ22nbk%2F6deTu%2FezeeAGIt%2FYVY%2FcW4xgnOWJUsi%2BajTdbWOrdPWjyPwqTcylJNmQ9NvonpFHs4GJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad0ab205fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19024, version 1.0","md5":"5e3149a710d2a113404de61e14bc2050","sha1":"227c0f3caba25cfcf6dfcbc7835ebc7df9fb075b","sha256":"5dd8ac376fde4909c3df49ccb6af3c7a8f739c3f11a6a589c7817dc2d24a1086","sha512":"14f52e2006878dc7605efcedb733b7992fa12a431a37e641b12362fbb748905a8c14632499f641d4ae72847398989969e2015bac6648e1a335c55f30e2a4a19c","ssdeep":"384:sKe3dbpa3v44GnQvOpee4OstZntNZZlbOwK8MR7V+dMZ/RMYRMGc:sKKpa/45nmC3oZntNLlbf+RNbRM3","tlshash":"9482d098e134760fdd87cdfd9c31a887111c98a5ec4a0a42e5b1f2d5b2e3c932541bb2","first_seen":"2024-08-10T14:26:16Z","last_seen":"2026-04-27T15:50:28.1871Z","times_seen":92,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":587,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33811.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33811.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5H%2FuHrXhkF2EOGPzuh9Jhs8iC4GVzVGlZelLdJClqLyTAkgGNcdUCPri1X3nQSl3TROSygSscPDWJBpsJa8Bvzu8rmTfBhzTFptoHH1zD04bhcQ9OTvbkBUrheUcVl4Rmhk\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-3c5\"\r\ncf-ray: 9f2efad46b6b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (964)","md5":"f6fa2f2f26b04b2056d94793462d5f0a","sha1":"395de606ba532767453c2c026dbe728ba9677047","sha256":"30fc0b30ea78f5ba1cda7d544da7c19259e5c004f87753a1c8ccc8c37c728f3d","sha512":"4d11f949110e6bbf08397bd575a2abb5870b1ab3b4cd23be874cfe1e70ee7ea7470d16368cec1bf94ed2df94d708d2f0a2ab4ac2bc251224559b1075bd1b7ee8","ssdeep":"","tlshash":"0c11b2bd6074863bf47fde3c552c81449465aea7841233f0b332931d1a97ba77d140b2","first_seen":"2026-04-27T15:50:28.191109Z","last_seen":"2026-04-27T15:50:28.191109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3386.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3386.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-520\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShTMVUtO90RwREDBZ7zSNB%2F0DuoHm4tL8Z9JPsrreJcDfsyJh2VznobTEVZTSWqEw0TRhNACdoFEHYHINnScr5%2BeiRkTO7mGcSXcunAXElWCIMsVhJt7%2BQOwvnFYRIz6puwj\"}]}\r\ncf-ray: 9f2efad47b725fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1311)","md5":"2e4386d8da4385f69999becd28798dfb","sha1":"239af03edaa25cd0a41117f5344d47a4a2089c8c","sha256":"7e1d8c1846afa135b7aa9a874f799d09f95dded75e674c71e90ab62970403c42","sha512":"6f0976ddc6007566f02378b4e7890e22aecffa8e720ddf2acec9b3cde32ed86eb1a6efa94333316394ea184fffb261aaa15c68b6c2f7275a387264fc5c944c67","ssdeep":"","tlshash":"4721397b2a3575196d3b866a35b01becd518b752c2014bb589339e390c8ebf325302d8","first_seen":"2026-04-27T15:50:28.194942Z","last_seen":"2026-04-27T15:50:28.194942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33810.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33810.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-488\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M81n%2BMNWZ%2Bm8wOH0BdfX7G0Y9nfM2%2BEf23FrR%2BMowi4AKlAFkRVmsFj29NbZPSiAIXlgOl%2FjNK7aCLwLqSKc5Q73YfnKdsNT0Bw88ffJWU1Q%2BMBcpuipX6YQ87fY5ZVK7dTf\"}]}\r\ncf-ray: 9f2efad47b745fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1159)","md5":"8b8866c638bb939472578d7dead7d7da","sha1":"6d86cb5b1a31f967e0d6ae583f19b4b37db25ec6","sha256":"a8f68e4f578fb8ffb3beb72857b287ab55c77d0c5d093288f1b34c6189376e8d","sha512":"d1528535f66a67d6fe60eae21490afd7e2b763754ce6c149f6aa45702e40b51cedace7011b990ebf88603c73491dd65c70bf499f2d1237c8a0c5d537410bd04e","ssdeep":"","tlshash":"0a21cd79aa16917eb833e9343a758a8cc205f8a6c2154638fe43657548c7de3247029c","first_seen":"2026-04-27T15:50:28.198779Z","last_seen":"2026-04-27T15:50:28.198779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338527.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338527.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7ASBRZ7j%2FaaeDs72OPtuFD0%2BLR2Zw8922gVqvAEpt9l6pSGorxZLY46woEkK7bANUtch0kByjtgAJv3j%2FBYxXug0i%2Fipa9%2BmooWyUKyVhdyPbXYffrMal4An7BsneqiGod2\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-3af\"\r\ncf-ray: 9f2efad8cbfc5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":943,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (942)","md5":"d6e59c857a24784c22222cfc755f09ab","sha1":"83668d344ca4367e11e5186f91ccc1dd94b8230b","sha256":"4b1d02ca32bccb7e934dccbab838eb433cb68bb029aa41c1a7c9bc54bc1d9d29","sha512":"c8a27a101cc16ab55c075a233bd2cddf01fb6907ed894277637c7601635124f91009a219aa2ac33aba59ccfdca3f2cbc5c3ec7af75a5a48fbbd8b33019c22f24","ssdeep":"","tlshash":"541104129f01d7b9c3b700541edc641136643ff0f1d8b18af5e6442d650a9f5db4eb58","first_seen":"2026-04-27T15:50:28.0796Z","last_seen":"2026-04-27T15:50:28.0796Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/list","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v31/earn/list HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRwBv%2B96N47NiSebaM9jOwR%2FgXEsWmi989txTJC6G6XZCtfIFcrRz72jy9eaY7FCoAJlKqkcgqvysB50alS%2B177pHfw3kQmsk7lkcTSGcy661GGLK0dn1hcocoe08Mdrova4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad09c568be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/data","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v31/earn/data HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad3ecadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd7bdd4d17986cca319a88c367c97465","sha1":"50c4dc6632fadd4993a12f3ef38fa80f32b9b1fc","sha256":"68005087eb1d9ec03d3bacf08251f2f722ca557f222550a2a1ea87a622aaab58","sha512":"4f53eda9a737522311eff5aa86b53c02558eadbe2265e6591a61aff7bf4244205cf85e44d831d926b06906073713d1703af2f71df1c0fdbe238ae6439c94fefc","ssdeep":"","tlshash":"d911b70f7bec993f0e0d1688029718e113d5191047d94cc7138df175310bbf9a505296","first_seen":"2026-04-27T15:50:28.20279Z","last_seen":"2026-04-27T15:50:28.20279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338522.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338522.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-82b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86VRb1wI7nygRFm9uOX3jXmiwsz30%2FyJ%2FVV5ekLcbkR4Z7%2FNT5mKb%2F0Ct8dyGo%2BbF0lYzDltkjhIXvrPsTosJx6g3LiVTlbWzrcBlq0JOm5QLQn0NaXKqQe2qyQUw2RArwmy\"}]}\r\ncf-ray: 9f2efad53bae5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2090)","md5":"5264d18873e647d7e4a6f4df57e25ed1","sha1":"695d0f458a4ed29dfd72b1bae8b99a634cfa67fb","sha256":"9216f83118b60fdeff3eead7a3b43a7cc65b1b9eb288280710de52e38d5a8bff","sha512":"8d34db8c3bd88a4edb7fabe80b9e37fd506cbccd9c8ce284e1362df466d8de17d915655bd8db9c471c751332d6fc9feb104546548d034c4c20185705eb2afb1b","ssdeep":"","tlshash":"e14133583723abbce37724d50019408090ae3b7de359a4c9e2ff5d11326adb1cb2ba71","first_seen":"2026-04-27T15:50:28.20622Z","last_seen":"2026-04-27T15:50:28.20622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338454.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338454.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1d74\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSNjk1ML5%2Fi%2Fyh6qkhjhPTY9ZuoHTKbRYzRqqeiV1f%2FP%2BEeCbWzI5CBCHDyGSgPIIB9Ud5YfAcO9tqyzrRLXl9GB3FxfMAHc50KLuxLDg%2BPEqoH%2BnMRsOGUsOrvTiz6b08oZ\"}]}\r\ncf-ray: 9f2efac95a2a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7539)","md5":"4a2a94ed145ba69439cb0f07e694e260","sha1":"8f7a98201e965225eee06da0239abe96ffaf4f01","sha256":"8509b1cb598b6daa165417ea1b5d208780528267458ecf8dc94857e575e778b4","sha512":"e5204d21ee21bc81d054797e0e1e34c88d913dfaef9faca35d388b1757b3b46b7fb4875c131bb94655e3ca809358a65b9fd212633c94671e4ca479fa2aa2b9a0","ssdeep":"96:sZecOcNmQ5vvUvzOAWqeYW7GcMdqdEUsSUXG2lT3CQGmyVhkCGD9IIhFRed:4echAQ5vMvneYdUEUcIY5S","tlshash":"14f1b7433752f9b2cb7b5a4780065384cb35a394b81e2cc639693b3e35e3d442669f2a","first_seen":"2026-04-27T15:50:28.209843Z","last_seen":"2026-04-27T15:50:28.209843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338626.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338626.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-4bd6\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyl6O41NXC8%2BIn59Dzc9g9ztxuC30Nc7D84VztKip2OJtUmUkIxllNcuROcy2dUnVyw36T%2FGW1dfpJE75bCygr%2BkaRsO3y0LpDWcGr0HPaptuzbtV8K%2BEEiAnFoDrMLai%2F9Q\"}]}\r\ncf-ray: 9f2efaccda715fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19414,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (19411)","md5":"516ecc7d7bed25c28b2e4001f5b58704","sha1":"de036f04f656edc2cdd13d341b678577362bc569","sha256":"81eba983bf5d4ea58a38403c02d57a039294cc26e7a32a93189b1699969ea1e0","sha512":"6f6a7fc9ea8957d68253c9984c2af0431005f9021cba838aef1121d03b59b35c58d4ba4bf1dbd1059a6c59e299fede701c6910dac41c828225e10f5e74a2e1d1","ssdeep":"384:ahxak0xRC1s65MmZXrn/y+BHm7zR8KKQUPnJU+LpZiZIi:ahxadxRCaIfZTy+BHm7zR8KKQwJUs2ZL","tlshash":"91928240f4178abed3fb9202801c28407058afded04284e5f1fe6c552b9adfa9b5cb76","first_seen":"2026-04-27T15:50:27.988424Z","last_seen":"2026-04-27T15:50:27.988424Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338542.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338542.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-feb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXIHHu%2BLnvzhZrrGsatMr0cw2Ufaxti4VRWkP88i%2B6wIogIHGSDwBlci0FbumJgtG%2BPTcVK3l%2FDOc9K2i5h1v8f28vo9rbOZoQQlKLgljIXld1zWDG%2B2Miq9TpV92wCnu6ka\"}]}\r\ncf-ray: 9f2efad50b995fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4074)","md5":"653c7802a90200282208b62812cc4d8a","sha1":"874698065824a28d593d581113c0bf9b5bebe2de","sha256":"e285131516804e7843577f88dd9117cfcaa79a5bdb0dc4aee6edf75fa2e58581","sha512":"e9335c77a137206170f0a2e1aaad9c323570ef4f61f00c8cec4c5dc5d8b38f0334c0aea73f458fe3cf255d3be1f292f48164e5bde9e40412dfe707b162bbdc9a","ssdeep":"","tlshash":"4e81f241bc16d5f9dbb225008e6d0c5a96653faaf10484eaf3bc80233352dbc6b9d734","first_seen":"2026-04-27T15:50:28.10919Z","last_seen":"2026-04-27T15:50:28.10919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338514.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338514.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-ffa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxfTbZXole0%2FnEIG58xLqE9esOq7Wb8dANpA%2BBRNCN4CUck8Yr6W6GPjlff5v9uUEpZDK42rUNhwTsACWZaGkSq3t197c1axaRx5Hqb1xXD7T4VhlJ3ahCAcLgvVVDQcU1rx\"}]}\r\ncf-ray: 9f2efad50b9d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4089)","md5":"884ea1d016d91ed119ba030558d97523","sha1":"1b66c9ebf2ea736e954cc14176a247b4630126e1","sha256":"3a74c79d6a24df7911e626398d60c075d29687312d4189975766c4cf9b0a2586","sha512":"570e40d1633bf3786af7595f9c92f6b239d16469399c70f69aa3b1a9ce8531f4c6be05362d002b8f0f16f6bb915ca4affb7d2a8c25ea65d7b57c90325b8cd70d","ssdeep":"","tlshash":"d281b410b5428dba8b738498341a10a4f1046fb6c0556dcc73b6cd1a27f3e64ab2a2b9","first_seen":"2026-04-27T15:50:27.952667Z","last_seen":"2026-04-27T15:50:27.952667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338519.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338519.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-56e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4Bmovr9zDGoz%2FQ8xe0omfCX3EWjsFPmJ6r3XwNyfaWbIfokLKuNOGSZ5HsEjHiBZ2tVJnyYBWlE2MPAuemDgEs%2F7HTb6sVLd1nsGBuzaLFVB6C9Y7owb2xaWls0SRbCLv7G\"}]}\r\ncf-ray: 9f2efad51ba15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1389)","md5":"08102519452c0838fe37da127046f7c2","sha1":"8a04f8126202473a7a5c15080739691ee99cb527","sha256":"4ac701a4bcf843187630ee228fe905d160e3d580c3e9b6016e25ef4d58bf622e","sha512":"89804515c6b8bcd066acfcea78a31badcaff3b1f715ca5a1065104050e3ea542fad03e0badbbe1d1a20fe5cc221745d1a85bd84ece65680ad6559fb74a798c5c","ssdeep":"","tlshash":"e621df222d221abc8a73218a2499580199d82ffdc08968e6721b1723175bbf197e5b17","first_seen":"2026-04-27T15:50:28.030417Z","last_seen":"2026-04-27T15:50:28.030417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338641.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338641.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-4c1c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVcUkdR3DXXx7Tp62KS0o6gUKhPPMXQUIcLGgjvef9jm6YW9OrtxPNT%2BHWNx1MR0I8Tcsm2fJa618evMJ4oESM0SXv8uebIHraC9gZ8Jmuuckx2wrwsaYzC5jBjZanZCguEc\"}]}\r\ncf-ray: 9f2efad55bc95fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19484,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19483)","md5":"64af81c9ac39e7268aa50bfe3f704d63","sha1":"e33099318b5e09aae140b7d80a6f36d4d9886883","sha256":"41eefec610a18e35b1bdff052bc14eb0a557114a25fd8bc45383fa854a210fc0","sha512":"492cb799a0a7cb925fb8364c2b61080916cad85d63ffee12c81ce51ef9bf167b86fbde3619372628f6255710eb55187b87e76f3632e6028e41d529da24dc4007","ssdeep":"384:ClkIlmnDEBaue2wdMhuo3oXpQg3r2mmYnUw:Ca0cIBaue2wd+uo3oXpQg3r2mmWX","tlshash":"3a921000b6138f7debf72276006ca89962dc2f98c00691e7b1fe59045767df49b09ba7","first_seen":"2026-04-27T15:50:28.055051Z","last_seen":"2026-04-27T15:50:28.055051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338518.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338518.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338618.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-c3b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OoJ8syJ0etcovJFu6cAb1HjhzZh483DfY3ne6DmMEX40VMvGR4MHZpwgDUm1UvX7aOeM%2F2YvxglxZ5t7nSvPPD3n2TaZCMxTPbQccBTJGR32rWlJhRIWq8dAXCSbywY18Q1\"}]}\r\ncf-ray: 9f2efada6c2d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3130)","md5":"e799769720804e292372688985f02050","sha1":"597edc5f125d7fbc7929fd4356d594a40ee29df7","sha256":"54aaa08d6412aa75f290df860628174210a7643678aec0d1a37e3c43eccf5d41","sha512":"01c3a513cb1687867557080c6c54d852238360aefc6df2c92a4aec4d55fbb0a5f2e6b2ffa3f0d5736e6f55af5fcfdd1de3f8c1317719c9fed12aac5862b66f9e","ssdeep":"","tlshash":"2151c540bb24d9bf87f7942d513d1044a4182f1ea65cdad1e6be081327aaff563e6b30","first_seen":"2026-04-27T15:50:28.214189Z","last_seen":"2026-04-27T15:50:28.214189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33820.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33820.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbZPdP0O8meb82FMmQU%2BtJfB2UCellZA8OXPQgjNOuu70HO1wSGdFm9ryJGhFis%2Fn5a5q2ex4ViEEP%2B6hot%2FYuwBXtBFWJuaFZg%2F3Vbe7rndiCxT480gift9qz2FOELb9%2BjL\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-18d\"\r\ncf-ray: 9f2efac90a125fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (396)","md5":"0dbe49a894c304482c313eb94ae6d094","sha1":"85103a4453dbfbba53c407ce99501bfcbcbeea16","sha256":"5d516d61e0d27b32e193da3370c7f9e54715c63d257ed94fc0be0c8a7ed5554b","sha512":"d7c3d0f2edadec0318b68611389738936e5500dd673f20ccd9d3baa1fc6cf97da77720670d784dee4f97a96ac9c8110d4be46bf451aac12805d19ef92adc3b2e","ssdeep":"","tlshash":"c8e0611225d728e80b7c0455091eab71d5500b3c32dfd8dfd7268e4b5561c6d57bc632","first_seen":"2026-04-27T15:50:27.870795Z","last_seen":"2026-04-27T15:50:27.870795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338617.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338617.