{"report_id":"7cf78ebd-bff9-4bae-b661-bd262c517bbb","version":6,"status":"done","tags":[],"date":"2025-10-22T11:07:54Z","url":{"schema":"http","addr":"ethyh.com","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"172.67.216.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethyh.com/home","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"title":"ETH 2.0"},"submit":{"url":{"schema":"http","addr":"ethyh.com","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"172.67.216.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T11:07:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"s0.static777.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethyh.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-06","domain_rank":0,"first_seen":"2025-10-22T11:07:55.718904Z","last_seen":"2025-10-22T11:07:55.718904Z","alert_count":50,"request_count":25,"received_data":878659,"sent_data":11057,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.4.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-19T22:16:36.069876Z","alert_count":0,"request_count":8,"received_data":1400274,"sent_data":3471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ethyh.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":26,"request_count":13,"received_data":13849,"sent_data":6540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"emdchk.xianshangkefu.net","ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"domain_registered":"2022-03-29","domain_rank":2362321,"first_seen":"2023-11-10T09:41:46Z","last_seen":"2025-10-22T11:07:06.403746Z","alert_count":0,"request_count":7,"received_data":278922,"sent_data":3972,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"domain_registered":"2020-11-24","domain_rank":0,"first_seen":"2025-08-26T01:11:49.573281Z","last_seen":"2025-10-18T02:40:46.726499Z","alert_count":0,"request_count":1,"received_data":2584,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s0.static777.top","ip":{"addr":"172.66.43.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-14","domain_rank":0,"first_seen":"2025-02-11T22:48:02.810147Z","last_seen":"2025-10-22T11:07:06.368383Z","alert_count":2,"request_count":2,"received_data":109359,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312543142","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9069ff4ccf585e168aea6fdafc4571be","sha1":"4064140b42817755ab9844ac8caef4176c1f8e03","sha256":"4455bfbc59beca5a1c8275fb856a02fcaf1d1545b824212ade4679086d67830e","sha512":"737cf1e1412396f179732aa28a96d96ba566541488c7434ebd8d30727877f0ecc69c1055bb099bac8a016d4f10544161316d9cc0a8b33bfb2a620b26c1a7d455","ssdeep":"","tlshash":"94c08c910c845a930a4922430c2a1a4bdff13aa48b0602e1ccaa000c8b606db6a62434","size":161,"data":"","first_seen":"2025-10-22T11:08:03.682479Z","last_seen":"2025-10-22T11:08:03.682479Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@4.16.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","size":642428,"data":"","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-08-01T10:10:12.199882Z","times_seen":2213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue-router@3.5.1/dist/vue-router.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78692f3f7f01d6d3cf761c9e240e196c","sha1":"2e136a9ff4abad9dd4d37a6e3b736c6df3d5e107","sha256":"799cce69728d5300816e2c6dc21ebd480805b45a864fad36f162d6d3530d3ca0","sha512":"739415b077f7dfa4e65a770fc92b0d2b69dc16256c3c458e8891831ff2deff953aab5854e85e41ef3880811c02a24c639aee0764191f5ac420fc3ffe5f7845c3","ssdeep":"384:gCErJV+oOim4GR7/q7f03bYP6Q11u8ZprWQrnS37puroAjahZ:gNDPGR/qR6QNRnQ7pVj","tlshash":"7ed2d7edb282b03547e326b1412f110ff13b699d744e8498f2aae4d46cbd94e8427f79","size":28963,"data":"","first_seen":"2023-03-09T21:27:22Z","last_seen":"2026-08-01T06:54:01.003122Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/psl@1.12.0/dist/psl.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"997cc2a850fe5c9377085a80d6fb14a3","sha1":"12e833ee28943694383139f61fe31f097ae2b08c","sha256":"bd1e5a263b7e2abe9b7fba4094219b515e07359f1a3bfce365c589dbfce9312e","sha512":"dd54591871ccc9fe1be24d4452d1bed392e568e4b415a0e5e0f90cea382f66145c511f7114a07b120a08956dfb383568f590f508e32522100033d6ce8f79dc10","ssdeep":"3072:Q9sCrdVTaV2qw8T2ZyMo3BV56u6tLf1ob2qgG/:Q9LdVeEqwZpo3l6u6fMRgG/","tlshash":"9df3930c89d996393ba822ed8cea2dce71fc202ae255c1f78ed9c9155b09f1530d5bdc","size":157794,"data":"","first_seen":"2024-11-12T14:56:36.910561Z","last_seen":"2026-08-01T06:59:44.749982Z","times_seen":1552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/chunk-vendors.25dac894.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d34bf2a20614d38f0084a627f329b60d","sha1":"a2cdf3055131aa724fe3eb12feff355b3e31c678","sha256":"7fcab54b78be15e4b7ebaaaaf67eaa6af2e43e2eb0632be023c22a1fa5359312","sha512":"b3254f4e01a046c7521d01ab08dfe18ce53e304279227fbf3c55eab5525c0d11d9d8a5ee33ddc01334b6586f0eec640573d7e6f5f31adf2b0377edfe8278a74e","ssdeep":"3072:13oFPJZafIZiPpQw02PEoZm+yF4yf7+MyHR:1GPJ8","tlshash":"59c3e989b6e270a107d3a0f4012f150bf23b652d644e94edf6a9d4e5acb884e517bf3c","size":127691,"data":"","first_seen":"2024-12-13T06:24:46.775824Z","last_seen":"2025-11-20T03:47:51.966547Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312596483","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ae0b1cd0f8bb516490cd04876bda63","sha1":"f7371656b00a03dc9ce0d094f4e4c1c864065af9","sha256":"c52a744ec30cbff75762586d260e5cc582a21171234bcf919827b43d6e3222b1","sha512":"a3f052d613fc5e5b2aa94ce4d8279f85094bfbe312cb0353e09db63e9196f9b325a945ffe101ddf127bce92ed7205327f12c8a8b1b43c9d641f076a6f10dc1db","ssdeep":"","tlshash":"3ac08ca10c841a830e4921820c6a1a56dff235b48b1a42e1ccaa410c8a106db76a2834","size":161,"data":"","first_seen":"2025-10-22T11:08:03.677582Z","last_seen":"2025-10-22T11:08:03.677582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312649564","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"07183e28295d34511a6fa3194b0ce63d","sha1":"14dd3420babca2e51c66d7f9d4600870e0950f3d","sha256":"b5d76bce5ee36edda8ff561398020bd66d04b92fd759a4be2ce76a1954bb5284","sha512":"cf5a7f5094aac314fabb136d0caedc00066960f79cdc3b59442f9efacf78b8bd16e3e71e7b87a6150b21ba2717fd3813919a5ec088cb869e2ed78d3a784d8968","ssdeep":"","tlshash":"81c08c920c945a430a4821420c2a5a42dff13aa48b0602f1c9aa400c8a50adba662424","size":161,"data":"","first_seen":"2025-10-22T11:08:03.651764Z","last_seen":"2025-10-22T11:08:03.651764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@2.6.14/dist/vue.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","size":94151,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-01T12:52:56.116455Z","times_seen":4822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59bfb519499d6852b37d8822601e99d8","sha1":"518141b1bd80b7e7abe69ffd536d5f3647490454","sha256":"0de4be59a1998ca4fcff319d76dffebe3de4275dec4a983e68c3095c8e96d55f","sha512":"fa1861bad19bc0a751b535cf8a2d67eb555b70066714eb71721b6bf811e6f5ab344779ed4d921fdf2802633943e1f733a49534302e622a01f80526e811cc7506","ssdeep":"","tlshash":"8ef08b1b104730141afb70a91f6bb938b9d1310ec2948213b88d4102af2656d1e21b4c","size":568,"data":"","first_seen":"2025-06-25T09:03:04.576852Z","last_seen":"2026-05-07T21:13:33.390196Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/app.ce57dae5.