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-2b52\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2tc9W3sLZEMNDLhHvbhXV7fhcCWnvjZ9tcMgRI8qzeOq7TXY59r8npu1w7oEIXwdTilXozF%2FJk2eRikT7FQl2iDPXIOFIMUYcyEcZS91RIiigphCk1pp4%2F0gZG7KLCqense\"}]}\r\ncf-ray: 9f2efad50b9a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11090,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11089)","md5":"1e51900732cc186cb00af49a1597d95e","sha1":"eab6aea966206671f94ecbacb83428472954f364","sha256":"dd4adf730433be5a547e0ad7868b8269e1e935b27eef9621b6406201003ec521","sha512":"c34a3db76e5c726710f8a0a40e5c67615114780247f7c354b5de6591dbed81cf84ec0dbf21a328a442d324f3d1a1e467460d5f1d924e877721da72c266658a22","ssdeep":"192:e9S45VysdQwfqgGSfr7MxE0UJBDTeHZ59YfA:nt2pFxrIKvBDTeH/9z","tlshash":"e8329201ee15843cebbb81c00c59145dc44e5fba84f464f6f2ab1fa466b6e712b2d37a","first_seen":"2026-04-27T15:50:28.217835Z","last_seen":"2026-04-27T15:50:28.217835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338518.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338518.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-c3b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FUcYtHV7oPZrgpEimN%2BRXTqZut4vqD3HFUUomF6AMom76KJMEeTLv4eGMgd04Rj%2BWI2aAFwZJWdH1tEYo95yvng7sfr3ARPkzfNQkvxMajrix08%2B8zgyCPwQOlgYcn%2BhbtZ\"}]}\r\ncf-ray: 9f2efad51ba05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3130)","md5":"e799769720804e292372688985f02050","sha1":"597edc5f125d7fbc7929fd4356d594a40ee29df7","sha256":"54aaa08d6412aa75f290df860628174210a7643678aec0d1a37e3c43eccf5d41","sha512":"01c3a513cb1687867557080c6c54d852238360aefc6df2c92a4aec4d55fbb0a5f2e6b2ffa3f0d5736e6f55af5fcfdd1de3f8c1317719c9fed12aac5862b66f9e","ssdeep":"","tlshash":"2151c540bb24d9bf87f7942d513d1044a4182f1ea65cdad1e6be081327aaff563e6b30","first_seen":"2026-04-27T15:50:28.214189Z","last_seen":"2026-04-27T15:50:28.214189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338540.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338540.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1397\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGyJhRRuX8Z6q0JPf72K%2Fsd5et%2FpB8n5tGpJdl0wRNPCyozc8fwNmpP0IU0k5EtqE1rA%2FXSke6a7XWJIHwdG5wauliVeDuYzMpG0BrIVUQ1hsaHnwMfvFTRCFzrKJUyJd%2BNd\"}]}\r\ncf-ray: 9f2efad55bc65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5014)","md5":"5243dbdcead9a60d73986ad0902740e4","sha1":"d400dfcf36a4ee8be445a5177c0db0135a3ccdc3","sha256":"5201005bbeb5a74a89cba99578479979a2874fed465a0e0aac21eb95ab40dffb","sha512":"460e0119dcd2d40da77c98911f8548947f429ecfb3c99398081e88386ac7242e59b720ad558e59d4a17fb89b666ba8e4dec55384ac8846269964c19407581b27","ssdeep":"96:d+yyRXxC1E38uA3m33PwNewopuZ/KnllUoRPMYb:ded81q8uGmnPwIq/KllfdNb","tlshash":"1da154106522af7cd2b7b2b2801c114485ed3f9dd11a09e9b1bbd91527d6eb1e3aca33","first_seen":"2026-04-27T15:50:28.22174Z","last_seen":"2026-04-27T15:50:28.22174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33886.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33886.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-429\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzaKzFQunSnx9N%2BG64l%2FdTQC4Bmlk0dcO5%2BwOLAYKyGn4wM%2BPCs4aaq6YDIcyfJ7ILscZwTxnr8hkOYGuQyP5B6aqZkYJEMTKCilwpQCwlPtjvtczu8zzT7yXi9E8uh%2FhF3E\"}]}\r\ncf-ray: 9f2efad4eb945fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1064)","md5":"81a3b9d8c0f6666a96aa3e883b2f15fa","sha1":"a9f1c8e4b7f4c9160dae004f6ae3b583a5eee93b","sha256":"db15c7f86b2e89c01c2427dfa636e80d2268717ac01cf67fbe91a5880f19052c","sha512":"31402f3c1d0a1c0d0f66fde6f4a506e27855eda19f5aaa75f7b6b4d7bfb692f3c05318804127cd060ebc5622b586c12db110df071002bdcc39fc04cf6f1b2538","ssdeep":"","tlshash":"3f11507533556b3e85b3e392bed49ac9403c6293ed22056bbf13613748bf6d623608c6","first_seen":"2026-04-27T15:50:28.225318Z","last_seen":"2026-04-27T15:50:28.225318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33823.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33823.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlvh51T81wBdDfNnY9bmh9ZWQDV4KqAIFA%2BuLYfAiOpI41ddC3iGHhHPRNJxcd8GSygZcDMLK6%2FKpUfJYx7jrGa0NUvklg%2FVkkiyGzW%2FxIjMieNVMd9hXCE50AyNfGw%2BslCT\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-121\"\r\ncf-ray: 9f2efad53bb55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"60e9c59383ca746e536661af68282c60","sha1":"57a7617c2a9fd67b061d91b5bf8303a013141d25","sha256":"7116dbe57d0a86ed3c6f9820db411675d6f997e88796f26df8803baaa491bf4d","sha512":"c205267fbd5f0bc8425735ae2349d78447c27247a9f264667fad15a76acea9c9bdbcb9623d39ae278e405a346215b99c7daf0b10f5d9351ce7375fea1f30c27b","ssdeep":"","tlshash":"5cd02b3347c640b617250c5c9764e4a30130033a3f99d8dc38ae2e143305dc5ba76d56","first_seen":"2026-04-27T15:50:28.115487Z","last_seen":"2026-04-27T15:50:28.115487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338538.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338538.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d81\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBvu1JNSE8f7b9dxa%2Fh6DfaFZGmoIxVSmXeP5GoDNMldIrcX8H7kHD4UydYp18OwAIFi3M3G4cejgVj4rAKtgKTtxmwBjy7mUvQzw6wvgE%2BV6P%2BDmBtKvGNnXskdNRqIFb2P\"}]}\r\ncf-ray: 9f2efad8dc065fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3457,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3456)","md5":"163282d985b80da29f3cf04a48f097a9","sha1":"2aa6b070c1063a6fbb66df940c8e021dc7d5f102","sha256":"e594e03e716f2e0f5fdd95a5f7de9da2247c733869dc9325d5fc5f70dac4fd59","sha512":"1a7c6b682777e117e52b6b6a1ceb4832cd0139c8797c60e63ee6980521ec94d41338008441fbf075af7ddfb45899f9cccdef9bfaf48e843ab22b905ee9513fa6","ssdeep":"","tlshash":"c46161107d32967dc7bb22628018164182e93f6dd10a28de72bf591223e3db5e76ce33","first_seen":"2026-04-27T15:50:28.027964Z","last_seen":"2026-04-27T15:50:28.027964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33821.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33821.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbz%2FREZ4zFZkJ5K80YWFfZjSMjMKuloJ%2BRJ4aZCHuzuUA%2B3K0t37KVX%2FBt560Q1sjRP6srpxGt1cjmmjpZLVxusnq3BeWBhvpNr7NZc3WXinEVr7jlQyYWmj0HXw69gSraQZ\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-2e1\"\r\ncf-ray: 9f2efac90a135fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":737,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (736)","md5":"6b2280ab020a9cfefa524bb176797471","sha1":"4c8d4590bde4e06731222a404d99ffecd13b5367","sha256":"418b859fb6c40173ebfa24bced69d4827282183a013d49636fb350f22d3e7a07","sha512":"e58a66831881b81223e6c8e4ef91db529e1d2f511166ceeabf3bf7029a1de834512e4c53cd3b6346f29dc5d51513c80a04374656d4abee543a75e2facdbdaf33","ssdeep":"","tlshash":"4d01107dd24871778626a0edd02f126593343b38ea2bc981b57f071744872c081659bd","first_seen":"2026-04-27T15:50:28.228772Z","last_seen":"2026-04-27T15:50:28.228772Z","times_seen":1,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338654.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338654.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-10a31\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8J4YUc2cik2ERdhoJ06WYi9D9tD1jYW9f3svrcPcql7HrFKSbJDszpUTJJsgtNpy3FnpyWoVe6FCKqS45djF8klsr2lpAq0m5%2BJt%2F2YE7juZSApm8WPtcicavMwTOeg3Alk\"}]}\r\ncf-ray: 9f2efac91a1e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68145,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"20e298f66c9a137d5eac8b2109ae3fb7","sha1":"e60577b0d8113b920fd4289555bcd030c0f0bebb","sha256":"ec4d233252e591cc0454c76090f01ff52d8705c192b10a4b6b9235e80ad043ee","sha512":"9e2d3669e822bce26bfcef835f7f4d16a612aeac956744858cb023c9e1017d3b3a91ffa24987cbea62eab8c95c68ae0ecd4f28615a939512586f62788232b786","ssdeep":"1536:iT1yaAxYc8KGzoWtEGoxFzk7BADRFkoVd:ePc8KVfFzkla","tlshash":"4763e740ba3199b9e7bb9091e0a90944b28c1fbdd02044f7b1fe1f9527d6ca12355bbf","first_seen":"2026-04-27T15:50:27.846045Z","last_seen":"2026-04-27T15:50:27.846045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33830.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33830.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-1189\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13zwXsGAdgQAc9nAB6EX4WnJ7Jr%2F1GCf5POAWOOHyv54lzKGKjSnC9Gul5baeZKED9a5gV1mXpAwGPKaoOxxxK0jIZ93%2FGlnrm7SakhnOl%2FzRfccW8GS%2FodjvDDSuffbIYIv\"}]}\r\ncf-ray: 9f2efad45b665fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4489,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4488)","md5":"ccd671d1de87a47c2e7cfccfb778bd28","sha1":"50a72d0ab927c21609e73b54b81b06f894f3d8d9","sha256":"606b412db32f75d2eec0d9417b0dd0a896fcc2b28c72dc67348286536105873e","sha512":"6bbf359cfa6303b450a0756dc0079cd3723b372ddd5ab64fac97f9111824e6f05c854ae106ecb4f34021e30cafe7047baabc7eab03d298b0c27b99a865ace7b1","ssdeep":"24:Q8cREt0ReIuQVYoT6joryxrU1HgaPQMGVliEdlBVTNMpYDMSoVojikECBKM5tVab:Q800x8QkeaDKnd1TNRMPQBNGrwFBKl9","tlshash":"b791ee987129597e1e23a03c3e9a6b5894e87d61c50617b9f237fc3244c3a733d7628c","first_seen":"2026-04-27T15:50:28.234571Z","last_seen":"2026-04-27T15:50:28.234571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33872.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33872.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEe9MiaaKA4jsoHWhquowzVSelfn%2FoxhJUErgKzT0RrtEw596QhRmCJv9jePsU03312Q7IcqBVzO9%2BMQReMRWJE1MX85HdMBRV966GTavdDsQivMrB26d59SV6Uj%2F2dVU4Hg\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-230\"\r\ncf-ray: 9f2efad4cb8e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (559)","md5":"e0d0a125be35c2757f8df92b71a52676","sha1":"b9a68b75253d21ae3f515641246b964548cb27c7","sha256":"7518568684d5c29349a120a9614221701cc18ae2711d5d95792bc6b374ea3c7d","sha512":"090fcd9113af81b61a6064a5854d91e00724e6e818a06b7e8311dc60f5bbef55f9e7b883a7d5c3efb64771a26c3b8042ebb28d10f1539a2c111218a9d4e0973f","ssdeep":"","tlshash":"9af08124b1dd41262c3eeda5742657c8d550baa1d1011e9087d78d37064fba33f359b4","first_seen":"2026-04-27T15:50:28.238344Z","last_seen":"2026-04-27T15:50:28.238344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338612.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338612.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2fcb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2IKdoqntWZ4XJXoqlZXV1PVC%2FmnUtTgZYIeaU9BwOj6OokBWOh6DD0M%2FNDUktK3xLF7DmsDvK%2B%2BVG9kXYpp5PXq9pdBggwKB6we3EFrqOwsSAyRqZIoO08S7ocmC5J3BqWv\"}]}\r\ncf-ray: 9f2efad56bcc5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12235,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12234)","md5":"8d8d8828e4282ad1e5609582f48918cc","sha1":"01ff7bb811c0b355100c3d7cfbcab05c5ae404a6","sha256":"9603375ee31731aa145f9aabfaf4474ec210b1197122e2a5860de8ab2f845e87","sha512":"90ad644ad4f32d7bdccc8abbf61c12c73dcca337fb37a1c9be563a08024db3cf75d8e1a5c281c70d1d46f4b9ac7bbe44bd2cc685ca88b40925365c824e49ba29","ssdeep":"192:rJcRZHbHyRa9M5cC/C72k/kxDjvHSrDXt0KObSQYRnAiSomfmNm+9s3vzf2x:riH/SNxnHEXEbYRAijSmLufs","tlshash":"a7421b9983a65bf4ea174330a8b844427fa92df9d60d4ae353f48d51e391cf87b0d670","first_seen":"2026-04-27T15:50:28.044242Z","last_seen":"2026-04-27T15:50:28.044242Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338547.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338547.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkdAEAsT4q%2B9EQOoyP9pIvLebdXUUqw%2Fcn%2FmmwkZvjCp2irBbkbCfFZeErlQNzkJ%2FJJe9UzqWXFIz7gtadvFcyE%2B4R%2FulnbBQNusfTYEy32wc0bks7Xw2b4ljhfHldHF9IhB\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-165\"\r\ncf-ray: 9f2efad62bd95fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (356)","md5":"bf6a81863ecc9bbee80722b549b18db4","sha1":"576f82748ca1eea37c980dbac869792c050a53f9","sha256":"034ecf8a40337ec1d55e96721321fb2b90a95deeb0902ac277aececcf2e690ce","sha512":"9429e1504d70e6f46c7a9dcd54c398f63c517025bb0e4ce47ef694a29c8b37a64dc67908ad53db7484928f7eef1a7b1881651cc4dacbd44eb99489efd89868be","ssdeep":"","tlshash":"1ce020d06fa756fb834459a46d4d517006087975638c70d6b193054496029e58b1e725","first_seen":"2026-04-27T15:50:28.24197Z","last_seen":"2026-04-27T15:50:28.24197Z","times_seen":1,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 15\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"dedup\":false}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:57 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efae4ffb2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a927f801522af359bee5800dca20b941","sha1":"b12c8c613ef9dd3a2a4ea41352b71ccd0eabb1b6","sha256":"74488812e9c4948b6025fd91e8db14350b02c04bd24317fc4d37f2be73a83e9e","sha512":"cb3d0fdda50d1a6949b7fe832317dd09e77faadce490844a16c1233d1dc98dccf053fd37240bb2e86ff06c067c31dc4efb63a8024a61fa5524cee0a33d100c6b","ssdeep":"","tlshash":"8611b71f77fc893b0a1d268802a72ce123d619404bdd0c85134cf575320ebfde50529a","first_seen":"2026-04-27T15:50:28.245725Z","last_seen":"2026-04-27T15:50:28.245725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33873.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33873.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-771\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1zwd8Xt%2FOukE%2BPzfnx0tsLw1ra%2BgXd%2Fhvy%2B8%2F7A43mTY9bP2dDx0xDDuASZeMT5JpWkluwSoJgGaJoF2UYlSCIqNudNWqHckCeJgwtYMLNTsEHc3KlExQOZcsgbj08wIxI0\"}]}\r\ncf-ray: 9f2efad4cb8f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1904)","md5":"ca629ddf7ade6d7106ba1713cae57e79","sha1":"7447748a7f556a7c57c57ad5d6ef786327fdd37f","sha256":"514608c10727bc99b2568e11547f52dc3c675d234bb471d69b386244fdf9a197","sha512":"982e0f514bd1531afcce8e2a49ba871f3eed78cb1ae93fddaa505a5da274979de84bc60c123c2258ef8e6427a5c74932bff643636328ac0d507679cd9c32b9ee","ssdeep":"","tlshash":"ab41d425313d3407742bc7e9b65793804af95a45c64f82886023573955cf7e75fca53c","first_seen":"2026-04-27T15:50:28.249303Z","last_seen":"2026-04-27T15:50:28.249303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338513.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338513.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-81c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHJsT6e3ogYpmXigGfJerkZxG0mMiGkgzbolVG6Log22qROLsTcx8PhmNaRKcAwaUsQ9%2BUdwXlEvsLyfwHnwZqUvE1wHQli5duWW1evPErfg33BeS2UGhivRXJIxuub0oV2O\"}]}\r\ncf-ray: 9f2efad50b9c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1773)","md5":"cdabb1c17cfd1c8bdc11b55a9a8a2b84","sha1":"172079b870ba41e1e995d0f7e81a956fab4e12b0","sha256":"45f0d89d5f9531d3faa44a4579f84d21dc11c6cc481d525efeee46d46d05bd4b","sha512":"34a82de221e667490287bfcdce82620d2bc91aa153301f69bd3c8e9b69409a9aa0595fa2af0fb4153e8925b0d094b976992576c82633eeae687ef21958d44edb","ssdeep":"","tlshash":"9241313aee909bfd965a01c02f4d48a40e206f66c28d9c4ef7d31a06172ac34878be95","first_seen":"2026-04-27T15:50:27.81011Z","last_seen":"2026-04-27T15:50:27.81011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33819.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33819.