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb45b0902a8cfad4b4866cee378d67c1","sha1":"e2c77321af6d4d9bcabc676fa74bb28fea5888d6","sha256":"38cda60cd07f57296b9165ddcdb90932f2edfb3151afbba93a69e7b6ee6bb23f","sha512":"3554d5dce9014dac6872ba7a53a6aef095aed8e952dc6cc9ed6445352d97c5e80d5d63d1fbec75eb819f735c2537bb0289556ff2481d46260a4df0f03c18e059","ssdeep":"1536:awtQOoQUXUHztNbTghYR2nWlF7a+Q7SKHpHTo0CsC3iUzfbrO:awTTbTghYcO0+Q7SKHpHTo0CsIiUzm","tlshash":"9d934c6b314a397d04422640614f770b71bc24fab7ca88e609fccebd53e5249947af6e","size":97642,"data":"","first_seen":"2024-12-13T06:24:46.772235Z","last_seen":"2025-11-20T03:47:51.951709Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/845.78b22412.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ce345f47e642007cbe91fbaf743830","sha1":"e287a016605c02bc87b995964dff982d3771b9b3","sha256":"e307180f1e90b76f01c1dafea5083f82a36a2eb8043d5a297b48a8cbf585107e","sha512":"3ffe350c479aff0bcf96341c81a624ac1efd0938317160838b0d0c1bf0d7cc57cd3dff79daa780a087a542dd5e140ab8811ac36d4e549e0bea6d7a7ffa5db742","ssdeep":"768:c5nqYmA/6CmGmM0r/A6H9C42jZaGLPB5RxlRmaF9xTTMdLKrqn3iV3eNljHY/1:c5nq3A/6C6M0Tl9C4GfdXwTSVOLU/1","tlshash":"9c8319366023fd6de9490042420b56f155322fd7940a844a7b7cfab3e7ecd785f2e92a","size":82958,"data":"","first_seen":"2024-12-13T06:24:46.777659Z","last_seen":"2025-11-20T03:47:51.961285Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/743.ee354918.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74c065086068fe80e77af0a131d19f7f","sha1":"77e171bdb3682e38fd474f262793d9898e2178c2","sha256":"b01c63734307e690e709c1950a816bf0d57680ddf725d01417b727894b317f31","sha512":"2be77e10ce74a0b0bf22fa681f04f8b67348edcca931c6a10de31b73b6536630544b8f575460c633af26c31ca84fa0cc988f3467ecb4f625030d28fb622c96b4","ssdeep":"768:unt8TIQELzd7jXVy5m5l1X3EocE5A26bb9P3drcoXkgymX1M0NG2vP:untFi2X31yrdRyE","tlshash":"f7e2e8e532b2f1c622e328e141ff5446e23a6e45a80d11b5f6089af53cb1589627bf78","size":32593,"data":"","first_seen":"2024-12-13T06:24:46.768533Z","last_seen":"2025-11-20T03:47:51.960175Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/Web/JS/mivisit.js?_=t","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dedc5a14200e16603b65d862ffa525c5","sha1":"0161a1ba6e02495f19ecb1b625c876a7544b4d33","sha256":"a82c2a9b99c9ffb1c7dbf6c01e0e1a3b3ffbf3a8ab557ade3ada2edab5814e1b","sha512":"a486424a5546f4c341d64374ea4a31585612a83bf296c0114ff6724376537128407a71f4493d802468bba46b382d76e39e3f0aac84df2591910594f24a0bff8f","ssdeep":"3072:Fp0aHOmrBTJAgnzfk9l1guC0Z4XDmNfUc:n9umrBTJAgnzfk9lJqDmNfUc","tlshash":"304401e653e52ebd4d739604bd3b789cd8f92cd50a8b904ea223b848c63d6c543b1339","size":272689,"data":"","first_seen":"2025-10-22T11:07:23.771716Z","last_seen":"2025-11-04T18:50:21.15354Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vant@2.12.54/lib/vant.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"231e7da207135579d1f5d0b67e323603","sha1":"d3f243f859d20ad24f1eae1b0bcb3f68ea6e9930","sha256":"75ae82c69826c5b58b17c57d9c550dd5c6661b6e47516b9047a17b6e43353c48","sha512":"e6620cea06ee2b64ea4cc944644e24a4b80a31398088895f15a3eb1dd6396c0c897d58cdb535434eacaf6aa546833421ced80d0b7fde4202c44801367780eaf2","ssdeep":"3072:XuhzovpPNdJ+fzFgGxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIPm/yX/:+hzopCWTmRQBPSjyP","tlshash":"4054d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":279581,"data":"","first_seen":"2023-07-04T01:12:53Z","last_seen":"2026-07-30T20:35:08.081483Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vuex@3.6.2/dist/vuex.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9190541d2b0b2827d8f9a2b436ffdc3f","sha1":"77835f215674523c7c5a9c87e08091df61bfa965","sha256":"3efd92158a4c24f9995773fafede2577e1646f738152c03b807678b610583f3c","sha512":"4e4c70a3c7591194e68dee504fdba8742a9ed9719b65d05753cb82e27b2406dd24c11f7d027ce4cfc24248c0727e8aa32d31dc4ee201f1fb26103ddbf4b8e9de","ssdeep":"384:pqFo3eOU93AgQDieVEBItCD4TbJB3ka/N5Z1:XDiVDs9Z1","tlshash":"864283c8f9a5b02a0b673474613f060fe376a459200a8458f199e4df6c7e18ea56bf7c","size":12536,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-01T10:58:04.779891Z","times_seen":6011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312703065","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2d5f96b0b2e921be011e3284ac7401","sha1":"2a44181720ec7960229f46b85ff580200ac46089","sha256":"45f233cab413760428447e30ba2119a50ff22e00654d4b940bfcb4dc417b9862","sha512":"4e62b7014493dfa694935db2ac7412041f9b2bfd6045b94023306fde62e24ba9322897b1988959dc95dee9b2be45ea4b201a6e367ba7d089d39446adfe84a618","ssdeep":"","tlshash":"0ac08c914c9526830e4822520c2a5a62eff13ab88b0a02e0ccaa000c8b106da76a2428","size":161,"data":"","first_seen":"2025-10-22T11:08:03.683938Z","last_seen":"2025-10-22T11:08:03.683938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.4.0/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6470a918ba1fd4b8d0882df0269ddb82","sha1":"97814fdab64aa7d1b30f082f9eb272d4b1ce18a2","sha256":"fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e","sha512":"b8cb57985dbc03601bfc924edadfef62195a6bfdda8543a08f565fdbb339acea3cffe7dc4d4547d3f134965ebc9e39a3acba8e0635ccdd5f4d88f14be72c163d","ssdeep":"768:KCaQhyOsbrQ5NVtQehvP8KuzHxSCuWiOakq:iI5Jht8TrzRq","tlshash":"81e20ac9b6d1b072136771b5406f250bf33aa926a44d8890f120ecea7cb950e9727f7d","size":31842,"data":"","first_seen":"2023-04-28T01:15:05Z","last_seen":"2026-07-20T13:08:41.92684Z","times_seen":3017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0888dd904d21dd715c8eb5bbee059ca3","sha1":"66273071baaeb88a7625031fd64c92777f29de09","sha256":"a131eddf3a5a4232410d79fb180636d42b3bbfce933bb321b44035070a533e7c","sha512":"3c7c82c91e3b45fb0d1532c706b6ec0593848ae94aed1ee5cdd42407592ee9a5e7deccffc549c12703ea379f3ebe376515fab4a679c976e0198c00b4c743c149","ssdeep":"","tlshash":"35019c7e5ca98026eb53202a8a2f63c075a1311f4009f810f80dcb58af90e78b0c3fdd","size":802,"data":"","first_seen":"2025-06-28T22:02:21.990532Z","last_seen":"2025-11-20T03:47:51.968485Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?act=init\u0026cptid=076902353173\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026callback=jsonp17611312536100","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"24470af6ad75b6208a4df39fd2b32265","sha1":"15ef10930f3321b646d3f7ea5a4d6d935c0ebe98","sha256":"aa9231550864fbd3ce0b3aac6880e189fd952b7c3acebbf9d1dfa6daf32efd41","sha512":"f485f27e9b88b42095c48d8fb129b83cd906a91da97e057564e2d185b1138c45c08bd7713f101c13494e8646736fc9a63f1af551d805f30344011c292b8f3dd2","ssdeep":"","tlshash":"b411dc0c8eff7a155f0d91672c4faa8984ac3992adc80630dbbc68045ac4916b37484e","size":960,"data":"","first_seen":"2025-10-22T11:08:03.666825Z","last_seen":"2025-10-22T11:08:03.666825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?act=start\u0026accountid=150565\u0026visitorid=5406783455900767392\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026pagetitle=ETH%202.0\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=076902353173\u0026callback=jsonp17611312539571","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f82c6641606baf04c2ca5643fd4a5c51","sha1":"2eff4550667d3057bd40f11ca73066fcb48b643d","sha256":"580d5cd139e1d88d7ba26b97264c12eac4e4d8be73ff40137b4dc2a564661252","sha512":"e81e1fde9c718bbe38b2e25e2645f13ebb38b176c3eaec80e6be5d3c236376636249253a3c51b94d216fda24a4d9b44a8b95b1a4d205231c2c08e393933cfea1","ssdeep":"","tlshash":"0dd0a7910c4858d20e48e2426c6e9b4a8f7135b9cd0651d2d5fd78196a347a6e667830","size":242,"data":"","first_seen":"2025-10-22T11:08:03.670592Z","last_seen":"2025-10-22T11:08:03.670592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethyh.com/img/audit1.bf8a404a.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/audit1.bf8a404a.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9289\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2449\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfMt2XuRlJChJxOMFdNSMcAUhTQ%2B7WvABqYew8avXzxAqEBnQ3Cg7pyKmLl%2B%2BzUleWFcz4aP7TAndm9nbm%2B0sSwXggTs3UjqKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881d9a854e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9289,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 420x102, components 3","md5":"bd18e0cb2a8a57525a20eccae7c7a725","sha1":"f18149e75f972fc3db0cc7cf385a94ce842a3d26","sha256":"e5f72352935c86dcc18e93bce5e3cd4b01c6b58234e25b1529c18d5cc588ecd5","sha512":"8c287c5e834a38be5b9bdf146809e98a80041df22601f97b9aab734fbf398e7ec5c72d13d74444a602d0bbcefb15d838963b052cb8a02ba4dd76d1329d712bd1","ssdeep":"192:8UfgdyghtQGoSYIeZyCopPh5dKs/t0wRxxdyw2EFZAwOj1p:8D1LQGoSyZABdKsl0Ed3TEj1p","tlshash":"d2127d2787179393e41812eabc53b980bf2b877dedb1265e7432648b6c183b3489c51e","first_seen":"2023-05-23T14:38:53Z","last_seen":"2026-06-21T21:49:49.026201Z","times_seen":76,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/audit3.1db59c5e.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/audit3.1db59c5e.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 21617\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-5471\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cemrpOH4%2B1B4Xi9TNaEjtHzIHR9yFzomMpqQZkOxkz9Gv9SYsx1g3Twk3B5MwW5tUkjpoZe7zXFlZ6I7cY8gP%2Ble2PbW8ypD6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881d9a8b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 104, 8-bit/color RGB, non-interlaced","md5":"923dd58cbd681d8f687ccbf2501dc4e3","sha1":"a51b086783ff4a7d53dd171d851f756bbfe8fc8b","sha256":"ee6c54a6ad04e3344d2baca46050df6a6a10f279832eff98b56e68d80ab3adac","sha512":"789ff46746b83492e5f48b624dc50986b6f5806a487bb9ac8700667ef227839dd55d04f03aacb7e1669ed2495bf9f73ee5f1fb6fb9bbd1b0f15e995049548949","ssdeep":"384:397njCWXGhpOoh9P1r5vrZv/nBY7q7PD4MQp8R99iLI0G5hXDAl6bDxJLF5bFpY9:N7hhyFjZHn0ujQpIWc0VlsDXb/8dzn9r","tlshash":"10a2c12bdf13a5718540f1ade1f5b0ab893745c459568648b8ffce344db04ea8c0bac5","first_seen":"2023-05-23T14:38:53Z","last_seen":"2026-06-21T21:49:49.041867Z","times_seen":76,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@4.16.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/web3@4.16.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 160003\r\ncf-ray: 99288816ad8956ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.16.0\r\nx-jsd-version-type: version\r\netag: W/\"9cd7c-M9qpM1YeVfmYjiviVEgHj5fvDbI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230050-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 50\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DV1zNc2ulSvZSwWpqr9gjxQrv61HpVbMRSOFsvNME20JG7kXlKHHNIurqg%2BjosKvW%2BBCAYx8INnRKcJ441oeOd3bRRX9hZnTvjaTDp5iIS%2B%2FTE0P2S6Lm7Rj6ROSXLD7VIw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-08-01T10:10:12.199882Z","times_seen":2213,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":16,"dns":0,"connect":5,"send":0,"wait":18,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_8.7567af62.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_8.7567af62.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 13604\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-3524\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQhTFyoVDh9d8oIF9EFBFuvUk%2Bgh4jYRGyVDi%2B8F7KH5%2Fk2FTMzgo7kNp%2Bl3MaKYqsnv9Z2eLsURvLnybSQYrccdPu%2Bk5TOE1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dbaef4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13604,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"159729e179b61c5a45ce00350e9450ab","sha1":"9c6db500c0a745fdac3c8ed29f12a7ac77d80248","sha256":"54d063e549ab1be9c301e02b59e0a50abb8258952c471026089af10df9d6d583","sha512":"87565f68ce2b02b55932db8190e3e6542bfb27120624757e5a08f73787eb39ca09551bb285864f780710bbc7d052cbb33e69ebf1a614e8515935bd736866b01d","ssdeep":"384:dElfr+IVAw9E21+YXseHSWwneJw2hz+Y1Szm2CB:dE9ypwx1tdwne/0Y1SKdB","tlshash":"6652d04e790c80fbfe3759343bd63afa31639b2ad09790a92796b514315edcbd4a0b10","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.027543Z","times_seen":42,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_10.890da8b7.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_10.890da8b7.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9556\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2554\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWm%2Fr7WCC%2BjWjauyrAr4ecjzgBzWOLXrSD85zbswAp1WyuWbrdHj61%2B9EiScSOwY9g3Fd%2Ft3IKUPbBjsbQ8ivRrHidihPEOn8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dcb054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9556,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x399, components 3","md5":"fae1163ad0a7e11e826c2fb6d1eaf8b0","sha1":"030787839fe627cae1096c0b300d78a7c6ad577e","sha256":"4081bb9a0ef84950550faa52b44b9ade0a14ae7a63fcc53162fda958adbc8751","sha512":"f78b95b49013e93b394a4003af8ca42f5e53ae2b3afcac2ed231cb506e9a04190321d569fafa99fb170b53d991baa7b9947dd3cb3deddc79dfe2aa9306bb5168","ssdeep":"192:dEIQyakZl0tBEU5bjLlHm/dyIwUE4y/nk6rpoUwln94Ccbtqo4cq:dEhyBiB/bj5vU5EO9BcEo0","tlshash":"4212c0bae1a8cd47e81c25ba3fbdd17c0a991ab9e1a84d73ad9c5e01d0c01d33d24988","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.028061Z","times_seen":42,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/footer-bg.a2c49471.jpg","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/footer-bg.a2c49471.jpg HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/css/845.41de4eb6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 153566\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-257de\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFX%2FJvGCXC1CCO11EvgaP2jz9%2BZ4CoXuXSa2xJiJyC31TABmSGjhxRWPSp11XIDO0h%2FcMPjsR0mISItUcXqunrmutcO8H1Imbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881e6c754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1000x562, components 3","md5":"8d2fc284ad61f1c3df2fe6f27d789092","sha1":"7de107ab1289a594beb594a847075cb459b5b3e4","sha256":"6a65427436f07f1bb3dbb6383d0e0b4198ada6cf6c4117f569efabe5f4f8a408","sha512":"5fa34ca1fe53e71ea66015c21f579f32ace660db4fb90c4b00fa47c200a2750ac49d6a2eb7f3986f66a8cfd76d60fafb0a3ec384a8c5e0b9f4f1278beeb828c9","ssdeep":"3072:YQM4tjjY83DKPo+eFKGWSG1Tx7pYahsmweEnWk:YQN3e0FTCTBpYaJTEnv","tlshash":"8ce3120e9341be23e9e3133254e297e713387b852a8b765875cf59c2ab509bcfc4d909","first_seen":"2024-12-13T06:24:46.713891Z","last_seen":"2026-06-21T21:49:49.030285Z","times_seen":29,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getNotStakingMiningRate","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getNotStakingMiningRate HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3zDTVup9vt4W0U7IENmw7x%2BsVmut05%2BAusZpvjHux8zNYTvxYjY7GqX%2B0H1l8x3m4IcOB3pxF3zMDdRKJ18QZSlNFQB2AhT5TO0CYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881eddae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getLanguage","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getLanguage HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 245\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oY4dYzmuZhi6pTacU95SGsN1RZVQKYnA8c%2FZoGvqe8A383EissfTxmeh4srhCDVWvobv5bLsVKTmEEZrBaF6Wndyu0sE7zH0w0eSCJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f1e694e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1cb4acdca1c3bfd694cf2ce3ab85c59d","sha1":"b91affe35e6e0872c6a02f4d901db389442b40f7","sha256":"b42043b066f62364b5f36dafeff19d42c7692d00f6438c9b6acb4da443b3e818","sha512":"91d9d61b1abc51e063e67e2a55f8d3c5292566a17708e566b91ecc5ecc1c9bd3e98390936b1f1004d87398007500fe771892c8aeb25b3f51bdf92a7bb7894424","ssdeep":"","tlshash":"f7e0268b33f42cfbe75a3209a887152a26dc73a125c00c1941a5c364c284ed09d32037","first_seen":"2025-10-22T11:08:03.645304Z","last_seen":"2025-10-22T11:08:03.645304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.4.0/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/axios@1.4.0/dist/axios.