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-f24\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5rKpOF2Dn7SOxDYhqP746WIiMLEyQuyBhXhEVeabMMx6S2Z%2FcxDpk13QLiif4T0fIVheALi7o2znf63Q9iRSoVMRjpx8yGHCRm3jUUIGrA5CC4egnPFGkZeGqAkZzWGfSrB\"}]}\r\ncf-ray: 9f2efac8aa025fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3875)","md5":"4a622537a91e4e553f439d6de6691fbd","sha1":"cccc0237784bced41b6c74fc330804fe3969d53d","sha256":"a506862e6aa833d859097a7f5bd742c49495759713b122095473101b1adfafda","sha512":"84ea8e6369b19b11d130e60bc9462c176df7624215c9560da244d179272aa6b5ce089c8a3e9d2d1039d9605287fc1f5e83c8e131b01e991520e016fb50be1e0e","ssdeep":"","tlshash":"cf81ae352f1c5074a4ffa53a79dccf5cc728ea0a8435ad51ea8371394dee562211fe88","first_seen":"2026-04-27T15:50:28.254261Z","last_seen":"2026-04-27T15:50:28.254261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/notice/list","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/notice/list HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 10\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10,"data":"{\"page\":1}"}},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f2efacd79578be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"efebd26abe6b6445f9dc420bcfbde409","sha1":"64cfde07cc75311a249aa2a424789acce3d3326a","sha256":"d19cb1e480e2af77be23defa152f8c4aaa0bcf7c094412a0a75827f1d3c94c32","sha512":"24ba211469929d0eb5b7e4878b323e549f2b9ff24afb1d3b17280eb37bce5b10fd1c56dedb015533cff4678ca52e500607da3fc0ddd24559cbbbd800c6a79782","ssdeep":"","tlshash":"9011b71f77fc9d3b1a1d168802ab1cd153e51d004bd90c96135cf175310abf9a105196","first_seen":"2026-04-27T15:50:28.25778Z","last_seen":"2026-04-27T15:50:28.25778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338528.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338528.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UG30VHzlcAZrYBqUsFJmRztwkDK65iHVOVPP8yyavcUdwbqPoTVQCFC0jFyol9osJx9M5vF35ikA9PW7DChig6wiu2mYD80O7vrdcFAMiojkRPg7XMCrq08ujRgTX6epvHkJ\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-2fe\"\r\ncf-ray: 9f2efad53bbb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (765)","md5":"e3ff094a43a0d181f43f00110f883cbe","sha1":"de86f9b9c470fcadb954a2e322530fbd22e3b9de","sha256":"db87db4d1debd98cfeeaa15b772bfe42a6720103f483d65e048729d62c188304","sha512":"11942dc95ce2447628e5b29c542659c33f3dda5039c7f875d7ddd5b743b880823a3f4da7e1fc806d83df92c85e14a95466319bf800cd6dd2971a661951bdc1ec","ssdeep":"","tlshash":"8b0120818e96cbb9c3eb04606c4860b6002c7fb5e10cb05ea6ff09106b10d79c72af36","first_seen":"2026-04-27T15:50:28.261124Z","last_seen":"2026-04-27T15:50:28.261124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad58ce4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e7d8ce53eb5366233358f144fb9838a3","sha1":"2db9490f0ae01dd6225f96473e9da2b8af97ca8e","sha256":"6fb163ca85867b38df7d48c39feac6868aee6d9f62e34557e881ad244fcf6431","sha512":"03a1d12bc08a1b38974863b8496d99f7885f88e36d53184bd4bd13b7ec83bcc1edfc4bacf82c268a688db2566f4bcac1c7d6f40a23937a039f24343f3a668ba4","ssdeep":"","tlshash":"9611671f7bed9d3b1a0d268802572cd533d569114be90c96138cf579310bbf9e505396","first_seen":"2026-04-27T15:50:28.264537Z","last_seen":"2026-04-27T15:50:28.264537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338531.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338531.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-6eb\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tlo10NJZdREv%2BEQPYdZiba7pWWKjRWA0v8ZuNMrSntTu9rAHAbFS6l3uVVujBGJ51PQogobIEZCs7FAj059p2%2FSr2n5mTQvCR3COZ8iHY3IC61R8ZowSfX5DvJWutDRk%2F39F\"}]}\r\ncf-ray: 9f2efad8cc025fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1770)","md5":"8e80ead8c31883453afe5e5f5f165108","sha1":"74658c89843ef2730a17253c69d1760c27482579","sha256":"0470b3710ca9c27efa2e5de43f02377ad15681b5b93844ff99d53b2f2ad20a6e","sha512":"d810f9a4ed66f09f1e6c232fef51c5fc934a5ad5fb0b5027790962ab1a4f795f882edd21c69bfcee4066e8459277e76ca473c1f5b8a32dd4d27cbd3ef92cf168","ssdeep":"","tlshash":"ab312f456e508c7eebb32998264118441f6c27ba319da8c9e2d7ec190645e7cd29d332","first_seen":"2026-04-27T15:50:28.126702Z","last_seen":"2026-04-27T15:50:28.126702Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33820.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33820.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-12f8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBq%2FMLGKMoQMD9jAvBJgsQwSF%2B8EreksFy%2Bsy9UuplnxC3hdfFg5HbQQIFqPbbdL9lAnYucRp7Usi4wSfEDxbizxbRtaK5Ps3jhUKIZYPMlqQyuu9aQzKoSsfqGdcy7ts4%2Bn\"}]}\r\ncf-ray: 9f2efac8ba055fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4855)","md5":"4425d05cb73d3637979d0961e77bfdf1","sha1":"1598c7a787c0b9313d9dfabbf8731d0d1b95d10c","sha256":"5d058d87b9856cabbf6e1a4f701e00b1f3f2b6cc2e5beab1361692d6ff2aa25a","sha512":"ecbe383721b3e7b4c665e76356532930eb73165b437e9e82108aa013148455ba19e07d1ca0d6db7b3572ac1347fd891fc53755ce567ecf065bde9358266f3e39","ssdeep":"48:w/OUCLChoyX6NXBPXr5tz5QRQ0lmae9W6KJLfvl/V+/ibx866bNPuxpPJvA7JlB:n3TXr5bQ1lmv/0ldEU6SilB","tlshash":"f3a1c261792c9a3fa433f3dda5e0a7eb6330765ac4720536eb196e1004de36368f6744","first_seen":"2026-04-27T15:50:28.267888Z","last_seen":"2026-04-27T15:50:28.267888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338573.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338573.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-2f5f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRYYnfpyJ%2FIMRsBGA9ShzCytoiTyznCqckJLlZyHLTRGfl3zuSrP2YzjIKmuYNSltWAh4SDxkG6PWcX4wOX6jeWjD2qjGenYxR29JUJuedSxVXYoDq6NP%2FpWHPSkwlYpLJWb\"}]}\r\ncf-ray: 9f2efac95a285fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12127,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12124)","md5":"477b9847168c7e2120e8587c031cef28","sha1":"77b49e0d510f3277c85904e463ebd441ec04f955","sha256":"78343c486774a840d6c7e45efb839fcbbb1f2190436828848fcabf44e451c6d4","sha512":"696b66087d62f9946566fd9572bd007d2e36e70204962a3cdc91deec4fda7525cedef2cf0a79d936fe9802113c73b400217bef0db2aac74ae001a3d72b7b7776","ssdeep":"192:9cHA0nBlgLWdgNMVpwyIwieYI9Fsc2hesJKzzm4qnnFEoy4FcepxG8LMcso:GbTq0CPOFsc2hesw6OhLg4+MA","tlshash":"54423f10b12bef3cd677b192641e099194982fadc11385d9e1bf2d210ba5cf9279c73e","first_seen":"2026-04-27T15:50:28.273457Z","last_seen":"2026-04-27T15:50:28.273457Z","times_seen":1,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"9095.etherfund.cc/socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket","fqdn":"9095.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"GET /socket.io/?nologinid=1c2152501287e892733a81991405f4df\u0026EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: 9095.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://etherfund.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: CMfrkxpgy+OIL9la1+1gaQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 27 Apr 2026 15:49:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6338\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Re0zLWZ1USpnJzf1IFoDpw9cr1HqV%2F92FWLxrkLqJYxc9Y3Q6vu%2BzmCTzbP0qKcivoKoVo6%2Fqfg1v86%2BPWZczbR4os9Opdvevm1bDYfPeBCdSmERjaGcX6o2n8sw%2BSBQB1mpkw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f2efaca19ee5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=486\u0026min_rtt=446\u0026rtt_var=157\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3115\u0026recv_bytes=1239\u0026delivery_rate=7438356\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=a0830a2491fd5ae2\u0026ts=605\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":0,"dns":24,"connect":23,"send":0,"wait":559,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33827.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33827.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-9f7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDPlGyIcxdy8jMmlYeh1p0g4H3RcK9PD71eucnYEMV252zDqErUR0tIjtUEYDcACZ%2FQpTfR2o6tayVniYTbWlngcU2U2ARI0nqVY9wx4RAREpluPqF4CUxPDkn%2FIHJIqnRGv\"}]}\r\ncf-ray: 9f2efad4cb8c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2550)","md5":"bb13b356d98a7adbd3ffe53c1b4fb043","sha1":"b87836005c610cbac9e8b46621ba927e5498e3b1","sha256":"1b9f8b950cbf0aaf2015942e9d346fa0cb4f84b483730341c695dfd861acefca","sha512":"588384cb6b4f7cc8e4e0d493316f70609b744514b7eae56ae18df10908bf669ffb35988099a38dab74e5e49e7bc400d0d47235f67aa1cde1fd37f04c16599cd0","ssdeep":"","tlshash":"a251d06df54dd22aed239aa57df0c9dda0803dd0c9004386e9439b3b4ccfaf22b11a54","first_seen":"2026-04-27T15:50:28.277391Z","last_seen":"2026-04-27T15:50:28.277391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338525.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338525.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-509\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ke9a95uJl13GCrxNjzh72ObUZld1Xn5hrGVNEkJ6KpELM8tbOGRkCgPgUbY6eX8s6WPl%2B3VDdTCxRjUAkG4OAiDPWYdDfFqFdVkqkI0tNyX62coUBxJu889bhovxD4EsyBkN\"}]}\r\ncf-ray: 9f2efad53bb75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1288)","md5":"7bb90f9e2516cd87e177874030115850","sha1":"237528a05444823974ad5971381e4714c59af2ca","sha256":"ed391eae2f772036fba1d3f6f2ba0416cc9db89f8cc7ff5b039e78d1987d7b0f","sha512":"94458035f4ac2424e0b402e7e3b34ea005c28d41c3998ecd0a901409bec94c5118f86615ba4e81b09bd2f1ebc2a9d85d668979f48d659ff449bcca11e4c94585","ssdeep":"","tlshash":"c12112105a46d97bd75304a0d81c1c3054683faba74cbd9561ff08155716d6c9b4ab3b","first_seen":"2026-04-27T15:50:28.001491Z","last_seen":"2026-04-27T15:50:28.001491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338515.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338515.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1055\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4g2EzR%2BrkpJ%2FXezZNnXuePfhg5VX%2BZtUUX2ZUFGVlaQKfmZAGZbqeA7QWTWiJB8H9fm7wETBpScatDRjKW3CSVmbgudRg4vnQbXzpiQYdhlGo5sLaTtZE3taXQdQCqFQHox\"}]}\r\ncf-ray: 9f2efad81bf15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4178)","md5":"579ba1395b741ecd50f0349907ec2f9f","sha1":"d2eec9d5688507f72ba1288be1318f643b14653d","sha256":"a284474f37ec491a0be292543551f80f5dc80053281f89b3f59fc81cf1b74195","sha512":"3a0be41307c07614fdd5926492ebc2aea2244d41967dadd917b6ad60d6a84916f436e8a28b1de5d0774e8f2a011ef475df2ec805d0b0c7da057e45b77d1c5e9d","ssdeep":"96:snon9LR/+sd2lHW41QAvAyetILvg8UIskxSvyJz8xtENzANl:oohRGs82QQRyetIczVK0EN4l","tlshash":"fe819656f73595bdc7b370d368091482b5cc2f99d20a44c9e2bb5e6233a9cb0a3853b9","first_seen":"2026-04-27T15:50:28.106264Z","last_seen":"2026-04-27T15:50:28.106264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338521.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338521.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-630\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSkiJVMKZLk66VrNgtnsykYB2p01peBJgl4IZ5E0dS4eK%2F%2Fg4gohL%2FlROYGmfkOnrCrd07uEL%2B%2BZwkI%2FpO0z1ggxXedO1jzIeahxLukUBCX5KuaqfKCFWuyWP2a6A3ApOKPP\"}]}\r\ncf-ray: 9f2efad82bf25fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1581)","md5":"a7d50cd240828b7dbcd14feeaf33370b","sha1":"a49c02f82d646ff37a7feabe5011c25f4d2486d9","sha256":"1ccadbff33e512e4b023e0446d626e266fdc66e8a68d944ddff3aea8bb5fb51c","sha512":"0d842248c8c7b1f1b48321712f912c266bdc478c61fa299a073f3da10ee054918afee5583fdd4da3a717c4679448d6130cfd82653d0e79b617487e73aa89b750","ssdeep":"","tlshash":"9a3153049a3295bfdb5734161c1e4085e1c87f6ad548a495e3bb5c212761cf6876e322","first_seen":"2026-04-27T15:50:27.919674Z","last_seen":"2026-04-27T15:50:27.919674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338522.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338522.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-82b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBGHf2NZifNOFCahmJaSdEWSQ1R8tr%2BEOHYm8mPTayRHFfomIa%2B%2Buxk%2BgtwMaia3rAONO7FXJ2sTgaTiVpD6i5RPYuHW%2BawECSSDCpvXyfijaO3GmdauHGPDToHb3iY%2F5Ay3\"}]}\r\ncf-ray: 9f2efad8ec085fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2090)","md5":"5264d18873e647d7e4a6f4df57e25ed1","sha1":"695d0f458a4ed29dfd72b1bae8b99a634cfa67fb","sha256":"9216f83118b60fdeff3eead7a3b43a7cc65b1b9eb288280710de52e38d5a8bff","sha512":"8d34db8c3bd88a4edb7fabe80b9e37fd506cbccd9c8ce284e1362df466d8de17d915655bd8db9c471c751332d6fc9feb104546548d034c4c20185705eb2afb1b","ssdeep":"","tlshash":"e14133583723abbce37724d50019408090ae3b7de359a4c9e2ff5d11326adb1cb2ba71","first_seen":"2026-04-27T15:50:28.20622Z","last_seen":"2026-04-27T15:50:28.20622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338535.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338535.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-199e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm1OTn%2BvRTbZvgVfB4LcuDU2B9O%2FBX7VJb3WrL77NXW9lPOuLR%2F9pqr8T0jKQeu2tavaUv5F53gC%2BgSSA0eSMD4qghlA4gMBqvTM01YHdrvsn1DgeBlZahOxFkkZh5%2BuTjrU\"}]}\r\ncf-ray: 9f2efac91a1d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6558,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6555)","md5":"fd8545e3e0d0699f10b1e37d40e3cf21","sha1":"f450a1016e4a458f3622af81691e2c9e4e15a453","sha256":"7a2a9c83d767c6c223a9b7fc0053dc666593e00de2f980954df5cce3bb0fc4bf","sha512":"fc4cc18303b07af5643ea7d285311997f63b7eda796e57a4ff1d4938f5727b0c0c2ad074f318a32752b92813888df2661fb5359d052a03252fe375b122ce90fa","ssdeep":"192:LTCTKukxqyE/KmPEAyRZlXifSUG70/yXNB5ltgRXw0:LTMLyn8ER8kXNB5K","tlshash":"49d1d9023918abf65fe715f290f51810038c6f9cd16960e1e1fbae2523cdc9497b9fa8","first_seen":"2026-04-27T15:50:28.039343Z","last_seen":"2026-04-27T15:50:28.039343Z","times_seen":1,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/static/img/home/bbg.png","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/static/img/home/bbg.png HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 605392\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c23-93cd0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErcizkcQA%2BI7s%2BMnwBqBxo6NB7lSBD2vxM%2FUI62%2BBklTe3w7JoIKAsMJkjwqV7dVf9NwAn7LPEUwfFDUlFVBs9sgL%2BMawO%2F1rMOm2DEo9J14AzeKP2xMoFMIEwEsbjVyJUBK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad07b175fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 508, 8-bit/color RGBA, non-interlaced","md5":"0a352e74dd136650e18534d79506c29c","sha1":"a793e9447a8b00aed62479385db350fab1fc6774","sha256":"30b5e28d92790753288d4187d1d826c4173e90db0324ba4b9aabc63494f2b42c","sha512":"806d78674ac1ffb19351bcdfe9ac5ea68676fd6a0a7120d2ff8224ac0adcaba6b26561aa8324328c07a6234d9e6565299c924d06b42b10b5ab3d18110a29f085","ssdeep":"12288:fAxg1zkdHCuAv+E03uTUgVMnH+e3pUU5CGtBOr8gPYKJRx0LFzH2biEoLVY:fp1zkdir+fO0HAa/by8gPYKJRx0hzHGn","tlshash":"a5d4339c68ccc58d37aa6576f0eb2d015c84db93cfa4bb864d3afd022fc6245505b6b8","first_seen":"2026-04-27T15:50:28.281082Z","last_seen":"2026-04-27T15:50:28.281082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338540.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338540.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1397\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEapAdio%2Flo34f0l3HF1yLrMTprxf%2BIbqtYUpY7vMz9lAa%2BIAfKEdWeBx2Ex5L2Zk2gKxTzwIdJCpPnFs2bbPbN3OUBrGeG3%2BUTKFuURV7KG8o5EoXmDPtuJ9MxZYtiqlSaR\"}]}\r\ncf-ray: 9f2efad92c145fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5014)","md5":"5243dbdcead9a60d73986ad0902740e4","sha1":"d400dfcf36a4ee8be445a5177c0db0135a3ccdc3","sha256":"5201005bbeb5a74a89cba99578479979a2874fed465a0e0aac21eb95ab40dffb","sha512":"460e0119dcd2d40da77c98911f8548947f429ecfb3c99398081e88386ac7242e59b720ad558e59d4a17fb89b666ba8e4dec55384ac8846269964c19407581b27","ssdeep":"96:d+yyRXxC1E38uA3m33PwNewopuZ/KnllUoRPMYb:ded81q8uGmnPwIq/KllfdNb","tlshash":"1da154106522af7cd2b7b2b2801c114485ed3f9dd11a09e9b1bbd91527d6eb1e3aca33","first_seen":"2026-04-27T15:50:28.22174Z","last_seen":"2026-04-27T15:50:28.22174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338528.