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 12296\r\ncf-ray: 99288816ad7c56ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.4.0\r\nx-jsd-version-type: version\r\netag: W/\"7c62-l4FP2rZKp9GzDwgvnrJy1LHOGKI\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230063-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3704907\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qMFoPhmDohHhB8C6FgNgzwsdGAARi6EFxjX4AJFq9rvE1nBuCAYubH9h7Lonex3X7Ts3qLpVAenxunbjvqSMyLaNqV3YCNH8Ld6kKHXuu2ekcaI6vbGTqtPBXb%2FhsF8EiUo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31842,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31803)","md5":"6470a918ba1fd4b8d0882df0269ddb82","sha1":"97814fdab64aa7d1b30f082f9eb272d4b1ce18a2","sha256":"fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e","sha512":"b8cb57985dbc03601bfc924edadfef62195a6bfdda8543a08f565fdbb339acea3cffe7dc4d4547d3f134965ebc9e39a3acba8e0635ccdd5f4d88f14be72c163d","ssdeep":"768:KCaQhyOsbrQ5NVtQehvP8KuzHxSCuWiOakq:iI5Jht8TrzRq","tlshash":"81e20ac9b6d1b072136771b5406f250bf33aa926a44d8890f120ecea7cb950e9727f7d","first_seen":"2023-04-28T01:15:05Z","last_seen":"2026-07-20T13:08:41.92684Z","times_seen":3017,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":15,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/audit2.754bed6a.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/audit2.754bed6a.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 15355\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-3bfb\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmv2PHamXht9PfxZztL3WzRZknbo8UxEPNhychBRlhM3cptoxG%2F5zytAaHs3aI1Ru3oPOaZT2tQda6MGhMZucu3u%2FhpyfCNr4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881d9a874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 422 x 102, 8-bit/color RGB, non-interlaced","md5":"5f1b4aac068a9265dba6de91fb5640e4","sha1":"97aaccc1f1437beffe0c4408c254365ec07b6283","sha256":"0b66f80e0beaae7d3e59b92b8602980c6fd93a311507104c25bd8ad5af509b42","sha512":"51995249ad96692bf738214acf28264580480dc936803ae9679bcfbc8d5829cd87a577e78bf8d620f64ebc081a5afe8fdbb60d88ac53bfd9e45c3cb73a4731a9","ssdeep":"384:srX7n84AvstM8QHr6gz+WZQTJfyxqWUrgQygT:K7pM8Q+gz7ZIJfCUrek","tlshash":"c162b04f7b01ed40c22e3b153aca8117e27bba80a7d0c9e06cdede012d791565e913e7","first_seen":"2023-05-23T14:38:53Z","last_seen":"2026-06-21T21:49:49.033513Z","times_seen":76,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_1.d35b1769.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_1.d35b1769.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8308\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2074\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VT3zhQfDu9YatV6rUktohAGqY9wWiXSjotyAtL49Z2PPuJEA8lpwA9HmV1iukjBYp2goaKfeBcjtuI9MDm%2FLwfsPp4%2BhUzGZmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881daa9c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8308,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"acaee90143f33c3a3831bdc302291006","sha1":"0b92272005fc585fb45f329462d7f3374ff4c527","sha256":"de3038098f5d8575d938b8043f3fe49e9633bea7caf15190cf0fd475f9783c99","sha512":"3814bbcf5b9a5c35228b08c28e27eda7082692302e688689eb478901a154e0889f840727367cb8acb670436d296641b84ad3edda538c390881d8000f14a89f89","ssdeep":"192:UmuhNtIOQi2MLkRqku1Y2/Fo/9aguORErVuPKUGyOjqv2kc:LuhNRJv1Y/9aL/8yfMa","tlshash":"f6028e378b0e40accda98bfca1c915392700932fe518935651e36e5899373fb6d75e50","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.026731Z","times_seen":40,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getConfig","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getConfig HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFDOEsr0CJ0QDlr%2BPhZArM%2FIyNOR5QCNLzdfQiKYNlYROOlmpDByCP60kkZc7m4pcCAwiXA8K4IC4dFtng4G4vjNHURVV74qYGDuuro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881eddb44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/743.ee354918.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /js/743.ee354918.js HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-7f51\"\r\nexpires: Wed, 22 Oct 2025 23:07:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKXUNtMmOofVuoqAmyGXMaQf%2F5PuWkni90IG%2FV7JTJROHxK61%2F7MM1c5eBp%2FmBviuKpda12x0ad9DXd4swyCysygh7zKuC535w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881c2ed94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32552)","md5":"74c065086068fe80e77af0a131d19f7f","sha1":"77e171bdb3682e38fd474f262793d9898e2178c2","sha256":"b01c63734307e690e709c1950a816bf0d57680ddf725d01417b727894b317f31","sha512":"2be77e10ce74a0b0bf22fa681f04f8b67348edcca931c6a10de31b73b6536630544b8f575460c633af26c31ca84fa0cc988f3467ecb4f625030d28fb622c96b4","ssdeep":"768:unt8TIQELzd7jXVy5m5l1X3EocE5A26bb9P3drcoXkgymX1M0NG2vP:untFi2X31yrdRyE","tlshash":"f7e2e8e532b2f1c622e328e141ff5446e23a6e45a80d11b5f6089af53cb1589627bf78","first_seen":"2024-12-13T06:24:46.768533Z","last_seen":"2025-11-20T03:47:51.960175Z","times_seen":20,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/845.78b22412.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /js/845.78b22412.js HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-1440e\"\r\nexpires: Wed, 22 Oct 2025 23:07:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVT7eJZgJ9AePzlkqtjrZ21gI372zlYeCNI56UKkV0xXotSG0OIM8cH8LhNe%2BuJi7gNYC1jqVvl2jTUChh%2FCOQeBoaJUtId1tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881c2ef34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65476), with no line terminators","md5":"11ce345f47e642007cbe91fbaf743830","sha1":"e287a016605c02bc87b995964dff982d3771b9b3","sha256":"e307180f1e90b76f01c1dafea5083f82a36a2eb8043d5a297b48a8cbf585107e","sha512":"3ffe350c479aff0bcf96341c81a624ac1efd0938317160838b0d0c1bf0d7cc57cd3dff79daa780a087a542dd5e140ab8811ac36d4e549e0bea6d7a7ffa5db742","ssdeep":"768:c5nqYmA/6CmGmM0r/A6H9C42jZaGLPB5RxlRmaF9xTTMdLKrqn3iV3eNljHY/1:c5nq3A/6C6M0Tl9C4GfdXwTSVOLU/1","tlshash":"9c8319366023fd6de9490042420b56f155322fd7940a844a7b7cfab3e7ecd785f2e92a","first_seen":"2024-12-13T06:24:46.777659Z","last_seen":"2025-11-20T03:47:51.961285Z","times_seen":20,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_12.3375c405.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_12.3375c405.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 10312\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2848\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vVfBI7MV3oaGhzgTMy0PLBU2ncNf8OY6cn3ZYdhZHtCdGus8McAfX6yPEXXGrKW59TOyUY8RKCtf3eZ0o3PswJmN8993XHwLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881ddb274e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10312,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d84fe14a144636242eac951dcb7f74f3","sha1":"f37ff13cf09c76765d90805a7ec10ad785d71a31","sha256":"9e9a2388c83889bd290f5deed4a14304373baa3fa0703959cba3bd11e09bc957","sha512":"b2cf4b71ce2209d3e44cdd57cf1b58860a12e12f467dd2ce4169830e5eaf0b298ccada58c21b35d19b48b8ae4547336e1f4858c891cd41ce164c16c85ad8ab2a","ssdeep":"192:dEM/UNaodi3yS/6hkmUDhrOSYBnUrErk70SX5OuuAoGthoIm23rHpWpS8:dEM/Aacb1U1rOHnUr0k/UuuA0Wopf","tlshash":"bc22be0bb7a4d884e8a885731a26345206fc5f28d4ba834470bd229c6b37fd6f6884c4","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.023711Z","times_seen":42,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/share_bg.0872800e.jpg","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/share_bg.0872800e.jpg HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 130278\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-1fce6\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lj23DiFl3pwYGKEqjRxmIw93RtKu4uWjYybrvgK9U9%2Byn2CdLhAR980GNuteTnxY0dIMiXPuhM3uZwUP7%2FgXxBK%2FJxfnUBQhdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881e4c284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130278,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 764x457, components 3","md5":"a562555b6e62b9c2c6b938f7c68ed23f","sha1":"a020b909164983ef99b8b705159f7b43ad59d2cb","sha256":"ca66d7259ad270ed83ea60da08a8fb5488bfbb38d8276a44cbc4dc4b01b250c3","sha512":"c874be9a63de3ad412b3e734927a58681bc0fbad82f7eb6a51236787310c0875a85d71adfa3ecf238df11a50c15fb5d4c52b31aaf3722fc40fd856e85accd881","ssdeep":"3072:HKxV0ZxlAYWpF3pN9h4bFR41LA53ymqmuwKnB5iu5n:qSepF3D4bF+83puwKKu9","tlshash":"83d3f1fc1851ff7c7f908be5248edb3c4e285ab61d7ee00d7a6e080d5b9148a5298d4b","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.009457Z","times_seen":40,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312649564","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:44.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312649564 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Oct 2025 11:07:45 GMT\r\nset-cookie: tgw_l7_route=c9e19a811bf1017581da594c7514d6ce; Expires=Wed, 22-Oct-2025 11:08:15 GMT; Path=/; sameSite=Lax\r\nx-powered-by: ASP.NET\r\nvia: n62-251-092.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1761131264f789a2c5cd699a57341a07130690e5d7\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=77, edge;dur=236, cdn-cache;desc=MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"07183e28295d34511a6fa3194b0ce63d","sha1":"14dd3420babca2e51c66d7f9d4600870e0950f3d","sha256":"b5d76bce5ee36edda8ff561398020bd66d04b92fd759a4be2ce76a1954bb5284","sha512":"cf5a7f5094aac314fabb136d0caedc00066960f79cdc3b59442f9efacf78b8bd16e3e71e7b87a6150b21ba2717fd3813919a5ec088cb869e2ed78d3a784d8968","ssdeep":"","tlshash":"81c08c920c945a430a4821420c2a5a42dff13aa48b0602f1c9aa400c8a50adba662424","first_seen":"2025-10-22T11:08:03.651764Z","last_seen":"2025-10-22T11:08:03.651764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vant@2.12.54/lib/vant.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/vant@2.12.54/lib/vant.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 82015\r\ncf-ray: 99288816ad7f56ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.12.54\r\nx-jsd-version-type: version\r\netag: W/\"4441d-0/JD+FnSCtJPHq4bC8s/aOpumTA\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 394908\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S%2BRYK6gZcOBU1NJCDVogviuCr24k1SlUAP0WJYIxzjnGhzRiGs9DlpCO8Ce7EoFvneAQivNu2gRurNdLJ9EyOqH%2FCqKHeEbkHyZEsKbN1IjlGRytkyyL%2F2YGMNeeq40U45w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279581,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57301)","md5":"231e7da207135579d1f5d0b67e323603","sha1":"d3f243f859d20ad24f1eae1b0bcb3f68ea6e9930","sha256":"75ae82c69826c5b58b17c57d9c550dd5c6661b6e47516b9047a17b6e43353c48","sha512":"e6620cea06ee2b64ea4cc944644e24a4b80a31398088895f15a3eb1dd6396c0c897d58cdb535434eacaf6aa546833421ced80d0b7fde4202c44801367780eaf2","ssdeep":"3072:XuhzovpPNdJ+fzFgGxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIPm/yX/:+hzopCWTmRQBPSjyP","tlshash":"4054d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2023-07-04T01:12:53Z","last_seen":"2026-07-30T20:35:08.081483Z","times_seen":146,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/Web/JS/mivisit.js?_=t","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /Web/JS/mivisit.js?_=t HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nage: 21880\r\netag: W/\"1dc422fb285a831\"\r\nlast-modified: Tue, 21 Oct 2025 02:09:14 GMT\r\norl-via: cache.n104-166-141-012.bdcdn-defra02\r\nx-bdsa-cache-status: HIT\r\nx-dsa-origin-status: 304\r\nx-powered-by: ASP.NET\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\nvia: n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 176113125371c169ab00965f4fece62cce18fb87c6\r\nserver-timing: cdn-cache;desc=HIT, origin;dur=0, edge;dur=1\r\nx-kfc-resptime: 1761109374-21880\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":272689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dedc5a14200e16603b65d862ffa525c5","sha1":"0161a1ba6e02495f19ecb1b625c876a7544b4d33","sha256":"a82c2a9b99c9ffb1c7dbf6c01e0e1a3b3ffbf3a8ab557ade3ada2edab5814e1b","sha512":"a486424a5546f4c341d64374ea4a31585612a83bf296c0114ff6724376537128407a71f4493d802468bba46b382d76e39e3f0aac84df2591910594f24a0bff8f","ssdeep":"3072:Fp0aHOmrBTJAgnzfk9l1guC0Z4XDmNfUc:n9umrBTJAgnzfk9lJqDmNfUc","tlshash":"304401e653e52ebd4d739604bd3b789cd8f92cd50a8b904ea223b848c63d6c543b1339","first_seen":"2025-10-22T11:07:23.771716Z","last_seen":"2025-11-04T18:50:21.15354Z","times_seen":66,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":189,"dns":1,"connect":26,"send":0,"wait":30,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/css/app.0471e0ef.css","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /css/app.0471e0ef.css HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-2781\"\r\nexpires: Wed, 22 Oct 2025 23:07:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJcKvsOotDDK3siYKYdLJO8bG4d7Hq7JZyihBHQdM%2FFLfkjEqAN407bcanay%2BSVIsohUL%2BO1CHdAh8t6M%2BXPhFpy1EK6q%2FmE9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99288816ae8a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10113), with no line terminators","md5":"2d93937dd0897bd93a35758a164ad03f","sha1":"3b15dc509b0c69871fa395fd2319aadf31c8ba1b","sha256":"5aefcb52b783c8fc37b18c01483a36c22d19917f81e97eefea10c71a0c7c97e6","sha512":"bf4257fe389900b214a32d8502194e2c2bc03e8067856c0ffd0ab536145e7a34c1cd9694e5f8a9a78694027c0368344e4235d6fafae623486a4e22d5f47f064c","ssdeep":"96:g0/PwV9Fi67JD31Mxb1pJYE8c553f0f5igudpKx4uX:P/+9Fi67JDlkpJYTcn3M8guE4a","tlshash":"f1229d53e71d38f5e02bcc552ce19a9b5194e647d717faa9fb01213ecac36c2296060b","first_seen":"2025-01-06T07:55:42.38141Z","last_seen":"2026-06-21T21:49:49.046371Z","times_seen":27,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_3.0f2bad64.