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338528.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siRwVkaz%2BsNGa8RUZZukQFyQuufHmVCEnO4QzVQsj1apJ1%2Bdw8Cv0awlPRbZd%2BSJwd2d%2FwavbzxbN7ARCbQ4FijzpCsgl4Zl3H63Prr5PBN4SXbzKTZ5HiE%2BCBnPK%2BhbeMeC\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c27-2fe\"\r\ncf-ray: 9f2efad93c165fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (765)","md5":"e3ff094a43a0d181f43f00110f883cbe","sha1":"de86f9b9c470fcadb954a2e322530fbd22e3b9de","sha256":"db87db4d1debd98cfeeaa15b772bfe42a6720103f483d65e048729d62c188304","sha512":"11942dc95ce2447628e5b29c542659c33f3dda5039c7f875d7ddd5b743b880823a3f4da7e1fc806d83df92c85e14a95466319bf800cd6dd2971a661951bdc1ec","ssdeep":"","tlshash":"8b0120818e96cbb9c3eb04606c4860b6002c7fb5e10cb05ea6ff09106b10d79c72af36","first_seen":"2026-04-27T15:50:28.261124Z","last_seen":"2026-04-27T15:50:28.261124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338611.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338611.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d1a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fvy7WPo5K6yS4HFfo3Gi6VzFSz4JC23MxoEC4m5UvIAOTAhhHtCyDhUuVc07M87e%2BD3JRLUeoUvtdZ1kCCqYDf63giVQ2qfL1kRUr3tkntpQ2ujXX2ZiSuGYuWHwM3ZIXThZ\"}]}\r\ncf-ray: 9f2efad55bc85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3354,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3353)","md5":"0bbc80a0a359c4eb5552691499373b5b","sha1":"65ce50c9ba521f817f320f3fa18d176ae874f24f","sha256":"f6c23622972103dd86656bd7733f3153560814cdf52473ab05d8c03bff560e91","sha512":"804680c0a1034e603482277a8244dff0a291032d26244146931f1b03e60a3220708ccc4712520c0132805af987f4125b1bf531314645589d2678bce0a4e88a7b","ssdeep":"","tlshash":"4961ca05a532d13ecbf66181105d80e5a65d3f89f00b94abf2fe449123a6db9e30eb31","first_seen":"2026-04-27T15:50:28.073008Z","last_seen":"2026-04-27T15:50:28.073008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338100.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:49.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338100.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-4dcb0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFDqDjuM2NAx9BUJENJIXYWwt2%2BOncMZ9mb2ZWsp7fG6RVnYAqOhm7IRGckwj4QyAypbyXuZgfHPAMh7hfxojmliPVkVqDzyUOQitHGpIQKnmUXeGecg%2Bj5KFEX9VLTUdUjF\"}]}\r\ncf-ray: 9f2efab788f65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48419)","md5":"2806fea5e45a9543b76922253395d718","sha1":"23b491390b19b8ccc5c2e0a0b136d35e5e0baaf1","sha256":"58d41d2dd87c9552a06a1da5a7318725bd6df2c6bf9f140df4a7480886a054ea","sha512":"b74ca2c1502f143cd4506bcf901d076833050c9b3d72b8e72c042c0e71b13fc3ea95b0651b107c352754242015838757ef514cec8d432393e44ed2f94c8d3da6","ssdeep":"6144:+z/hU5VKH8IlprWLaT5QVKuVZp3UaA9X/VZBcAxsauOpzi:+wVeprWLaT5QVKuM1nzi","tlshash":"8264e769e660507e6f13f2b9abda9accf13cfa50dd01d7a6f10251280ec37f51623626","first_seen":"2026-04-27T15:50:28.285074Z","last_seen":"2026-04-27T15:50:28.285074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":549,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33889.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33889.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1d55\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptf%2F6oDc4MqdHAwUtv67Kjs%2FDDLduGmalFStBFD1qyagnIlPYXpiHtsN4IeWW8bapem7B3yJAltD6SjWA0577V6s%2Btnib3glTfUefwkOwZ5ETkRfGh2%2FphQDQq5q9OJoxE2i\"}]}\r\ncf-ray: 9f2efad4bb8a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7509,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7508)","md5":"6aa34242387c70766061990a66391e02","sha1":"dd987b9fee8da751909422fe7a73551229a0dfe4","sha256":"4b41b186e85359e599c116e57419efce6bd67491776ec5912c672fa790825d15","sha512":"7b53e3a3a7067e13993f5ead1c9cb245ea2f9e3d88f99937fa848fab6c537d8c1e845c92e4cbeec461361d8a1b2e71db10b53c0ac5ab5fb73be696ef29fe5348","ssdeep":"192:Nd8avWWbYv6icl+BP64jw6s36c6G6V6WF0KjtxIqxrR:pcv6xwDJtxIqxl","tlshash":"1ff12366761ad43de43be12529f083cdd8507b66da024280eb1f9d7a8dcb7b33d205a5","first_seen":"2026-04-27T15:50:28.28935Z","last_seen":"2026-04-27T15:50:28.28935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338516.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338516.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTu8BgdkP6QHDOysfZzRqL2wTpHkcCmo%2F1ak1yIxRR0oisqdN%2FdoqWni7Wt1%2FHBQzKHGdYqLrHzlPBLdjHvMuAf4RGpH6djGW3JdfLqAjO2u05pT0Zljxxe0emxh0koBfp70\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-3f7\"\r\ncf-ray: 9f2efad50b9e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1014)","md5":"ca7e9f47bf4ce3e85ffe9c2219f5555c","sha1":"adf82aaf59e55aff5cfdeb5381320b5b41fb32fe","sha256":"3a85c7e7fc9b219fdd2b9322aebfb85e1c8c1a314f97894c2991bf9077c47d9b","sha512":"afdc62ce2c4174e762a1fdfa243ae441928baf8696394d9c7008d72891c7b9c766ef1da01039a5eee64baa237bb4dcadc3269f680a47ad39d372344d210e98ff","ssdeep":"","tlshash":"7b1102196603cafa97b9881095cc643367f8eb98710c35c9a277865d6313e1a2f0cb75","first_seen":"2026-04-27T15:50:27.83443Z","last_seen":"2026-04-27T15:50:27.83443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338617.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338617.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-2b52\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzu6mkDxn7fIpk3jHWs334Kre1gZe9ShMCR%2BPyhppZrXvzpmfhfhmQ6%2BhZJnzOw43fnPEinBJSZ%2BrkYUMZtwX4aAbo6TlULk3eKKmH1AwDIOXyfUMjJ1ZpD7tUelqw9%2BwW8T\"}]}\r\ncf-ray: 9f2efad7dbeb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11090,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11089)","md5":"1e51900732cc186cb00af49a1597d95e","sha1":"eab6aea966206671f94ecbacb83428472954f364","sha256":"dd4adf730433be5a547e0ad7868b8269e1e935b27eef9621b6406201003ec521","sha512":"c34a3db76e5c726710f8a0a40e5c67615114780247f7c354b5de6591dbed81cf84ec0dbf21a328a442d324f3d1a1e467460d5f1d924e877721da72c266658a22","ssdeep":"192:e9S45VysdQwfqgGSfr7MxE0UJBDTeHZ59YfA:nt2pFxrIKvBDTeH/9z","tlshash":"e8329201ee15843cebbb81c00c59145dc44e5fba84f464f6f2ab1fa466b6e712b2d37a","first_seen":"2026-04-27T15:50:28.217835Z","last_seen":"2026-04-27T15:50:28.217835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/data","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v31/earn/data HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lj0yJqtEkcRZjD%2F6KwCy0fZ0WbktjehMggXZyj9FrvrZGlMilv3alPh1Wn9Ni1p2A%2BW5hcFi2H57a7InLIB4713ioViBCPU01IWTb48kGtT9Vh32uM%2BmNxY1SjGnVq5VnVoy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad08c4c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33876.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33876.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-10c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FC2zTQGedsPDR2REPrRpI1Ib%2FtYW9ASSgtSUnadcEFXDySBs5Mwc4D6J640hr2zlwfcB%2FmkbXZAimSNN4jhUhwKm1CqLMUXgDHTCfKWFqT6j%2B1YbpGStxtqAH3T9OjgAV%2Bi\"}]}\r\ncf-ray: 9f2efad45b675fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4296)","md5":"c48a8934db2c8290153e5772b81fe627","sha1":"61c0ead2c47aaa6ddbf69c4df9c13c30224f3563","sha256":"1d3ba69c67b98aaad24358fdc42c50bd6f7f60b1ad4eb89522dbae9e3032492f","sha512":"71ac6fac19f6643fcbefbbe36b8688190a5094dac2a8647d73487ddeeabc12c33104eee01f511a14fd334e98079d12919d68e74c8eb90d8890932db31ca4f910","ssdeep":"48:QAfhmNCNCWjoL3WioZULX4KVh5alvOhKZwQPTX18NK/5dGLTwYpQ5sRHCoMFCYFx:GNZLCUE3BndG9pCIbMFb/1uV2Ed6gV7i","tlshash":"409103986357aa552953d73639a8e68fd1c8f912c5074b4aee277c3708cbaf32770324","first_seen":"2026-04-27T15:50:28.29295Z","last_seen":"2026-04-27T15:50:28.29295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3385.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3385.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-50c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4y9vRJUlOtJPjC0BXQE3i63pdXcCS8Clq1TxE5bKjLRsSytd93Daxbq%2Fm7e1MHz8%2FVy0ruzW1xaiZA1M6xYLYUhX75dTPPJOYWB1rMwQLnhgY3usv3r%2Fb1f39S5FMnMtDYdU\"}]}\r\ncf-ray: 9f2efad46b6c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1291)","md5":"36c1007909e6bffe1d542d30d45d88a7","sha1":"2e1930406768bb3b42ba1d3261b8b705e9db45ee","sha256":"e32400c5057af41c97c12452f8756d029d1059f3cca99867212b71eb7e874157","sha512":"e6aa3fc9a106962965aea9e208572504e3043157e1824fab4601906b827f5fa2385e6bfe03072635804588b11f0a7ea9989e9e85fa83c078de4a80f794f13f48","ssdeep":"","tlshash":"aa21797b262565186d3b85fa35a416ecea1cb663c1114f35c533bf762e8f7a32830268","first_seen":"2026-04-27T15:50:28.297003Z","last_seen":"2026-04-27T15:50:28.297003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33881.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33881.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FaB2TKCE58QXmAVAUUb4ce0xTrP1U0LsMYH%2BdsawU4iZ9flz673twdpRJhK1W0qDQPdzZrY8UdES%2FpuADXuk7fe%2BHJVg1if4yeOeuGoKrGryqwuYBNHG6gnQp7m9LrTwWt7\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-1e2\"\r\ncf-ray: 9f2efad4ab805fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (481)","md5":"252be36e17249c53eca701d6bad84892","sha1":"cbd42d0592c3856db54a89c1cd4762fb512c8f12","sha256":"0128dd6c857fe826df97af9e4f589e25ffc546611085202fa71164b643629463","sha512":"7ab35fc7e750810da24608948a40f14d4cb1fd2db5c4714415fbef374b80753a9ad0a52365740a3c828f833e42d60f19eb8ccbdc2a15915c423a6efe342f9923","ssdeep":"","tlshash":"1ef0e21aba1ca5148d23a5f5add047e8a8106a539381d3c2e30b1c3509cfe62a9219ac","first_seen":"2026-04-27T15:50:28.30056Z","last_seen":"2026-04-27T15:50:28.30056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33818.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33818.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wce8hnoNmLv%2BKJ7zjcgs7bwh1mLEALmS7dLG04GKv1%2B2Vm3KXt5w2tqI8jSGLSsLaVgYZqUu1jV9Q7kC4hPSr%2BoNzzkjSDOOJzO9UPYzCD85QFRGVN3RufhYYREkUnaXl1Zj\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-355\"\r\ncf-ray: 9f2efad4ab855fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (852)","md5":"fa814a0a1c0227fdccbba09fb2f6e4ad","sha1":"c17b1fc1a763fc7775d5cb2c1415f795c73f8fca","sha256":"83822ffaf1bce9908084ca51db12b2611e9e762e9bbcfc4774206b6161417fee","sha512":"726c9e4a26127f56bd44c88c6bffbc25fc20b8b022d4bd3a657bfa6d042c230dfc8737b7348601c42cfb26f255f3fb4f6b9af37f027e6a44898352a90e01d17c","ssdeep":"","tlshash":"8a01ceb6359035392fd3a739286649dd4d3ef501cd4323ccf382985546cbcf82513159","first_seen":"2026-04-27T15:50:28.303974Z","last_seen":"2026-04-27T15:50:28.303974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33810.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33810.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338620.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-8c2\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xnwvNyamfTjVzKxv5sy%2FtI62M6pF0dtFMv6zPNiLcKhtF%2FcadkKWZMOXif8pXKGW37hVPsP2k2l0DKEB45hsX1FnUT9VrWua%2FCXms6ew1mEmNcKmtAK9r8PMrxJ5qcXyB%2Bs\"}]}\r\ncf-ray: 9f2efada4c2b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2242,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2241)","md5":"ab2bd04be6cd4c4badb953be2d311b9a","sha1":"aae55c9c9c159a2b5ae20aee8b537a070cfc3aee","sha256":"8414fbe72aadc540b8c4edb0f7cafaa7a77ed0c7298203548ac556620b42e5ab","sha512":"1fdb743ae41fa9a362da25691f4bef3ccce6b37a33a5bf1ab89c5ff4f4ea6d2cfa682ddab2ab58465ee5b5a19064f9b0cf239a022825f6a024e214d660f50066","ssdeep":"","tlshash":"2d418301bb19c1f58ff614c924a970430d093b1a9b5888d913bf2d39137afb5a7177ae","first_seen":"2026-04-27T15:50:28.103479Z","last_seen":"2026-04-27T15:50:28.103479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/js/qrcode.min.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:49.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/js/qrcode.min.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c23-5ef4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD%2Fa6ipNBWMBNb8rzBYmRDEZVzciXQkMcA1SBqxTOQCd4q4lr6mKIdPlew6a8%2BVTpZIw8ZGOkcxz7iMQ1ww3RSh%2Bj33hanVktxLmJGLfQSXoat9ZzQul%2Ft7b9vFqwkEAePu8\"}]}\r\ncf-ray: 9f2efab788f85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24308,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24308), with no line terminators","md5":"52873267ca3710e4e23b54696a008fb7","sha1":"a9f6aa9a8de5e992ecbb27e751ffb9d4155f8502","sha256":"7bb56209bdc226820153dc040de7221a8bdd8f6b8d62ba67a8410c7c5514cb97","sha512":"4d98d550df716154603463d0b3dbc03cdef5812d2a583f6521e45d3cafa47febd148f956984c99bda919bf7c8a75b1654de397afa753d7bfb412f24367ae1a3e","ssdeep":"384:XghE7KRAqRICAIILNjNC76WV3j6D8yIwS7U0fF6hXBwhmt9DP0ZjEp/lrBoPPruu:X6RjdKNjNC713jA8/M0fg/aijVwewQZU","tlshash":"01b2945523af132ed11bf010ae9fcc0be7b89c18654da45dad4df0e8586987891becf8","first_seen":"2023-07-22T21:56:18Z","last_seen":"2026-07-26T20:56:08.533909Z","times_seen":23,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338649.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338649.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338657.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-18bce\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBM41g3iIwcQWRGcLnukcOff7%2BNDItAdWdMpJZzxJsXRrgkyQGOKk3BR3lXAND7RGLQ2dOm47TRXmJjrboXit%2BZ9bo7MgNMvM35qhGxjFX81NQ5dUqPhLc4d8vlf%2B9lK2uQJ\"}]}\r\ncf-ray: 9f2eface8ab55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101326,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (58788), with no line terminators","md5":"c0641b431bf2a32c4b4cdb620bb52f40","sha1":"73e76597e6b54ca4ceca462c6ce65e9a6b1dadd9","sha256":"bb95b1ec403c03343778843dc3f325f08d7ee7108f04c1a789d8ca1c9bf82a9e","sha512":"6982d6bcc6e89aef3e9b8e0c51014bf60eb4ea3528bdb439850187a44d9a74fdfe0a7c3ef2bb71cf14bd6781af141692024b8bcf6a36b30a8c759813cc6bf589","ssdeep":"1536:tzn1OTkTmE9xoNzOFE1wcthVkvsPCjKEKS6T5itBehlY6fiZLtBfIpMxYfuKxKh0:t6+xczOFE1NdPGDup7fuKxKhV6t","tlshash":"eea3221871857821d1739af2f8010945abe4ef6ee56172886cfdc6641fb7ce0f60e78a","first_seen":"2026-04-27T15:50:28.09641Z","last_seen":"2026-04-27T15:50:28.09641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33893.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33893.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-909\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1JLhZ8o5aXskOx1Vs3OkCSsWlti3lGmz2s7uJ13LwGy%2B23miyIhnryXwWuSl6oG5jpRXA6ycm2QZ9Qs%2BLqjoL3zFXQiJK1fUu%2BCQm%2BmuwGUj81hoX92CM3LxL%2FVR7ecirc0\"}]}\r\ncf-ray: 9f2efad49b7c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2312)","md5":"11187b9d5a25467cbb923410192bc8d0","sha1":"43d09e9b084d9ade1e7e2e42d52568f61270fa99","sha256":"f51c8316afc38a3265b48527f6f8585361f2285d8e78edaffa658c38b793a74e","sha512":"7b1b48438a53b73cba47c292c9d28b57a60e70d4bbd241014d43ee72fabf91379f73a852be2ef946c0d6131fb24d79654d39cdd7fa5cc9a81e3c5b3946cc9478","ssdeep":"","tlshash":"3d41dd30bd66962ed833a06539715acca384e742c2130725e707f979d9cb58729723dd","first_seen":"2026-04-27T15:50:28.313242Z","last_seen":"2026-04-27T15:50:28.313242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33834.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33834.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-af0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ObgX222YZAcxo%2BEwdP%2BpVo48iNX2bHQUgaVgOOtaZbgi31CN7DAJgwIhA6IdVNGrsQLVzQvhmvrRcbOX%2B89yDQJIYcMaWHhlOxQFT7WJjc6HOUXpuQfi8%2B5R7y%2By03E5OwR\"}]}\r\ncf-ray: 9f2efad4fb965fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2800,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2799)","md5":"9a2cffa03ad6fdc378cbea1f2e03409f","sha1":"94c969a48c5623efcd711cbe154a4ded44b7e2e8","sha256":"afa49ddfbfe351ac7cbf095115bca1202221846774881b8b02c872904d95b3ff","sha512":"962fad2671d5584fe2b9c30e0caf0a96a695b19430a001ef237faecb79557ec2ff1b747b8eb3dc271653289968550c12635c863896dfb178a177365339d71e44","ssdeep":"","tlshash":"8751bf2e364d3a25c877db2d74a19fadbe29bf09c6035a21d5077e21088f373a721704","first_seen":"2026-04-27T15:50:28.319288Z","last_seen":"2026-04-27T15:50:28.319288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33811.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33811.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-bb0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feXMGqrPTxPrcilGGYsUZ70zB%2F33tXGI4Ut7F4Z%2FOvJSePrrMPLPmJClpXIQ5uN%2F18tX0xjHhmifi%2B%2FgXG4csZ8FYRWnoJEfGKBio842w2osxxce6UWGapmj7ey5pyFTWLQ0\"}]}\r\ncf-ray: 9f2efad51ba35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2991)","md5":"63f0d95fa8797c94bf1add78a6054ffc","sha1":"7a0b86ff01815a9c4f754d270a163c2751b6c903","sha256":"946210b48efe4be4e182690fe02f19941726b3e883dd7d13464cbf5ffdc4817f","sha512":"bfea68d31bc01335accc7eaf4350d8be34910c33575a663dcfaf51f2dfe6ec45c89ca60bf255e210dddae79c77c0553baaf8ed2db10a7e730717018f23ea4abf","ssdeep":"","tlshash":"985164187236d97f1b7658081d3c4881904cbf4de5086ec3f26b6c3113aeeb5d794a7a","first_seen":"2026-04-27T15:50:28.325226Z","last_seen":"2026-04-27T15:50:28.325226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338545.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338545.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6jvo6CZEtfK5sfm6wUqyVsZiIr0pWTFgfJ8ySR5uNMav6ZojdF2y%2BxJ0KZTSuo5Nsb9qPWLDXh7%2BymWuC4DVyBIVB6JrNzQjNMC164SMlfpBLPy%2FOicnZTEj%2BLDsKKZpm8U\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-320\"\r\ncf-ray: 9f2efad5fbd35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (799)","md5":"b891f6c692c62da8c048035327b8d594","sha1":"58e5e89a636864b31c1af9b29b5789fbb1564642","sha256":"7db9a2b88c575b6c51d4e3d0f65db24a704e3183e48153632f25380729304b58","sha512":"eb6c4996ba93afc48a9f378a1cec8cde17a48ffc2a84a1b4d9f45d11dfe7717dd3b44a2c78aae697d17c60ac965f25ec6f0984d344d591b7af73334187b57024","ssdeep":"","tlshash":"8f0141d2fb45553c47330008ab4ea0b92c813a71a94c78f0f22b0985aae0d7afb20707","first_seen":"2026-04-27T15:50:28.328954Z","last_seen":"2026-04-27T15:50:28.328954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338546.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338546.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-fde\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7shoTxnAPBY%2Fkj0e0tiFQWgurFJk2Ducxhnyly%2FwEZJWCWHWeUlueMSa15SphgiVzOwk06YhmpoWNwP47gG1AsJ9PY4WknUwKdZow72fcDU%2FYXyDivwKnu4oyQhJrVgDMLqA\"}]}\r\ncf-ray: 9f2efada2c275fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4057)","md5":"72b6e11d70d4627c2ebe6770466d9d64","sha1":"860f922c71d75321757eb2c00ed8a65e0c9832be","sha256":"50b2db454d7edf785bacc885c6ecac7cea074e20a60c0871c864542b6c627709","sha512":"1cdb5c7665eaac5ef58ea64e429dead7b8489acc47235a5c8f9be8f2a34284d1a6558f830d2e24e8cec345f02003114775518def768306011c440401ba7c9c93","ssdeep":"","tlshash":"2c812240aa16db3ed7b308645a891ca470193fe7a14425e1e2aa5c213bf1cfe979cf35","first_seen":"2026-04-27T15:50:27.976705Z","last_seen":"2026-04-27T15:50:27.976705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33813.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33813.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338645.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-412c\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlHMUWV524UkqZkEeZCYwdB5sHqSYvfKWNDy0m6nlI5Cr5cHaBZiYRVHtXYDxIp%2BfX8Wue779aFzhfcJ8zVDOsgJYJR9fkuxewpIKFTa%2B%2BlwdDo69UEbc4zQlar0PVPbEcTV\"}]}\r\ncf-ray: 9f2efada7c305fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16683)","md5":"4b6339b166f1c2788940e12e915b58fe","sha1":"a5c161f7271bf9b11397b5ec9799271b6f5ed854","sha256":"ae2e114b60bc885a933e147fb521961ba83652b1a0a4ec6e6a2c7dcefd87ad7b","sha512":"634295d8d8355a15214ac8fa18a1aa810faf96aa1ff600a5d1e2572d00f595ad1a33eb516b374fd68974dfe5113b10f064abaf395937620991525ed50f9afbf8","ssdeep":"384:TX9jafzVAo+XE4ZVcGVheFcA53Dn7UGCJcz:L9K5Ao+04ZVheFcABD7UGP","tlshash":"fd72c5807996dabfda73a0a214ad0058e04c1f99c10a85f5f0ffad1509f9cb5933e77a","first_seen":"2026-04-27T15:50:27.827239Z","last_seen":"2026-04-27T15:50:27.827239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/notice/list","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v1/notice/list HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PP1Nwkesrg%2Bgr4qeSI6I6co2znPYJeyLmAFhyTjsTROxP8rP8wQsoDNxFor391KHqA4xmwfMkaMu2HwgGAfZmbCKuP2Hau2rscQQebY0wnz7l0Fx9F5VCODRMFoxhvOS73Cy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efaca3c098be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":140,"dns":95,"connect":1,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v1/user/gth","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v1/user/gth HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f2efacdca828be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b34db74924f6da3ce4c29c84b38ffd56","sha1":"1a1d11ccac16ce2d9e1742c4815f92090dd143ea","sha256":"39b73d86325ada6852489bdd2b9da97310c3b58b0dc9287bc05fc0648ae77b21","sha512":"659bfe6efb5d2396b9845822f00e00e32f0b8b19d400d6568a7e7228dd63d1b2c60b63481157fcd1947d6be02384c1846e6aab060ae031f8a1269c4dc1586d62","ssdeep":"","tlshash":"4b11b70f77ec8d3b1a0d1688022b28e113e559004be90c96139df175320abf9a105196","first_seen":"2026-04-27T15:50:28.332669Z","last_seen":"2026-04-27T15:50:28.332669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33817.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33817.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QuiiJ5x6vbCV8rrOIbh5HQ%2F98NgGVtoA%2FiHf9NPlD%2FtHTHouK579XBHr5ZjDEuHyPIN7%2FD1y18taoe94uoLhn46Sg7OHab9Y8oDs0djMv37D2SRrDI%2Bgha7963ugF%2BCEBr4W\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c25-7e\"\r\ncf-ray: 9f2efad4ab845fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"953c3990efa89f726823ce9690726e8b","sha1":"2ac6f66e47bde757435935c8286336173a592c2c","sha256":"5fca39c73715035f1956aa6d6caaaf10fcc2440134402f26e2efe3d7a2ce94fe","sha512":"0a0e0082962d53d85b973d11dd9a6f2506900ce5ef2c38af8bd93218723b16271ac22ca2f5b19d03550a4e038af397b1a594e20c9a1ed784f929eff1eee30719","ssdeep":"","tlshash":"08b09b095b955d00479db7f5504175154e11e71acb1d1f4513d54dac6e494132433c58","first_seen":"2026-04-27T15:50:28.336263Z","last_seen":"2026-04-27T15:50:28.336263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338620.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338620.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1cda\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgAqtbxSzoC7FsuhBQ93iRiS0nGL3uqtS5tHQHJFwiDtXK5eqAxq%2FnMkEACKleKICiBarpgPB4RgTlLOUTaUXRANmhAzsf8iq%2BxmUPilxi78yZb%2B4%2FMLxsDS3FV%2BWNolJIdm\"}]}\r\ncf-ray: 9f2efad7fbef5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7371)","md5":"f0c4b277a03ccb2bdc69bf9c26e623ad","sha1":"d56b80658bb26ba9f85a37f63aa46aa0fe135260","sha256":"ed79a70c77d46ee76a0e7f0906c47bf7ff0690cc7c5ecc185a39f9ad1b3a8d3d","sha512":"82ca32662cf9f420a1160e6616d129d8b9ab5f3c52ecd76959492e8b410af4d8c01fbb66acdfd463868f443a7e9620d5cc37e8a3a8988e98ea84af50a8be037a","ssdeep":"192:LzLwrISMJXwGThTMWcy9zjKtcW2L44ejiMKZ:LYrISdGT1ZcyRjKtcWg4n+j","tlshash":"9ce19312b70389bfab7b95d0384c04d4a1186fee800c15c5f2f90f9a27a6eb5572477e","first_seen":"2026-04-27T15:50:28.140808Z","last_seen":"2026-04-27T15:50:28.140808Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:56.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzHImZ84q1UQ4CeLUYtIpK%2F9DtwSdLcQ3wXbZKLY%2FDGbImQ1FonVSsWys4hK6D1KN0NWPqHba3L3YPzRcLVtRM4simDKGBKFO%2BW22iB3Hul%2FAyEMl48QzJiVHDWAMu%2BBiYMq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efae17f25c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/static/fonts/BinancePlex-Medium.woff2","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /static/fonts/BinancePlex-Medium.woff2 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27692\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69778c25-6c2c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLTC73E5THXG%2B43%2B7oCAqcgpYpdxUeXiaWo%2BADLPFNBd3UnlDZX1UsafLJwE%2BKj0OCG6AL9O9MHJR6sVMRi1j1BSNNo9pdCpAcyuBYRdKc66Mzp1l24QdZW5A%2B4D54iMMMwm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efad0ab195fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27692, version 1.0","md5":"65eb5d77b416fb37b06b518428f94283","sha1":"ad9fec7e494deed22fe2f69adbc2b7d76826eb12","sha256":"4d0450d65a0e05e46e31a943a4da229890e2a80acfd140489aa1d5a267ca13f4","sha512":"77bf89abb81611e322f527a097afb03a55e3c45fc2080c1e24b9aee1d42e6a071cbe52f2057303863213b8b0d5e2e5f5142437c4476f6cb71fc5a1dfc865e4e7","ssdeep":"384:ykk8fqYtLwI5LmyvkC4W/QfE0NO8tuUkNxrbAIbUJ5rBQP+rrQIEqLyotgX74f/3:VnWfLCLOEgIoJNU+fQkWoYkLUZuas","tlshash":"96c2f02f0511594c4392443f9824ab6e170baf9ed3ada3770d23497ed8b5b46103d9fe","first_seen":"2024-07-15T22:11:14Z","last_seen":"2026-04-27T15:50:28.339872Z","times_seen":265,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338622.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338622.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-26b1\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VuVgHwV3PH1oVE%2B9t0o5IsYuKd1hCNZEzjRRGjZVHvI6t4iCRV%2BqCoblSyukdAQq2B5Rge%2BquLVnwzqXMnp64Vp5SEAZIHFoGR0JSM6n3M2dpgvWRIlSP1YwXfLeWSvxa5D\"}]}\r\ncf-ray: 9f2efad8bbfb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9905,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9902)","md5":"ef0484cf5a271d3c98f2c7019c15a6ec","sha1":"08ed6da1e40c8c2a2f974965e0d287bc5bd77f55","sha256":"871f0928b81eb06689367335bb0744ad9c5ea3d186f6643d4e7601d3d2b104f3","sha512":"01a009bd5242505867487f5dcf283d709acadc91bf65632b564919373cff982cc8b76a84d538b380ac6ce4bc886bd0f5490156ff68b84b30000ed9580a85b0e8","ssdeep":"192:INSu4WZOkhcY6WIKGMVRhGNzsUDZO1kwkoK4vk5+5bNpPAYYi511zu6X43PchloT:OKcIK3kNoYMvC4vk5ebzPAYYifDCchY","tlshash":"dc12a700b523dabde77335d150694488e29d1fcdd10688daa1ff681136f6cb48b98e3b","first_seen":"2026-04-27T15:50:27.8071Z","last_seen":"2026-04-27T15:50:27.8071Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/static/img/home/ic_wallet.svg?v=3.11.5","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/static/img/home/ic_wallet.svg?v=3.11.5 HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekHPVWcQ1o0CfHD5LQ34UEZtSq%2BmTTECmhwPXvLgx8LvLRP2cZeJi2K%2FuvSVizUEso0%2BLVPuzvBP1eOdM%2Fcxia0F6jjTUXK0V73paPSBbP5QIZEPL5B9DT3c65SzD6cDkFnl\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-6c2\"\r\ncf-ray: 9f2efad04b0b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22559a24404ed86283ebe7eeaa5a85ba","sha1":"7650c38e78728d5e3ca4a5abf69dba09e9749d47","sha256":"40a3a85b2699328878b974e029d18d78460a7580bad8fe9056a6d44ba1d70d0a","sha512":"9eb5970f42fdbfd61e66bcbb7899c6b1f2e4c2db4c1f3cc6d7e2cf71c37107d6197cceb943c81276260b488376d891a3d83028787c16c0b06fe36add4fbc12db","ssdeep":"","tlshash":"ec3176f1b6fc60c4e896c7a09138a1603f6a1cf42f01c58a26e5dd78eb3f03e9956c84","first_seen":"2026-04-27T15:50:28.342449Z","last_seen":"2026-04-27T15:50:28.342449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33821.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33821.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DoeZQ7ntrKzFv9x8G%2FE469JekqEhHftTOpnHMRCil0kgduJXeti8zgDyaSZ69timdN6QtoQUBPs3RLO%2F4fpvllyNdyke6zfbQO2y3DISW9bZA6%2FFEKdG34VmZDmINoCMhCp\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-1ce\"\r\ncf-ray: 9f2efad46b6f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (461)","md5":"c391dc35c8397f971d02b6e5f8c61e7a","sha1":"075fc006649b05555623fabec4255e8f504370e7","sha256":"6fdb08e17d85bc9f9edcbea41c5fee51ea00e5725fc4468f25e3a73a35559208","sha512":"449526e03b24c00b1732bd64886526f104f1879bd23790275816736499dde009f6c3e5b07d079b2c15cb31c7f5a84ac05189d660ec2affa23c1895f09aa877ca","ssdeep":"","tlshash":"c1f0a0eca898837a2c37b66d096cc44887043d8fcca10f97fb8661210c836d17372663","first_seen":"2026-04-27T15:50:28.345815Z","last_seen":"2026-04-27T15:50:28.345815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33814.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33814.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-48a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqJ%2Bcr3gGbqDf3z%2BqjDd264FjdbUGrc8xOxc0oYFWMAj0qbj%2FqV2TEs3P3EpS2BhKSYOVdHGZ%2F50snxQiMXGeKMtD0E0kvMSfjaCT6g9fWP6Fai8%2FrjrGv8kiWaGlORg5INN\"}]}\r\ncf-ray: 9f2efad4ab815fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1161)","md5":"da84b367e9b4ac92f2d224a0ee2a228a","sha1":"9dbfd799448876322ac30bb6aa8d331e156cda3b","sha256":"fc6eb185a86345c477d6639298692f3509e800492f5cc5bc0cbb8ab4dde0f13e","sha512":"6ca247bc83445181549be3b43866879d6b578ba1fa5cc13f3bef66e8a4012a91175b7aacf3833ee191e75ce089435b331a7f4db1fc87b1da959a213b6b5ae3c8","ssdeep":"","tlshash":"59217c5aaa5498214d33ebf7b4e0f5f81715d523cda2dbd0d297ed24c9c76e221032c8","first_seen":"2026-04-27T15:50:28.351069Z","last_seen":"2026-04-27T15:50:28.351069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338619.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338619.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1b6d\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giedoVo6zdY0gKT9zct8gCuDkmCgfG1lEY00HQer4s0PtaWZ3EVb5ge6%2BHB8G%2BxCptF15gn9vqP39ZO1hh335CFzlyR7rZflS9Hrpd2yFF3sNQTccLB%2FSuhuSBQ6VApJwOzK\"}]}\r\ncf-ray: 9f2efad8bbfa5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7021,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7020)","md5":"ae37712c4ff9b3fe24c34e2332e0fc32","sha1":"b6fd829fb59302001877a7c1c7776032ee558fff","sha256":"6c69db7fb27d4c7f3d8261078e97248d32815ef7883efeabddc2d47d57b30e3d","sha512":"907d68be93f89f666d796ecaa047ec4d59959288695f03d45f55464477ef02a71061593bfe129fefdb42d26d0c1161089fc7fd6e32dede7abf07842aba8f2382","ssdeep":"192:LselMp8oauCoxBMtEaCE4LWOhaCAVLme+HDb4B75gvvab4bf:LseGp833IBMtr6sdgDb4Blcvp","tlshash":"30e19560b612aa3cd37760c6106c4089f0a91fa9e118d1c6f1bfcc252675eb1d6ee73e","first_seen":"2026-04-27T15:50:28.015566Z","last_seen":"2026-04-27T15:50:28.015566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338517.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338517.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-10a9\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FflgLuXnpqDseU8XZ0emaaXwon93dCHew9sIctmO%2By5HS1EdtAAcfXeKlwF2XxlsSOcT5oeRu4wDyVUWwq4s27KLMvcW1ghQZQ6MRyMLRTYK4dNTxIksO5zqbRygSJ3AjdB9\"}]}\r\ncf-ray: 9f2efad8cbff5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4265,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4264)","md5":"f601d7c60a9867a0a88993c53cc96d88","sha1":"9b3c036799e4245b1aa78e7a4f637909b1ece92b","sha256":"e89c2ccccda887fd077785de655257bee59002dda172d3bf7bfd741db2a81573","sha512":"d5102147a2d22bffc305f07a4022425998f8a494a56f51446f62bce2fa12ad3f6737e9af43ccb44d8aaf82410d861a08a6b06cf669e3ca71b44fc966a590baa6","ssdeep":"96:pV5kpLtMmbI42mWTzCdu/OGOEm7khqXqAQMlppx49:Vkl2mbI42m+Gaqastx49","tlshash":"7991c700f5029dbe6b7385847461285cb5086f7b80559ec8f3ba8e1627f2e24e357677","first_seen":"2026-04-27T15:50:28.013127Z","last_seen":"2026-04-27T15:50:28.013127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338645.