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_3.0f2bad64.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11040\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2b20\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sCkTn3ZVFW8DvCInBdCXnopdQNtO8E69D5OrqVPs2lTlz1NQ1r3Ssg%2BhX62EHO9QgdgkANWGBtSur0bBB2%2ByUPQGX2bTSQMig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881daaae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"f88e74a7cb62797c4b97d00be23ab219","sha1":"1879aa50a9fd71b75ed764cf5678baf112f3060c","sha256":"d797127963750d6b36199aafc27685606cc34cdc346649e0e912c1c99e38b010","sha512":"15982d24bb16b8bbebaf59fcef1de718148cdd1b5cb818b98f0e0822c79a56e39251c3999e8f88f064218a3502b5d0c3d242a773738ba55b0b644b7dd14583ec","ssdeep":"192:UI3hwQnEAlbzg6EEDUNKVfXMgV3VRGFgA9Qe0+IhXS8F6B2L863Rj:7NEAee3XMgV3VoFLm8IhZyD6p","tlshash":"2932bfad124447c6ef26877795784827afc7a620fe94f14351c60caceb78b858d21b7c","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.036467Z","times_seen":39,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getDepositConfig","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getDepositConfig HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 119\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaUsZpQLRAkyXdPh%2FeoleM0KEJ%2FunFvw3eup%2FToLDTHvgwBBgMaueLsUEweSKHSli6FRXzm48Xix8j4w0ZbC17%2FF105Oa%2FtAbQHB8pg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f6f7d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f966edafcab0bac733bfb08e907205f","sha1":"b0f19f5d6883d2aa5b57f41c982c620d0ac4bfc1","sha256":"eacb5f2fea60ebf178506c86b489bbf5af9d465bd5a24b6fbe4ee61e861a7297","sha512":"1a13aa24f705d32d4752c48bb45c3dc0ac2b8e1c4ef9d947522ee23a10a3b6ca977fc13b7f039af35276153816db0e8ff50e2e2af9f607842bc4d3704263b33d","ssdeep":"","tlshash":"fcb092432b146ca0ef22604a7a2a9a5154eab292e7510073969d426deb506f0225352e","first_seen":"2025-10-22T11:08:03.656447Z","last_seen":"2025-10-22T11:08:03.656447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@2.6.14/dist/vue.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/vue@2.6.14/dist/vue.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 35858\r\ncf-ray: 99288816bd8d56ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.6.14\r\nx-jsd-version-type: version\r\netag: W/\"16fc7-2o16WfTmzFXqWKvsM++c67m6Z8E\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220088-FRA, cache-lga21929-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2266771\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=icLs5VvEYDTAD2gb1tskLu%2FBtCd9pVGS%2BlCemVFl9NifqrDgeT%2Bx9t%2BzWMZAAve8rYHSc0S2LcGsAC9os5aLRguHiSJEmber3SQYNV%2BE%2BujAhQoSbAvZh8H0zWQp%2F0w68Ho%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-01T12:52:56.116455Z","times_seen":4822,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":13,"dns":3,"connect":1,"send":0,"wait":21,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vuex@3.6.2/dist/vuex.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/vuex@3.6.2/dist/vuex.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3952\r\ncf-ray: 99288816bd9056ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.6.2\r\nx-jsd-version-type: version\r\netag: W/\"30f8-d4NfIVZ0Ujx8WpyH4ICR32G/qWU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 429908\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6oF3mUhhTmVhmiADIAmh%2Bxpbh5loRbeoKRhYiUsv6k%2FFveVqXUad8%2FHI%2FB6eFa%2BmU2e3KdEHs32juBuojWBgV%2BWbbayaB6ul1brHPRrYs4vI3Y7pnQRdCFlrCyt5I3mGWts%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12536,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12467)","md5":"9190541d2b0b2827d8f9a2b436ffdc3f","sha1":"77835f215674523c7c5a9c87e08091df61bfa965","sha256":"3efd92158a4c24f9995773fafede2577e1646f738152c03b807678b610583f3c","sha512":"4e4c70a3c7591194e68dee504fdba8742a9ed9719b65d05753cb82e27b2406dd24c11f7d027ce4cfc24248c0727e8aa32d31dc4ee201f1fb26103ddbf4b8e9de","ssdeep":"384:pqFo3eOU93AgQDieVEBItCD4TbJB3ka/N5Z1:XDiVDs9Z1","tlshash":"864283c8f9a5b02a0b673474613f060fe376a459200a8458f199e4df6c7e18ea56bf7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-01T10:58:04.779891Z","times_seen":6011,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":11,"dns":3,"connect":5,"send":0,"wait":22,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/psl@1.12.0/dist/psl.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/psl@1.12.0/dist/psl.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 43837\r\ncf-ray: 99288816ad8156ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.12.0\r\nx-jsd-version-type: version\r\netag: W/\"26862-Eugz7iiUNpQ4MTn2H+MfCXrisIw\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230041-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3703892\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n17V94E0ziBjrDx6RREPezFdQ4bKjwzcwBySUSlY4jZNIzRCBDNRrjBLd7cO1PQABXVMmOenDS71REZYh3MTObOdKuOI%2F3G7dfbZZ53MSiGPF7XJITrZSE%2BWCroLxv3Nmbo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157794,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65003), with no line terminators","md5":"997cc2a850fe5c9377085a80d6fb14a3","sha1":"12e833ee28943694383139f61fe31f097ae2b08c","sha256":"bd1e5a263b7e2abe9b7fba4094219b515e07359f1a3bfce365c589dbfce9312e","sha512":"dd54591871ccc9fe1be24d4452d1bed392e568e4b415a0e5e0f90cea382f66145c511f7114a07b120a08956dfb383568f590f508e32522100033d6ce8f79dc10","ssdeep":"3072:Q9sCrdVTaV2qw8T2ZyMo3BV56u6tLf1ob2qgG/:Q9LdVeEqwZpo3l6u6fMRgG/","tlshash":"9df3930c89d996393ba822ed8cea2dce71fc202ae255c1f78ed9c9155b09f1530d5bdc","first_seen":"2024-11-12T14:56:36.910561Z","last_seen":"2026-08-01T06:59:44.749982Z","times_seen":1552,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_6.b4d0c0cb.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_6.b4d0c0cb.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 36694\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-8f56\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrPFGW%2FThC00ZXAJQ4%2BVWrUeuPIiZzl1P13HBWspMwwyPK0hQ5%2BD4Kxb4O1JABJd07KmcqhkHcNl18T1bEgkhgqkzKQJakmOKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dbadb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"80c78b9619cf75dfadfab2e69a47b926","sha1":"4e5f0e887776539f043f153f8f576ac23b607695","sha256":"f30c96654abd3a7a552151844ce7adda6965c62a2742a019d63f901f9a008bc7","sha512":"cbb4219c58a4518a98231d0bf09ae490f2b580ebaeb1476bfe9909f750f918a285f33a090c683e126043cc43418aaa7f0c0ecd429cbb7e0d1c1987131ed2909e","ssdeep":"768:fzLqCCgwj4+TH6RthrnzNDcZQjuBoXWKz4wWQa+z3E8H:vHBt++RPrnzNKBoXl4wWQLz3N","tlshash":"b7f2024077a6fcb4d84260bbf8739826a2806a176b421c9767e57f4fe482c5643b25bc","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.052336Z","times_seen":40,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdkqybhkbstatic-1.tos-accelerate.volces.com/Web/images/float/desktop/online5.png","fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","domain":"volces.com","tld":"com"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:34.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tos-accelerate.volces.com","organization":"北京火山引擎科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 05:26:01 GMT","end":"Wed, 11 Mar 2026 05:26:00 GMT"},"fingerprint":{"sha1":"86:0F:E7:EE:E2:6E:FE:4F:57:2E:8D:3C:E2:D9:A0:18:F4:4E:ED:76","sha256":"47:A8:66:9F:B9:22:12:AA:AF:EC:5A:3A:93:9D:61:E4:58:C5:71:8E:E9:2F:9E:DD:31:C3:D2:DA:FF:A6:8E:B3"}}},"request":{"raw":"GET /Web/images/float/desktop/online5.png HTTP/1.1\r\nHost: mdkqybhkbstatic-1.tos-accelerate.volces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: volc-dcdn\r\nContent-Type: image/png\r\nContent-Length: 1719\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nDate: Wed, 22 Oct 2025 11:07:34 GMT\r\nETag: \"fd3d68c894f4a9c8105f68cae553ff92\"\r\nLast-Modified: Wed, 20 Aug 2025 16:17:05 GMT\r\nx-tos-create-time: Wed, 20 Aug 2025 16:17:05 GMT\r\nx-tos-hash-crc64ecma: 13652737874050280405\r\nx-tos-id-2: 9c0d01f8baf6011568f8baf6-bd09434-1vBWgo-GO-ch-tos-1az-front-aza-1\r\nx-tos-request-id: 9c0d01f8baf6011568f8baf6-bd09434-1vBWgo-GO-ch-tos-1az-front-aza-1\r\nx-tos-server-time: 2\r\nx-tos-storage-class: STANDARD\r\nvia: n156-059-198-184.bdcdn-cnhk03.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 176113125444330501788f2ab4a26d81ca14949d66\r\nX-Dsa-Origin-Status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=14, edge;dur=598, cdn-cache;desc=MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"fd3d68c894f4a9c8105f68cae553ff92","sha1":"2c39d548bb4c941ea35b2d875f7f8ea8bca6b4e6","sha256":"12c3b7279daae933a1cc6846fc4c75b82e478cb346ed7379c9f9769897cb8f47","sha512":"13838c65340c4156201d5921b548b4817aa8429e058f7777458b0468959bad1f7d803f2c407b7950c7026954405273c73da751fe03c9aea598da2e3029889c90","ssdeep":"","tlshash":"c431ba0ba4037c415565e58964fa3293be134bc3c495fca5fc9a895b18602b94c5a7c7","first_seen":"2024-07-10T18:37:16Z","last_seen":"2026-06-03T19:51:57.991354Z","times_seen":89,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":130,"dns":1,"connect":25,"send":0,"wait":638,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/chunk-vendors.25dac894.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /js/chunk-vendors.25dac894.js HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-1f2cb\"\r\nexpires: Wed, 22 Oct 2025 23:07:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbbB%2BPj9zvDLhRioYa9tfXzG8QuyRvGIy5lEY3VlFNYh%2BsCXsa9dbCNErSV4MrBQPi05mEjKbINUsusPAehogABqgFjrmMYfyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 992888169e634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53384)","md5":"d34bf2a20614d38f0084a627f329b60d","sha1":"a2cdf3055131aa724fe3eb12feff355b3e31c678","sha256":"7fcab54b78be15e4b7ebaaaaf67eaa6af2e43e2eb0632be023c22a1fa5359312","sha512":"b3254f4e01a046c7521d01ab08dfe18ce53e304279227fbf3c55eab5525c0d11d9d8a5ee33ddc01334b6586f0eec640573d7e6f5f31adf2b0377edfe8278a74e","ssdeep":"3072:13oFPJZafIZiPpQw02PEoZm+yF4yf7+MyHR:1GPJ8","tlshash":"59c3e989b6e270a107d3a0f4012f150bf23b652d644e94edf6a9d4e5acb884e517bf3c","first_seen":"2024-12-13T06:24:46.775824Z","last_seen":"2025-11-20T03:47:51.966547Z","times_seen":20,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/css/845.41de4eb6.css","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /css/845.41de4eb6.css HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-5749\"\r\nexpires: Wed, 22 Oct 2025 23:07:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7SoKViqXQuJB0aZ46%2Bw39agH%2Btx4AnpahHz03Csrnlkq0rOPnCOJdcBWdFnhyacEThAQK5RMGtk6hTovhO86bUQr6tG8RzqkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881c2eec4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22345), with no line terminators","md5":"660df6ee1c16081c5056708e0c80eaa5","sha1":"9cac5d91bb685231a71126b750b2e0b653c91527","sha256":"23deb2ed8e566953480d040c3c4a1284c887609abd42274f84ba4fbfb2604a47","sha512":"b4cec6430f5f24e794e26eed1312e765c7fca3cd49464b7df70a0d43c182a004ee464e7b0a78a17418140d7d7d3f24f9ac9f6a2cffc33696197b398ea81a826f","ssdeep":"192:TiUDHk980tGRDa7Pqg2GeJ/fCQZ4aiEucYa4LLnPkcihU0:nHW8DamgteJrudxPkZ","tlshash":"8ea20152273b243de5bbc51e7561e14f692cfe43e202aad9f9349472ced3ac231a1907","first_seen":"2025-06-28T22:02:21.982636Z","last_seen":"2025-11-20T03:47:51.960672Z","times_seen":17,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_14.b3d81adc.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_14.b3d81adc.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8359\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-20a7\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRs2Wdb9GsFVuIuzT0JUTrsHFpFOlYpCYLJwBN1D3vvgP0rH%2BboSjiXMSoVOKk1z6Tkzvd4uRUtZ8dAOaP8geK5MpYDRtKLWsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881ddb324e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"2559c58e65906200aab221dc8c48325f","sha1":"3a39c4b138030eb95f6aded750d538be2dcdef2f","sha256":"2b157ad1a4aa50c3b4beb526202c1669ecafdb02b7d7c8133a2c5f9ee09dc4b7","sha512":"0e23d71e35291bfebf71d791f7c21553362d226dd2a754ac5e8a0b3e9bf9649c6cf6e555bdd4c69e9812fa4e657b2b47184833eed32e00d89919b91850c94f8e","ssdeep":"192:MyAgEBDQCYhUM8O5sZa3KD3vKSW43dD7IJkg:MyAgE9QCYh88Ga6D/KS1do+g","tlshash":"3902ae225afa5a12bd0709bf9a4f15ce9b1fb30528a14cc67136b2bfc2c51ad4a643d1","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.01735Z","times_seen":40,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getService","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getService HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrCKxftHVfjlviAqptWORvdD1S8X8niJ8Ly%2F8m3CzHA%2FIDjSpOSGu3VXkqgKvgzBPLPFYceQJWz6wd4CndlzFe9KS%2BSfo9bqZJ0Nnx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881eddb14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getDepositConfig","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getDepositConfig HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRdiYz%2BQLb5rueShdAfHPHirCkXSMHnBIy1Yl4SJQ7bb73y%2BmkDBlXOFvQEDYimzyFcNBHHEOfgdZIS%2BWyrC9CF8ePMBfjwk3w2BSbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881eddb74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?act=init\u0026cptid=076902353173\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026callback=jsonp17611312536100","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?act=init\u0026cptid=076902353173\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026callback=jsonp17611312536100 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\nset-cookie: tgw_l7_route=c9e19a811bf1017581da594c7514d6ce; Expires=Wed, 22-Oct-2025 11:08:03 GMT; Path=/; sameSite=Lax\r\nx-powered-by: ASP.NET\r\nvia: n62-251-091.