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338645.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-a38f\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvXHvFqIKTU5KSZUNsNz6R96LcnuwMwMxArHUgBR6MEWS4Kh2wxPqY8JMKahFz%2FXahl3InFlQU1Sjdc%2BEfLl%2FwaJcPBTjEPuAq931YvkrO8Ka2Wp3ueksiu%2FVqQqq6CwVIOW\"}]}\r\ncf-ray: 9f2efad8fc0f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41871,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41866)","md5":"b900a366acc10ba4e693fc513a4f02fc","sha1":"3196e7eaa840fd005ddf09262d1558d2b2094bb5","sha256":"c591b552a82154233e37f54232c5d4d2a87c246d57e795c1a65c39b4fe34e3d3","sha512":"af67627d39780670091f18e1260da8d5bcc3b36e36cac7ecb90f648697d5b71171095123968ae11ba6c81b9eaf2373a046b8dced837571e8ff1e3fedcfb42a9f","ssdeep":"768:RKH7ktDAC7mutXqXEwjgJ9VATWqN+kSvKpj062glR8nAUvL:4baDdhtXqXEwjgJbATtN+k1ig0nFvL","tlshash":"23131914bb02027e87f710e138a92d82f1966f5dd21688e951b98f8113fae7467327fd","first_seen":"2026-04-27T15:50:27.8242Z","last_seen":"2026-04-27T15:50:27.8242Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33811.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33811.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338515.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-bb0\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLS20tFpPlMCcmyuyUWlWz%2FTA60A476SojrUsnPiA99RFjMgRm3PUogZqFULtagIjLYCUnMj04PYY7TTN7vWmuwsN%2B3rij%2BQphc3ECe1SmNwd%2F7rOimSuCK%2FhD3lRT70hog0\"}]}\r\ncf-ray: 9f2efada2c255fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2991)","md5":"63f0d95fa8797c94bf1add78a6054ffc","sha1":"7a0b86ff01815a9c4f754d270a163c2751b6c903","sha256":"946210b48efe4be4e182690fe02f19941726b3e883dd7d13464cbf5ffdc4817f","sha512":"bfea68d31bc01335accc7eaf4350d8be34910c33575a663dcfaf51f2dfe6ec45c89ca60bf255e210dddae79c77c0553baaf8ed2db10a7e730717018f23ea4abf","ssdeep":"","tlshash":"985164187236d97f1b7658081d3c4881904cbf4de5086ec3f26b6c3113aeeb5d794a7a","first_seen":"2026-04-27T15:50:28.325226Z","last_seen":"2026-04-27T15:50:28.325226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:55.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 15\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"dedup\":false}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:56 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efade1eb3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"33dbaa42fe03c7b44ad1be21946dae42","sha1":"13fc06f7697646bb2577d73373c4f9e662a5d473","sha256":"62b23d12476a4eb928a4c5ba1daf255a05e086d3bba608b83337a0cbfae57557","sha512":"af7215fc84b301a74457c814dd005a70825f61c14683dd5be623c8b62f9fa34fdc2e7390f63f01f01d2e3256c2f4dba2bfc491991d61dedb0f8cfed017ca2cd6","ssdeep":"","tlshash":"da11b71f7fec8d3b0a0d168802571ce153d5595047da0c85234cf276324abf9a1052a6","first_seen":"2026-04-27T15:50:28.354589Z","last_seen":"2026-04-27T15:50:28.354589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33819.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33819.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-7cb8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mH6G5NX7OuGuJI5N8JyN1v2rjEgqH6du%2FFkhrUcsYW1gh197%2BcBO13DDGagGPn9aMxkc1WIawZBNCvboe8Edz59671oYqHdpJFFzdinPI37FVBAp9bqH%2FmEARpBZHLoEPbWZ\"}]}\r\ncf-ray: 9f2efac8fa0e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31928,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (31720)","md5":"4e7b4fffb991dce9f0cc096969f44dbf","sha1":"2114d4635bc85ecef6955bdc1d2a54bf95f49e0d","sha256":"60ecb219cda2f9a2aeac5caa8a29c2ca4c55b34a9e92cb84606c6fd5ea6814b8","sha512":"447842ec99b2d5b3faf25b0730c1ab4e1922a01ef114c25c8a824ea7411d38406ab0db9dc579a18cf77efe86f89647d7846ddf15bedd431109b81569f9fee910","ssdeep":"384:DXmpfIbuRdf5M4VCpVJPV2wM//VL9FatWab1MuC8iu876XgROZLWKlcxA68hfETe:DcZfCPRDMXOxC3UZLYx13jC","tlshash":"a8e2e7e532b2f1d612e728e240ff9447e23abd45994e11f0e2089af93c715c5627af74","first_seen":"2025-10-03T14:24:08.823761Z","last_seen":"2026-07-20T23:29:59.32839Z","times_seen":54,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338532.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338532.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-554\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YM%2BXYNQWJhgb%2BE0UWFX2NDZywlF3OvGtZqktzp2Yr0rUfQUL8LP84THmbjLX9GK9unAR6csjdtLpX0cHZERA8MMRj%2FtgFpLZl9xLm3phv6m%2F%2BMCXBt7BK9siZYL5FsMUSIJn\"}]}\r\ncf-ray: 9f2efac91a1a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1363)","md5":"3327427e95ca342277f98d07704e681c","sha1":"f1926e4b7d4a408302b367577ac58119050a08c1","sha256":"f38e1d04675daed682ac5d484ac318d2b8be0b2d8fddad6b636287cf85b89e91","sha512":"0f4a8302e846ca290eddf4b064004ad0626c6b1e42f7b43af1bacaa2c29b06a75abc89e60905516ee5a98663dabc6c162131645a744e196d5d1e529e6e2cc860","ssdeep":"","tlshash":"96213111eab1e8f6cba707a8331f4428a1842fd9d4086462f3eb09255658ce55b0eb0b","first_seen":"2026-04-27T15:50:28.100771Z","last_seen":"2026-04-27T15:50:28.100771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338655.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338655.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-393bf\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lJ1Ye8kZmenfvZxTxSwgCRi4oO2KxZrL7lWyHIv%2BXurMWpDjVH5wPDRsxrtef1RTFzH1vT09U6rSrlYui6z0lMr%2B0UD88q75uStIXZKygK1Xd6ChY71kj7q45bigQnEQGsi\"}]}\r\ncf-ray: 9f2eface2aab5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234431,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"a39402414dccd60ec4d3c51fd888b79c","sha1":"d034cc7f458b1402b443234bdbf76b3bf2024a86","sha256":"966bd9288ed490bfa6ea32275731e09ba06df31da0b5f5ef7bb39b6ff9a8de53","sha512":"158ce45f49d52eabb41336fe162aadc5a88bb9f0b161b5892977f3e1669def49e451f636d315a81d0c3ce2876dba3ce33834633bf13d241309427a14831e42b8","ssdeep":"6144:73yi5zW4kShmet71AtqTDBt7PmdDOLdnR9sHBba2QvN1biZI:7iCzW4kSDp1At8Bt7PmdDOLdnR9sHBbE","tlshash":"33342a81b262a3fdf3b2408d5029b105b29839adbac0cdd5f1ba9e571d57ce1126df23","first_seen":"2026-04-27T15:50:28.357972Z","last_seen":"2026-04-27T15:50:28.357972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33825.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33825.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c27-911\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJNAe7kPrUDt59ji2Dv1DeyvcfsY2wL%2FRlAqWWg13qgGO%2BMhb5e8%2FR1s33hruQJFB7W04BNNhM%2Bmfm5K%2FSph4gSKy%2B00cUbFg0J0bBGffXRMtNT7MC%2Bv0JtAT82cYDmFVo%2BA\"}]}\r\ncf-ray: 9f2efad4bb875fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2320)","md5":"c53f4f909d763a861850152442acd276","sha1":"4fb639d0bd6ee3b84c5f35c7b860b9ae79777f8e","sha256":"9ba4cd18646359235110902245e757e3bb1d9c2fc06035af5cefb39a6efe10e7","sha512":"382fee9ef96dc4b3c7ae285d5ccbd4cd6bfa682752d4739f76e7426c8c4b818bf7ed6ef69ebc99a75176dd9057ad296fd12302b34a4c68342fd343d74235d16c","ssdeep":"","tlshash":"d441bb7f7268ae1911378d67fb75798cad08e671c3025258f317ec23689fd632e10268","first_seen":"2026-04-27T15:50:28.366465Z","last_seen":"2026-04-27T15:50:28.366465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338524.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338524.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-478\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLzr11VSI8mqeXEK4mlaHh3%2B9cqwv2KqgHdX6hY6eRxZRq4yvkLwnFIvlD1HVwXjhxn1tPMicsdZ2QJF7fvZ9BLtfrFxhK2sutUfJu%2BV26yu4q2QuNmbcfqKOfAi5KH%2ByXQd\"}]}\r\ncf-ray: 9f2efad52ba75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1143)","md5":"8d45ffbf7e53ac228e2cb13e986c4bb3","sha1":"b2b13e82a5266a8c198f405993053028c6b4f282","sha256":"20899eb10e58805ca93b8a486ce4baed355f178fa57240d811635df919a0b112","sha512":"b6c750d44eb21ec7f0ab7026c882a9de54a3de04ee238eefc4d0a08d83d45742a4695e01131dae92401aa920e0955dc2a9f748aedcdbba3d980dc56a70cf4fe6","ssdeep":"","tlshash":"4c21ace8b0da91b703b3952a813fb857fba97980a2ac0b40d25090cdb4a59c80127c2d","first_seen":"2025-09-10T13:52:39.470976Z","last_seen":"2026-05-17T19:46:11.849005Z","times_seen":10,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 15\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"dedup\":false}"}},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f2efacdfb638be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4e0d89522069fe826102a2c22d3cfd17","sha1":"4a4170aff3dd407d243619b2653d4cdac6ac8b71","sha256":"e6c406e6872a606874c525614bc0193bcd77f2575783396b19feb105c2fa00c6","sha512":"03e19dfb4e3f0976d4be962984d7e841dbc0b2e110e7a0035c37146b5e259c291306219fcee0d0ea49899e3bcc198f9e219bac120f5fdf45e8895c225ff6a9b6","ssdeep":"","tlshash":"5d11671fb7fd9d3b1a0d1688025b1ce213e569014bd90c96139cf575310abfda516196","first_seen":"2026-04-27T15:50:28.371671Z","last_seen":"2026-04-27T15:50:28.371671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33822.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33822.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-a29\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qB8iFN8ZlvKlnKUMxHJbxN2%2BeBCuWn3TI2mMgVJ%2FJMbbSqd4QbsO83n%2FY%2BgtWfTb5BlgWspsd3Y%2FwtInz1XgjD0CIqu2F84L%2Fb7%2BWeZFNowASbOdCK1vCLKGv9aQ272is5nv\"}]}\r\ncf-ray: 9f2efad46b715fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2600)","md5":"843055ec8e5c42a93c6d200488b00b26","sha1":"36e23bc05abacda1b682f76dfdfe9bc5424993c6","sha256":"ba295b8404d62d6023fed2b4bbbb3f1271b2e2a132ee339688f4e332dcd32fda","sha512":"566c7f9b7a2dcf174a082bace522efdc406cfcd1ff09a582b565919622808e8039f74ebd8da683d74fa0e0896dc978c2304189b99759bbe1655663f9ccbb1781","ssdeep":"","tlshash":"4351dc25a6e46d3b6c73dc393f65c58dc504ea53cb030b15f683d93288cb6e32a63628","first_seen":"2026-04-27T15:50:28.378491Z","last_seen":"2026-04-27T15:50:28.378491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338537.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338537.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1721\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcOuGqZIStc%2BY6CzJA3G3Pg0Up7ym7OjBpoa8n5Yr08FXKTTnggDsL5Z2UWGvFC%2B16mgYkVf5OFJrBhRKqQKxG6zqnC%2BZeOMGQ3FykMZ2J0aenDfj3znHbLo3obWLbzY%2FcdB\"}]}\r\ncf-ray: 9f2efad8cc035fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5921,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5920)","md5":"2a3bca934889a1d13a5bdc7d3c87b67b","sha1":"1a0fee238fc1e0e3abcb0c4ba04149d7aea85dbf","sha256":"d1d4eb9c602cece1819d1639ac07ae5877661ce1bc6fe47e0712fa1b7bf2c97d","sha512":"adae0b67312f84bc1dd071fcc8628abea445c728d4f64b1752742b7e21ee6dabace93d40a91308e7c7482fc0db5148fe4eca6d76470128e86d89a5c9d4021420","ssdeep":"96:ahJ1+dliO9mEWyNnD108UwthDta8nMaQVF+CrJjLlJghiCPKfVynm+UmzddvCdmt:ahmdlIaqwtJta2MaQHJjRGiCay3rzbCS","tlshash":"abc183017612983edbb651d26d381441e0895f599308c0faa6bfef7927cbd79638873c","first_seen":"2026-04-27T15:50:27.876307Z","last_seen":"2026-04-27T15:50:27.876307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33815.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33815.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-674\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kzfk6JT0YbKb8bPLXI6B6sd4MJ8no0N0f5vrtvrN9XFHsDAH2B2CqM9wySOH%2FatNierMRJxYQj12UELrVtAhuZ1PDLB0D46QfGG28ARoj2Tt6WpXeU9B1LcqLz7gnakz0kv\"}]}\r\ncf-ray: 9f2efaccda6d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1651)","md5":"63c16aae49a9084045a6c66cbbe918f9","sha1":"3b1dea0d0cbf0f9ee77f30f77660d966da8779fb","sha256":"6db96e1849411c42a0c9062476c78f2e74e866af37cbd589fa1ba708832b68da","sha512":"cd8e6cfbdc37920c1aa8d7e12dedc09a19deb4e2cd79b873086b2cc4adb81cd1e96731c57fa8c459c72f3e2e328c5496fee6e0045803e3dcccf059e6ea175f0f","ssdeep":"","tlshash":"6a3133403558e57357fd9d4ac02412a151003be873196cd6302f1d36a74eab57b962f7","first_seen":"2026-04-27T15:50:28.035251Z","last_seen":"2026-04-27T15:50:28.035251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338454.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338454.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338573.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1d74\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcI4HoBHQ22BknzFA6dVBf21AJAT9U5xqbiVhh1YaYHNGljuIhW9%2BOhH0sjeJsCjoFM90StNqP8HrqS27%2F3F46JevHgPK2u6F3Cd%2BkRvX1i%2FDQrZt%2BMdNoII4c7cmhzsiUDp\"}]}\r\ncf-ray: 9f2efacd1a7e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7539)","md5":"4a2a94ed145ba69439cb0f07e694e260","sha1":"8f7a98201e965225eee06da0239abe96ffaf4f01","sha256":"8509b1cb598b6daa165417ea1b5d208780528267458ecf8dc94857e575e778b4","sha512":"e5204d21ee21bc81d054797e0e1e34c88d913dfaef9faca35d388b1757b3b46b7fb4875c131bb94655e3ca809358a65b9fd212633c94671e4ca479fa2aa2b9a0","ssdeep":"96:sZecOcNmQ5vvUvzOAWqeYW7GcMdqdEUsSUXG2lT3CQGmyVhkCGD9IIhFRed:4echAQ5vMvneYdUEUcIY5S","tlshash":"14f1b7433752f9b2cb7b5a4780065384cb35a394b81e2cc639693b3e35e3d442669f2a","first_seen":"2026-04-27T15:50:28.209843Z","last_seen":"2026-04-27T15:50:28.209843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33878.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33878.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-60e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfzPS8rmiqFUfMHAcFowOo%2BOR3GE%2FJC9YKrUnzhOxIdsVFiJmIrqC1K1TKYzA7J%2FslEyKCXunDTwP5WxUFKrRGjl3B7Ix5b3LOXLOZ%2BWTsqv%2BTTAVP8gD4%2FstjM3RedoDhQl\"}]}\r\ncf-ray: 9f2efad46b6e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1549)","md5":"fd5474681a2d04287c9ff9b99a41280d","sha1":"bdc046183a0fc135dfb36e193820839fe988feae","sha256":"b01213df7b48a6f51e8ea35e57bb189346ace651774dbd2fb3c38323f1020537","sha512":"a5ad95ffdfb96d9c938e641352fafbf546989fe2d1f2248617371f1f184f3fda7bedfa53dc1ecb58ed66cf9a016c51b4b988914f8989f893e59ab82edd6e5962","ssdeep":"","tlshash":"3c31bb37f91c492aad3fc661baf55ecc9004ba62c1054754ef23ae301e876b32a35778","first_seen":"2026-04-27T15:50:28.384463Z","last_seen":"2026-04-27T15:50:28.384463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33877.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33877.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-1263\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iu3HqmcRCQs6tZjA%2FG0OKrj8mpjfoICLnLLhRNl5S4MCk8aLsBYrjRtTIugsyKBd7%2FcVHGS29QICdj7WXXOk03Qz%2F76LbXN5Fl5GQa7wrocCw3kGnIVfJfi0WZA0J%2F8ZsA02\"}]}\r\ncf-ray: 9f2efad48b775fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4707,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4706)","md5":"ae4142c453b53eb3fb40ef01d6e4b391","sha1":"8be1b7ef077e8dc048628fbbbe0c0012694777bb","sha256":"fdab47ad5a31586d3789738a152faccaffa14736d74d043e7bd6a85d6b7a0cde","sha512":"ac9e4ef959fbfc92745698b0088d03c3ff991291a4194aae804a6d2ed363a522f3183860f9a96be3ee20abd3038ca59b5877c2ea55d47d940aeb771cfd030472","ssdeep":"48:XOQWT2KJp8XkeP4WbgUR9/ALAirfDNtINCVA/fh43i2tKc31AVQJa:E2KDKkePBbVVUNdlm43i2T314Qc","tlshash":"7ba1e338b578d53b5a33de243e658eccf546fa61db0213d5e9876d3544c77e2242044d","first_seen":"2026-04-27T15:50:28.389296Z","last_seen":"2026-04-27T15:50:28.389296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338609.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338609.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-9df\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chDA6FE7eeI7qwGx6RZvhM25jJ0%2BPrGMmw0Sx258kxX7owtU4sOCM0zSGd1Bsy%2BrczJdmK93IvMHYjqz7SS4DV1PF%2BkD6fT0W6ChLOlnN3w7FYvEBTBpquJD43jtlMQ%2FGJo5\"}]}\r\ncf-ray: 9f2efac90a115fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2527,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2526)","md5":"5eb0b5623ed7a066aea4a3d604619fdf","sha1":"d0710866d210aa7201899b944fb15178f8d71d78","sha256":"5a1fcfbb763f81ebd6b695ed35b12bab6fb6144dd7b6e30302d2cf8815c76d6d","sha512":"790f91797908dd5f65a929bba0fbc0109a06c0d9f717fd55c317dfa3c795f6e56afc04111a4cf73fbfa08299f3bbff46d7260ed3b7e3ad43edb407192f67fc41","ssdeep":"","tlshash":"d65173e3b38f8129cbb500d899559b11160cea7024484df8e07ecf1226aed4fa246f98","first_seen":"2026-04-27T15:50:28.393672Z","last_seen":"2026-04-27T15:50:28.393672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33821.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33821.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ous6h97SqbOj%2FX2Kf6hBX5fC40UBAaOvwANwvbX5PTgoVJr6qqmbhBZC0dMKY4gbhMR0PPJr%2FHjk2I61ByfxhKe5wz%2Ff84HiuqQGxW99TyFAaib4Yb%2Bcg3QzJmQ1TKn4s9uZ\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c25-2e1\"\r\ncf-ray: 9f2efaccea765fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":737,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (736)","md5":"6b2280ab020a9cfefa524bb176797471","sha1":"4c8d4590bde4e06731222a404d99ffecd13b5367","sha256":"418b859fb6c40173ebfa24bced69d4827282183a013d49636fb350f22d3e7a07","sha512":"e58a66831881b81223e6c8e4ef91db529e1d2f511166ceeabf3bf7029a1de834512e4c53cd3b6346f29dc5d51513c80a04374656d4abee543a75e2facdbdaf33","ssdeep":"","tlshash":"4d01107dd24871778626a0edd02f126593343b38ea2bc981b57f071744872c081659bd","first_seen":"2026-04-27T15:50:28.228772Z","last_seen":"2026-04-27T15:50:28.228772Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/list","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v31/earn/list HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 2\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad3cca9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a279ff192ade34f61dee360018c5af1","sha1":"7113b6b89d8645c149646fb8f03c6227022c0475","sha256":"79a627c72dce32dce884b5705a059591752bd67657c97882faa2dcc3313c4ab6","sha512":"cb79590f47ea6bbeadf9e7807c5b5f6f9c8d867a1d2c263c174229f308600b91d733eb2fbec1d3cace8b2ad5910b8e80f9a3ab9b6cf00592e8bb76fc9ede8b49","ssdeep":"","tlshash":"0711b70f7bfc993f1a0d1688029718e117d5191047da0cc7138df175310bbfba50529a","first_seen":"2026-04-27T15:50:28.397602Z","last_seen":"2026-04-27T15:50:28.397602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba3389.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba3389.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-a41\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7ATOtVtNP6n8Ty8aGwm4cNt887MSVYRSjsz7pEphM%2B%2FZ3ccD%2FL6kQDf8eqbskIW90u%2B7nvu%2BGjpU974TCFyDwM5efDulMH1%2BM1NLZJocsPv3uiGKud%2FU1CRbHcLaGeuccr1\"}]}\r\ncf-ray: 9f2efad52ba85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2625,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2624)","md5":"104398257955333e3c88786857d9c007","sha1":"b902c024bb55770e613dc3ad37c4747e853ca02f","sha256":"b28fbb3e3f0101c480558978378e52a94cf1547dbf151b9aac4d62a4a08fd217","sha512":"49738430a6a98cf2f999ce9ab1a2b540ca48a84b1f526e3252c21bea7be9d604125724bdcad454295b1c6514f629c1f212ec3a432d550e8b807d36251e793517","ssdeep":"","tlshash":"1b5176147731b1fc93b660f4219d58a2d9c83b89c6096ce8f3ab0e256335d70f309a75","first_seen":"2026-04-27T15:50:27.786839Z","last_seen":"2026-04-27T15:50:27.786839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338529.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338529.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2oOoKz3y5OJ%2BmgYLHiFn531k6CIIlrIScERGLqXlXnB0yd1lfk%2F2TJbScinK2URl8gYCu17TitSZbYmz7sKtgY4nqQbgFRelc5YLxMu7Yiw9ar0PBm%2BwI7lgazPpT7dMO3u\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c26-32c\"\r\ncf-ray: 9f2efad53bbc5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (811)","md5":"df6819f9e5c02cfa87691c33fd74f958","sha1":"ba02fb208cfc065c5beb1ad35a46c2f5889748dc","sha256":"8255fcf7e77338e3f30944a0a54092a4a4448a70ec32ad46aba9b4ae37571c90","sha512":"2a33e92a13470d3f18c29751c2509ea71aac84f9bf348bf6f26b737b07ece1cc35dd82772efc8d225b4b4f46b0f6645d9e587d5c17db6c8b7b0bf1a68c8261b3","ssdeep":"","tlshash":"7f01af204ba9e2fd92a30165264432133c407de8d288b89ef2e6060d6f91db4da55b69","first_seen":"2026-04-27T15:50:27.860084Z","last_seen":"2026-04-27T15:50:27.860084Z","times_seen":1,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338545.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338545.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wszQiaBZ2IhLVq4Ti0cr2uXBRw2OYwnLuteoAN3b1BNoXZeEnPHiNXsEZewGCddx8jPUqidcEUwgwogkfoJ0Pdxa6gGGUOLwrl7o5pzjRoqBvRWOdQXQmcSDV8KKSKXS5Jv\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-320\"\r\ncf-ray: 9f2efada0c1f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (799)","md5":"b891f6c692c62da8c048035327b8d594","sha1":"58e5e89a636864b31c1af9b29b5789fbb1564642","sha256":"7db9a2b88c575b6c51d4e3d0f65db24a704e3183e48153632f25380729304b58","sha512":"eb6c4996ba93afc48a9f378a1cec8cde17a48ffc2a84a1b4d9f45d11dfe7717dd3b44a2c78aae697d17c60ac965f25ec6f0984d344d591b7af73334187b57024","ssdeep":"","tlshash":"8f0141d2fb45553c47330008ab4ea0b92c813a71a94c78f0f22b0985aae0d7afb20707","first_seen":"2026-04-27T15:50:28.328954Z","last_seen":"2026-04-27T15:50:28.328954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/ef_289/favicon.ico","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:51.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /ef_289/favicon.ico HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oYpLC8%2BdNi5V4N3EOyO1NleesG812JG9%2BTKvs84dYatbZfgsTsxDTwOit98buoQjWkflTouaWGCqFYIghdQV%2B4S7KE0zbUpYQIEi%2BA32CAzC8aVDF7Yq0IMS91nKLF99znK\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:39 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c23-2ab1\"\r\ncf-ray: 9f2efac569905fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10929,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7ce1776bc2bce22ee8010dc9ff46e6b4","sha1":"8b7859ed0c5d1abd2ce03fbfbd385d79b67cd446","sha256":"08358e9fe18ca113e1457ec9ef8181d4e0c16b6161d828eff5d313fc85fd2ff9","sha512":"32b9b7c132961383021269bfb352d8e3fbf95e27c0c2c6de9353182b5b126985d68fd9804d09284dde2b44fda9c31e1dd9ae94aa98c94c36232aff1bbadd3419","ssdeep":"192:gRkaIu1irxQ+hESmpmhJG3izQKsdKAkHe8h2rFnqjOC1ncH3/d9BVHGz:9RXQxppAJG3xKsdK+8hyFUduPbmz","tlshash":"ff32bfd43ad7c9c5fc029b27a5bc518351d654e49e027c6c8e3627e57a9b2084326573","first_seen":"2026-04-27T15:50:28.402352Z","last_seen":"2026-04-27T15:50:28.402352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338655.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338655.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-393bf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NPPycSglZ%2BbQ%2FEINnZSDgrQjEtXSeFBwtNrIymrCvUVoJU2rl0zm2Hu7RJ5ItK4P8qEjeuAVjvPPSo5ipyfbpIaLzrH00RnttlbnIGEuIGY2E2uyvkslYtTC5x%2BYrZpb4C9\"}]}\r\ncf-ray: 9f2efac8fa0c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234431,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"a39402414dccd60ec4d3c51fd888b79c","sha1":"d034cc7f458b1402b443234bdbf76b3bf2024a86","sha256":"966bd9288ed490bfa6ea32275731e09ba06df31da0b5f5ef7bb39b6ff9a8de53","sha512":"158ce45f49d52eabb41336fe162aadc5a88bb9f0b161b5892977f3e1669def49e451f636d315a81d0c3ce2876dba3ce33834633bf13d241309427a14831e42b8","ssdeep":"6144:73yi5zW4kShmet71AtqTDBt7PmdDOLdnR9sHBba2QvN1biZI:7iCzW4kSDp1At8Bt7PmdDOLdnR9sHBbE","tlshash":"33342a81b262a3fdf3b2408d5029b105b29839adbac0cdd5f1ba9e571d57ce1126df23","first_seen":"2026-04-27T15:50:28.357972Z","last_seen":"2026-04-27T15:50:28.357972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v261/wallet/currency","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"OPTIONS /anon/v261/wallet/currency HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nReferer: https://etherfund.online/\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Auth,Token,Lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PX843q8ZTVnIIyHeVVpQMI8BpelYU2loUexmdu4%2FTR2z3K2B9xs2oZALpJXjKsNEwG0vXdwa5jkNlQSdl%2FUL2w4PiWBoMQ5OIVQIiLGARyCtUNKWcwMDhroImpFVp3tR5JFC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2efaca3bfd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":140,"dns":94,"connect":1,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherfund.cc/anon/v31/earn/address","fqdn":"api.etherfund.cc","domain":"etherfund.cc","tld":"cc"},"ip":{"addr":"104.21.48.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 06:09:31 GMT","end":"Wed, 17 Jun 2026 07:07:14 GMT"},"fingerprint":{"sha1":"A3:EB:DF:F6:83:49:C7:E6:85:16:67:77:C3:44:0A:DC:AE:BC:67:81","sha256":"A0:39:BD:2D:69:17:E5:BA:13:52:4C:8B:B8:6A:07:6E:96:C8:02:8D:3F:39:5F:44:F7:1A:DE:97:2A:4D:5B:6C"}}},"request":{"raw":"POST /anon/v31/earn/address HTTP/1.1\r\nHost: api.etherfund.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en_US\r\nContent-Length: 19\r\nOrigin: https://etherfund.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"network\":\"ERC20\"}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 869\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2efad3dcacc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9f7cda82219cbc8edd6e8b159e32d033","sha1":"81da47d9f51f3d67a405373f55b28e85f845cf5c","sha256":"36e47993f82961f3740c3eaffc3d09ceb1540f6fa7868eda8628d13443c86b9c","sha512":"ef4ec1835a7a3600251ffd9db512c2b93302cef2eb7fad9c40a3972ac2c8cc457a1b27f90d53c330193c1b64a45a21b36fd5331a7c7d7f9d10fa31d13f6c00de","ssdeep":"","tlshash":"1a11b70f7bfc9d3f0a0d1688029718e523e5295047e90cc6138df175310bbfea505296","first_seen":"2026-04-27T15:50:28.406229Z","last_seen":"2026-04-27T15:50:28.406229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338627.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338627.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1294\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbFIcZIaPtnCLS41vemhP6i93ZpNqpU4vIqJa6wmZ%2B%2FXgfQLsDHihnKX9UYwPxDxX1Qn%2BuQMiNjcHDgVfoNGPVdOjw2HIbX0cy0GJ1lwiN2v3XriLFDcnoe2mVf47ETrkM6n\"}]}\r\ncf-ray: 9f2efad52bab5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4755)","md5":"bbb4394b0c1757af43cf752dc3cc75b9","sha1":"1c0a30f6547f02070cbb70975f756cda892a3563","sha256":"9818e057c55a6cf1aad05ebedc6959d2ab4ebc2d2c6e53553fa187e2031cfd5b","sha512":"bcf5e7d3e9e7f19526aba8d0d25641509b4cdf42475f126179a8a79fa0fccc2bf47cc44960ac213f327c0447f6da464c252c6cb43ea4d6c68a12abec3f1d48ee","ssdeep":"96:pOFYwxuNrTnHxlbcPFWWOruFfLz2Ardiw53scLBVpchX7HE7kecV2MUCWt+v:JworTHxwVOmXriwNscvqxRbV2B+v","tlshash":"49a1b642f505953c933bb646c0a944c6a1ac1f94f00a84dde07f9c123bb69fddb97a36","first_seen":"2026-04-27T15:50:27.922728Z","last_seen":"2026-04-27T15:50:27.922728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33859.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33859.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-734\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHEEyzNWRM%2FWNtaTjp%2BPSB4SehmmOPALiE1PVwNhjiTXxt9WbDx%2B%2F0kGSB%2FFN7ZwtoEjNiXZXlkM9bAxJL4AWCX6EMKuYZiNntgFJgap9VC31wCvyGWYJ2gn2Vjr5PqeUCTY\"}]}\r\ncf-ray: 9f2efac95a275fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"6a69ccc18526b94d988598a4cf21061c","sha1":"34743a86c25cd23c13fcfd632f951e221eebdf14","sha256":"87d394c222de225899b13b553b0e1cef77afcff55bd2a3cc5719e4de9453d3ab","sha512":"4dd1c460d5d1b7171e855a14a9178131f1d5fe4f4f8d63dbfb3d46e9e01d9cdce47658485ec0859510d9e40777d1dc7ba0f0cb08b3ecd576ed5befb06547fca2","ssdeep":"","tlshash":"0f31102a290d2a08bd37e6623a646f88c0387541c40be2f2459b79360bbfdf67d5435c","first_seen":"2026-04-27T15:50:28.409993Z","last_seen":"2026-04-27T15:50:28.409993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338520.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338520.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-79b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjFJ1BK%2BEcLujdkFiRpd90j8SznzQ%2FKejS7brWXmLYnsjW3INxfOoHNQWT%2FprHJyAnpRvxpUx6Nl83e4xI6ZxCxNQNQmwZfXAcZIr1TDDZ%2Fx6mT0QHhfdjHqlqrNDKVF7SkM\"}]}\r\ncf-ray: 9f2efad8cc005fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1944)","md5":"f1580c338b13d0ddf99cb35f07a21826","sha1":"2ae8cc20c3ca087433a1795256b155b9dc53a0f8","sha256":"e341d3e7c4cde3558080df49e53feb72f28b573263b62497dbb10a8276846115","sha512":"8ca9eab10e38c6b9ddf68d9502f684c837c257610826a6ba415dcf855efbcd4d3e4f488e2a407d5bc349633760206d51f5522dde7263f838ba8874fa2a4ea154","ssdeep":"","tlshash":"4c413415e413867fbe6354413c1c44a4d4847eaec2087d52f3ba2c713a99d76a79d332","first_seen":"2026-04-27T15:50:28.075467Z","last_seen":"2026-04-27T15:50:28.075467Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338539.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338539.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-848\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrElQP9vroQStK9sA%2Fjz7Er0XgoL7XulPNJbiQ86c2PiqN6AEQoHJRmOG7SdVbr1M9w3rQIOInG4hqZN9BMZ5owFbPR4blsQvhTV9TSUOx73%2B69kl4iDLhbiIF5bZWkeHAgX\"}]}\r\ncf-ray: 9f2efad8cc015fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2119)","md5":"2190109237a357338d029776e3fb4091","sha1":"7ed21ce3ca74df98a7f5c8f504ad65e8c41bf3e7","sha256":"8f4a3c6f84e7b78d9ba23ae0642b6920aef28776222028586c0402b1d11211de","sha512":"043acdc66cac7beaa73ce24a1f6fca21e54403f6f4f5be6dde5b3cc151f144945ca7653170fd88deb92ec80260c1b4f994a37d0f9083d79b764674a83f5aac28","ssdeep":"","tlshash":"7841dd21bd02e27ee7b3485090190590215a7fe5f15c70eeb7ff0a655b92c39fb0aa36","first_seen":"2026-04-27T15:50:28.173286Z","last_seen":"2026-04-27T15:50:28.173286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338530.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338530.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-414\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36XUQ5ruxWkr3BqX0jAO6sjqa2NgDX9Ayzjmq0E2%2BAx9%2FDT9bintial2taJpE%2Be95YvHzZS3MOnhLNiGKOX%2BmcioaMhOP8L%2F8F3vLDQX3oUZNajJwR3Zb6uzxhQRucqF0ql8\"}]}\r\ncf-ray: 9f2efada0c1d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1043)","md5":"0cd4a9f69a25da5a8467fd14a69055d9","sha1":"be63a73c59343d0b8b75d0f75496ca39b8fdfb44","sha256":"454af7acddb08e531187d5ebf9b2075448da5902b6b87393a95ec790996673d0","sha512":"3075dfbf3577c1d313528fad9a79cb8f03ebbcf64fa9b02239530121c6a5cc2598a1ba25420e6ce73f503502fa96287fbcd37e96413ca1cd75273f821404c714","ssdeep":"","tlshash":"35113503677a9cfd57752148854400910844677ba3eda9d683b78c9d651353a9628722","first_seen":"2026-04-27T15:50:27.991268Z","last_seen":"2026-04-27T15:50:27.991268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338628.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338628.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-2f09\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8UCGXcLbLrRG0HkDqI10SLztQxlnFHlJxebYdhEuTmONRMM8jfEeZJqlTDnEsBWLUcdYyKqe058c86OJVLc2KxIMRrNClxUpSjD6RyLQdTYk4P1O9fFI7FXaT8br%2BYqUqyW\"}]}\r\ncf-ray: 9f2efada1c205fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12041,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12039)","md5":"1e22b9cb2e58e086aa5687dca98a16d3","sha1":"70964a67924f65e5f126d5a0ac5743f07cadd381","sha256":"3a7a3e14d92b34f6878a375fb261b4fc48f07c8cdd995c545aeba02a6e5cd6a0","sha512":"45c744a15f164aa6f506c965c8112de4a2bcec2a0a97c8345f679f0ab2f687c560b8f6f430439b8b9dbc246fad54482146cf66b79c3ea6cb21d576c23959a7d4","ssdeep":"192:HbSjffQhFPLh2TjNRbx2E1V8B7j73TQrbf6QpVHHftPMh50DgB4HxHKHxL3mpGBR:7SjfYrP4TjNR4E1V8B7j73TQrbf6QpRc","tlshash":"af4264107332af7cd2b371b61134544494982f9cc512cad9f1bf2a223b76cb56b987ba","first_seen":"2026-04-27T15:50:28.112368Z","last_seen":"2026-04-27T15:50:28.112368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338547.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338547.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7peH7T5Da292HsECF%2FRdw1RcUtxisyol0dpHM2Ignn%2B3vIYA0gsgu6qc7yu1xKdkv49k8iv9PSMLcNFT%2FRNGil7lzxJqsBeXkldOfA28pzAWBcZvfAeA%2BOY9X6SO70i9MqyF\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-165\"\r\ncf-ray: 9f2efada3c295fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (356)","md5":"bf6a81863ecc9bbee80722b549b18db4","sha1":"576f82748ca1eea37c980dbac869792c050a53f9","sha256":"034ecf8a40337ec1d55e96721321fb2b90a95deeb0902ac277aececcf2e690ce","sha512":"9429e1504d70e6f46c7a9dcd54c398f63c517025bb0e4ce47ef694a29c8b37a64dc67908ad53db7484928f7eef1a7b1881651cc4dacbd44eb99489efd89868be","ssdeep":"","tlshash":"1ce020d06fa756fb834459a46d4d517006087975638c70d6b193054496029e58b1e725","first_seen":"2026-04-27T15:50:28.24197Z","last_seen":"2026-04-27T15:50:28.24197Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33824.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33824.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRLT%2FqKsxcePpvSl95tkdXARivRitgxmV9WbKETHkrDDaAdl%2B94mREPlnGgMHMSsSCb%2BSJbeH46ATR3B9dXqYfMUaKOpOWWKpBNvPffOHakdWhfIjSwXGdB50kO1UrBzRHm8\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-393\"\r\ncf-ray: 9f2efad4bb865fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (914)","md5":"866c087acdb12587f2ff077fd09ccbae","sha1":"2ea314cc84561a1fa673c968c0ac9f658b415c19","sha256":"495ab333a3e3484d258e4905c9f8b5721096dea43a956ec61b83fdd3be4b6417","sha512":"efa3b05e5b222b4bd144db02c2a79de3b1a0ccb737f343a144ad06f1cf1e6534ec68be98d447f1a6f6ded4e811a61b34d6dec5b58d22cccc83e23c3e481beb42","ssdeep":"","tlshash":"fc11bda4f57a24350cb2b73978be079c0250a562cd52faec7ac09a1116e3ebc195e150","first_seen":"2026-04-27T15:50:28.414875Z","last_seen":"2026-04-27T15:50:28.414875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338523.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338523.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-5c8b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERLfIbg2lJ%2BAC9I4lyKJvGGd0gXKBXqwRx3H8owCEc50juRWed3TU2IT4GOaXooUesRGLfujApe8ZSAxy5dm0v0WYRQKrFzS%2FniIEOkhXcg4NfRFMuclNINeZKjg7pfzr4X%2F\"}]}\r\ncf-ray: 9f2efad52ba65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23690)","md5":"0aab90f9ffbbd4227beca004d37895a4","sha1":"62c3ea6ec826063ba224a7762020aaf1bb2d2908","sha256":"b3399f995a3bbc4fc997b187ef129c70ba71b8c3264dd87e89056fff490c52eb","sha512":"1cd4fae2b92a3ad7cabcd1d7d23758847fee6daef9d1d1edb825ff8f5f05d823bc94048bf76e0adc91130ecc63a7fb557222a60a84aa1b1f749f6301b6d91130","ssdeep":"384:mdR31ChFSs8jT9TboIMCZ15cbvjBCyPTAP7v9c2J55+/GHAdDwWsh/TrU9Kvl45N:m0SjT9TbocZ15iDcP7m2JfHcEDhIM4UI","tlshash":"9ab2faddb2d1b56a439725e9003f0409f2bea824341d55acea58d8c3bd78d7a81b7f2c","first_seen":"2026-04-27T15:50:28.176614Z","last_seen":"2026-04-27T15:50:28.176614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338536.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338536.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-8f9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8H3smOs1urgoXidI0dPlFusbdBlNNYewg5wh%2BkREFSyAnYR%2Fa73G2hmJx%2Fb8xAAjGb5WKsoNuT3068qssZZSfBJBjL%2FQ0EyvJ1xExGpmqsm10sUS529Nzft7sCCcEPZ10rWK\"}]}\r\ncf-ray: 9f2efad54bbf5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2297,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2296)","md5":"1a715f36bc4749c530625057161966a8","sha1":"295219c9314462855d73b70a91a9590a4b22a680","sha256":"931ce7b32c4685bff5c8e9d60b0763e9350529a3de8370bf1865a06ab1eb3f7f","sha512":"62c076fb09810789cf7090f820a3b17a2153bc4e6c1409be53b420caf1e5b187e6431caf3a9b2990c6a6c8e1df4f78fadd695763924b68388f464ab98ef1aaa1","ssdeep":"","tlshash":"4f414044b85998b9e7b0275420452d1d0b5cb262b3c968c493b75c710a92f7f93be771","first_seen":"2026-04-27T15:50:27.816637Z","last_seen":"2026-04-27T15:50:27.816637Z","times_seen":1,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338610.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338610.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-1896\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwQDM8ZAdo47LIMH5%2FyNzed6p0SgYqydonO81DAlEsYmjkE2J%2BpZ4Ijh3kj8LUqo76E%2FF%2FNfWv5YwTHvqqiWqyLRGgvYCizuD%2FvjMODqCcMF61aFTxvRomu%2FyZCjUbf7mS3u\"}]}\r\ncf-ray: 9f2efad55bc75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6293)","md5":"871904027ea2ff8b3930454d92652eea","sha1":"9020b4b56c0c48cc8ce8590a3ceba43050dbee49","sha256":"1288f65144f3917bdf403dcc24d7e73355aa7003762bd22c8cf7b0127f1edaf2","sha512":"ead52668adfdbe78dbfc1aaee0e2aa62a86c97fab347f50aec3b8efe49525efcc9db6a9acd5b91f081576af7ad8934960be074cf3a1a57e6adc3d86f52c2e2bc","ssdeep":"192:kxs17yozZ8nL0AcPBWMSa9ExfZDTZqKSJImlBnr:kxs9yZwBWMSWEZZ5IDr","tlshash":"5bd19710b213863dd77365d390198584908c2fe9e11688dfe0ff582216fedb6ab5477a","first_seen":"2026-04-27T15:50:27.830498Z","last_seen":"2026-04-27T15:50:27.830498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33812.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33812.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-532\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4kwQU71HHcHh8LUoZ6rO3qTXkqEBfbd5aqa4FJ8gy41dpyxHYLJLoqjd9C%2FLHPyXi4T0%2BfKhsHnUfMmsxbp7q3lnbh4GRVdsTiS4s%2FJPDtGn%2Bp%2BwGqFVgBksxRWtgtX%2BJ9x\"}]}\r\ncf-ray: 9f2efad78be45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1049)","md5":"87ecabe25d58b577f3397a57f6518047","sha1":"fa11af5dea26371519436c535ef4f70baee34f9b","sha256":"01477df3bac253116c4b340ca86704762965dec17dc93151140f1aacabe16307","sha512":"3ca717828db335458556918dfa2ecd043662af363b9879851c3826978cd698edeac0df2d49869b2088f4e4dd00274e082aa9ab78f6505fb1640658bd8665e524","ssdeep":"","tlshash":"ad21b83a37c039b827bd1cd40b1114b416ea3ba3649e94defd8a5f065278c94964b49a","first_seen":"2026-04-27T15:50:28.418802Z","last_seen":"2026-04-27T15:50:28.418802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":862,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33822.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33822.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-893\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzQ2fArawVRMAXdUO%2Fgp3AdLiXyfIOdNV64pc8fFpP%2FBo8r36Ot2XDi3DjojK7kTFCFxcibayIdNkNoCo0I0OWMhuJPC5EnRArsEpZjAqhsMv6W%2BGUIObafqpMaG3iS%2FcYS%2B\"}]}\r\ncf-ray: 9f2efac92a1f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2194)","md5":"eeb64f3a431ae94a6188d4196da862a8","sha1":"069a56595f593942dbec22658cfdd692ad836acc","sha256":"677e4b35f46caf1683503b66c0f28036dbb8a1a85be9a4682eeadcf13a2503a5","sha512":"43d9f8edc0e3a1ec9b2e86108a47d95be4d9b471a693c81e67d704d6f0c6e3c36682c2e85066b2b037a4e6997a46ece9a3c797da77c5f5551fd0d5ee49cc0685","ssdeep":"","tlshash":"ab412440a02397bcd7b321f2263d8449c4cebf5cc20699dab15f441331a6ce587e5b35","first_seen":"2026-04-27T15:50:27.783093Z","last_seen":"2026-04-27T15:50:27.783093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33818.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:53.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33818.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338657.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NspNHEaauclwqilomJv7wV09hNy%2BHqLNkL87b0G1gqZZBKFxH%2FlHkgduf%2F6KfHXClYfaoipKZZnRxK8PhsJRgG0epYMG2NnmU%2FmcsgsLbhy627CYXYgiG%2FbsIYTKQ4naq%2FzI\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69778c26-71\"\r\ncf-ray: 9f2eface8ab05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d29c4e39f7da6c382c91e4b9f8283a1a","sha1":"3bfb5c883fe62a5fe934e5be72bf527dec667f6c","sha256":"aa54d07681d5cea1662d7149f31b77c3a539fb40fc10274b61af1a28bd7b554b","sha512":"eaa2ddfd9eedd339f20342e9e1c4f99c4181f2a66bbec6dc775b0b8aa4b741eab44c7ff8c85c32d4c9fb2da96137218bce17bfa09103a202181cf69fc3d01fa4","ssdeep":"","tlshash":"b6b092c32cb1e2a24bb14582833584abfb05248c708b93a491a4036b7a1e6817ae0446","first_seen":"2026-04-27T15:50:27.96963Z","last_seen":"2026-04-27T15:50:27.96963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba33826.css","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:54.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba33826.css HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX6geXCls2bJEFh1sg8bLCVww6H3rqzTKi5dkl17RZ3Rs4QyU5SPLcQhpAC9s4i1xdfsA3R6lkW7wSGId9jLKjUWK5Qxy41LouiGgBWoHqvWNPsgyZeIj7rdxLF1OQmmmSAA\"}]}\r\nlast-modified: Mon, 26 Jan 2026 15:45:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69778c27-1f9\"\r\ncf-ray: 9f2efad4bb8b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (504)","md5":"09a097f75461645d96064bbc08741902","sha1":"d5562b8baa6577518c6caa054fc6a19ad2ab771e","sha256":"3269e72a798038ad42a9fe9aebe00f5da75cbbf806bc6117847b6b297360dfa0","sha512":"3530ab87009509ed81afef534f8513dc22c17ef587edd14ba2a2cee8873c24d8e8b110c558cfc74a223701b60366cd12fe60d0283884196053c7a20f54fcf066","ssdeep":"","tlshash":"12f050b0bd1910366d32e0b9a8940dc8db893740d4160155d693783547c66632b73675","first_seen":"2026-04-27T15:50:28.423577Z","last_seen":"2026-04-27T15:50:28.423577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338573.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338573.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-2f5f\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3pPxHrEbEOA7z0VAO6pONY3VMzDtM0yi7NlRbGFCNOvXTE6exlZkqRdmJyl%2BtsHHbTwOGPrAl9zE0HsLnvSwQA3m8US%2FZlpA2nTMXAJCPmSzilGqXY%2FXjXe%2FkfypQ6gCUxp\"}]}\r\ncf-ray: 9f2efaccca6b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12127,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12124)","md5":"477b9847168c7e2120e8587c031cef28","sha1":"77b49e0d510f3277c85904e463ebd441ec04f955","sha256":"78343c486774a840d6c7e45efb839fcbbb1f2190436828848fcabf44e451c6d4","sha512":"696b66087d62f9946566fd9572bd007d2e36e70204962a3cdc91deec4fda7525cedef2cf0a79d936fe9802113c73b400217bef0db2aac74ae001a3d72b7b7776","ssdeep":"192:9cHA0nBlgLWdgNMVpwyIwieYI9Fsc2hesJKzzm4qnnFEoy4FcepxG8LMcso:GbTq0CPOFsc2hesw6OhLg4+MA","tlshash":"54423f10b12bef3cd677b192641e099194982fadc11385d9e1bf2d210ba5cf9279c73e","first_seen":"2026-04-27T15:50:28.273457Z","last_seen":"2026-04-27T15:50:28.273457Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338157.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:51.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338157.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-9f5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sihSKUfnqqgwmRqGD43KVoc8W9zyca8t78ZLyuuXwBdnq14xpcgunaxntcvMbxhoGtIuucSn%2B7tTP5Z8OOWaHOqGSz73I3xv5qOQSSWjLQi%2F3DRkjK8ICdhK1PvYfeUHMLvO\"}]}\r\ncf-ray: 9f2efac2795c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2549,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2548)","md5":"4c620643c1e2b97806a2aac8b1b1dbd9","sha1":"cb7632f295bf7ba488f0d8c04f9177476251b300","sha256":"486fbc35f5e6a4964628a5b1f2bfbe18bcb2a562bd76ca3a903dae1a5a19743a","sha512":"36b7eb4b934cb38db969e02c9dd58dd2e86c2f217f07c3f421010d1b33345ecc4e2d4496969e8826f60c20b8e69bc45323e07013e94c9551ff0fa61dae7bf9b9","ssdeep":"","tlshash":"7b515416086959be9f011bf01a2222bdc73cad6d715284e89d4da70d1b376acf33f91d","first_seen":"2026-04-27T15:50:28.430703Z","last_seen":"2026-04-27T15:50:28.430703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338533.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338533.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://etherfund.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c26-d4e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWxwthGSxj%2B3SFIqc%2Ba9Lnfcxg6RODyqoZ3Hq4BlWDdZFoKw9Xnb2mYBqBGXH7pLlv1chk2SNy77RLVJnMTxNv1m2JwbNtxSGXRYA34OjD%2B3rrP%2FpOxaXHPuR7s2%2FlbHZ8Wv\"}]}\r\ncf-ray: 9f2efac91a1b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3405)","md5":"bf48d3c184062685d1486ecd312cb0e8","sha1":"cbe03c719ddcb77a87367f2a0506f505c370a0e7","sha256":"67e45b6efc4f2009dbd27dec85acf2dda38cc725463cbb80b149d072a671781d","sha512":"bee8ace520ce5b5398b04ff09fd24f7b30113ed5c0427634ea1b54e91ebe406d090d625f189893270db8eaa252035e19d2adc58866f06606951b62bf2ea88a90","ssdeep":"","tlshash":"c061248234e9ed79d71a5246625706b1b32d2390e12a99d4b02f5e19375fccca07fd2c","first_seen":"2026-04-27T15:50:27.862746Z","last_seen":"2026-04-27T15:50:27.862746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etherfund.online/assets/cdfba338609.js","fqdn":"etherfund.online","domain":"etherfund.online","tld":"online"},"ip":{"addr":"172.67.207.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etherfund.online/","date":"2026-04-27T15:49:52.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etherfund.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 08:42:20 GMT","end":"Wed, 17 Jun 2026 09:39:57 GMT"},"fingerprint":{"sha1":"B2:EE:DB:28:C7:E9:02:31:4E:16:21:7D:03:0A:C9:4A:F3:89:78:C1","sha256":"47:91:B6:7C:02:E9:20:AF:4B:42:48:0A:C3:18:04:F7:F9:06:14:81:E7:9C:43:5E:B0:4B:BD:4D:EF:0F:E2:67"}}},"request":{"raw":"GET /assets/cdfba338609.js HTTP/1.1\r\nHost: etherfund.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://etherfund.online/assets/cdfba338656.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 27 Apr 2026 15:49:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 15:45:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69778c25-9df\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGpdKpaL3f5HNVlZyhpDf%2F46pazx5qDz3Wo%2Fmi3wsTxrrs4qnQwPWDfyNl0VLYr%2FzYFuuC7%2FinIyKL6SP%2F9rxgX12OMEtI2VqJMsg1JODfiyN7%2Bvsuca0TaSYfVNBkBwnBwp\"}]}\r\ncf-ray: 9f2efaccda6f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2527,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2526)","md5":"5eb0b5623ed7a066aea4a3d604619fdf","sha1":"d0710866d210aa7201899b944fb15178f8d71d78","sha256":"5a1fcfbb763f81ebd6b695ed35b12bab6fb6144dd7b6e30302d2cf8815c76d6d","sha512":"790f91797908dd5f65a929bba0fbc0109a06c0d9f717fd55c317dfa3c795f6e56afc04111a4cf73fbfa08299f3bbff46d7260ed3b7e3ad43edb407192f67fc41","ssdeep":"","tlshash":"d65173e3b38f8129cbb500d899559b11160cea7024484df8e07ecf1226aed4fa246f98","first_seen":"2026-04-27T15:50:28.393672Z","last_seen":"2026-04-27T15:50:28.393672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"etherfund.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}