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 176113125311cae39b9966241e5571510fb360fd27\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=70, edge;dur=241, cdn-cache;desc=MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":960,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with very long lines (960), with no line terminators","md5":"24470af6ad75b6208a4df39fd2b32265","sha1":"15ef10930f3321b646d3f7ea5a4d6d935c0ebe98","sha256":"aa9231550864fbd3ce0b3aac6880e189fd952b7c3acebbf9d1dfa6daf32efd41","sha512":"f485f27e9b88b42095c48d8fb129b83cd906a91da97e057564e2d185b1138c45c08bd7713f101c13494e8646736fc9a63f1af551d805f30344011c292b8f3dd2","ssdeep":"","tlshash":"b411dc0c8eff7a155f0d91672c4faa8984ac3992adc80630dbbc68045ac4916b37484e","first_seen":"2025-10-22T11:08:03.666825Z","last_seen":"2025-10-22T11:08:03.666825Z","times_seen":1,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getConfig","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getConfig HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 231\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPDF2SsCy%2FQ%2Bqn8Rd%2FE7VteYd6BHotdR%2F57N7QL3o4oTe7RaOd20%2Bam72ov3koS1l6bJZprhYYQUvKd6rvrwYzUjfxhawtJ86Oq4p7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f6f764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17631e50bba3428611f05e08f70503f7","sha1":"8502d5a8133763c8c956c30456389cc6f7659a6a","sha256":"a8592f400e8691807a640371f917f2c7113e9baafd1e9d172e70a6bb4ea21224","sha512":"26178dbdc2bd3f413bc5416f70f2e9888b60736e5012b671a23d568b588c254c7e97ab4a31ae83e63d4acff90f2f3543e391e12e75f659e45ad92ea3698db239","ssdeep":"","tlshash":"9be0c20b2a84e99cf74729c1324a2b28a8eea636e5416257a7ee4d20c9a8159214a107","first_seen":"2025-10-22T11:08:03.668659Z","last_seen":"2025-10-22T11:08:03.668659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?act=start\u0026accountid=150565\u0026visitorid=5406783455900767392\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026pagetitle=ETH%202.0\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=076902353173\u0026callback=jsonp17611312539571","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?act=start\u0026accountid=150565\u0026visitorid=5406783455900767392\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fethyh.com%2Fhome\u0026pagetitle=ETH%202.0\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=076902353173\u0026callback=jsonp17611312539571 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Oct 2025 11:07:34 GMT\r\nset-cookie: tgw_l7_route=c9e19a811bf1017581da594c7514d6ce; Expires=Wed, 22-Oct-2025 11:08:04 GMT; Path=/; sameSite=Lax\r\nx-powered-by: ASP.NET\r\nvia: n62-083-201.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 176113125302c33d5f84d95211683006d3bb69ef7b\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=76, edge;dur=238, cdn-cache;desc=MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":242,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f82c6641606baf04c2ca5643fd4a5c51","sha1":"2eff4550667d3057bd40f11ca73066fcb48b643d","sha256":"580d5cd139e1d88d7ba26b97264c12eac4e4d8be73ff40137b4dc2a564661252","sha512":"e81e1fde9c718bbe38b2e25e2645f13ebb38b176c3eaec80e6be5d3c236376636249253a3c51b94d216fda24a4d9b44a8b95b1a4d205231c2c08e393933cfea1","ssdeep":"","tlshash":"0dd0a7910c4858d20e48e2426c6e9b4a8f7135b9cd0651d2d5fd78196a347a6e667830","first_seen":"2025-10-22T11:08:03.670592Z","last_seen":"2025-10-22T11:08:03.670592Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getConfig","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getConfig HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 233\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVCSAMKaQsqX9%2Ba26%2FI%2ByViVeRLnUppiZC%2FbMf4eEgwdI9q6chZKyzqJfTRC4yb0we9m7jWhB8AagSv2dZuY%2BtmTgBioUL3Bul%2BM\"}]}\r\ncf-ray: 9928881c2d6a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"62ff5fe8bee7c8d7d75455a38e2e8753","sha1":"0583c77b957aa234446ec6e8c73d2edb0f856f76","sha256":"9aed09d17df1fa37ee9c453c3b7ce205d0eebbe6ca28eb35ded272decc3835bf","sha512":"b2c1ba9f384e3ac7bf3ad78c0ae3a31e24aae6859aee4c4ff9b3f92531d44b0f15ccb6c27489eeb5184b7b5fdf72242d3433bc6bacbd84ae107bf3a76b96edaa","ssdeep":"","tlshash":"70e07d4b1b84ecacf74721c0310e272054ecb122e40051037bff4c2085940985149907","first_seen":"2025-10-22T11:08:03.672083Z","last_seen":"2025-10-22T11:08:03.672083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":47,"dns":28,"connect":1,"send":0,"wait":82,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getNotStakingMiningRate","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getNotStakingMiningRate HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 313\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzQoZlUT0XvMW%2BqWiAbwpnV31lgSq9KUTUvz7WJGPZOd1iXXHuOD1yWYkayz77VB8F10xT2bVgoFE%2Bs4IXdkm%2FMoUN%2FEWxtdbMIXEzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f6f6c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":863,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10f1d2709358d016aa51242d2d56ffa3","sha1":"cde96b9ee042c30e74b22babf27f8600867af033","sha256":"de5f13ca8685e59149236cf67a5170e9a6f0e3df4885ac86bf9d389f6c34ab1b","sha512":"0ff7b6ce7fa40b18b72e8a76e16492e7e1bb2f5fad32cea9629bcf6f389d5eb4244272351a50746a7d75a969cfca73637471fec90a30d4b23744876da5aa6cab","ssdeep":"","tlshash":"7a118be2b33c9ce0e9649ccb4f27e013a6c1781c3dc79955fca5b624d680495162db2e","first_seen":"2025-10-22T11:08:03.673697Z","last_seen":"2025-10-22T11:08:03.673697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_7.0252bb98.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_7.0252bb98.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8577\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2181\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k21jLlDxu%2BIO2XaJeDeOqLSOV070YqgwDFy2M65DC5IsWGkFslIYyTnvPJI1qJQUUESU9bd7QxRaHYGu7zgDWCXzOiR4%2BfKXKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dbae44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8577,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"938ea7461d020b7be01a12044e7a0eb0","sha1":"2787bf47505e6f7a149d36c981ec48cb392d84d3","sha256":"189936c2dd68fed56007cc05f5877da8a3f3706fa3f64b6a5c226ecb60064d18","sha512":"8ca44afde7b4f189eb4fb80340f46e728fa980f55349f29f78cf8527df1e04e9a1c6cc67e389c6ef5709b2c321ab2a3f6b7d60c59e180bc393a7f5ef4a225029","ssdeep":"192:dEK0w8pjLwTeGc8OJwNZhGSOadGcuEl5sc4+ZXmpnZxqar:dEKuYTe98OJ2GSOadJ34gXmRZxF","tlshash":"ac02bfdb69dc4b63f11e2277aae8f50a18f11884b796d16e18de30f549b84356c32705","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.04988Z","times_seen":41,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_9.f7f455f7.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_9.f7f455f7.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9580\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-256c\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpa6RXjVDYvCvdI2eNTqMTF3WmddGeFpEVTUlVOIchPvFsd6lvSGv3WIf5AZPc7rBY7xVLxjp33AIzeOeCGGfTAZJITd7wcd2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dcafb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9580,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"129b82f8723b1615e0b6c08db7038786","sha1":"861594149cea62f1b635cde3240b79d259bc2740","sha256":"015e456ffa7297afcfc80e408e26a1c08b6433486c94abfbf74917a47da34ec8","sha512":"bd2c46f139d3ebb94b4696551f571fb97282060c61fa928dab6938675507740f78fd5745d9f56526b4a980d0e76bc586de168302c8b0ee4747d1cc2bd6ec9287","ssdeep":"192:dExebxlbShBI/WGoTgFYxWG+TtRPiqQVzpAKmVtO8T08p/QXOG:dEAxJShm/WGoMmxb+TteVYM8pCp","tlshash":"1a12cf2793901361fc89e3b1f2cb0251e0669e15c476b6ed1d858bf7aa0767c5b405cd","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.013151Z","times_seen":42,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_11.465be54f.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_11.465be54f.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9586\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2572\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrdHNM9YsOE4CDHUe%2FjEX5czUPa06MKy1dN9B99yjbeDFoe5T%2BokcMwJnrBCx5dfVRIre0%2FxFQS%2FIXVooQzSwmKxulYEdWt7bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dcb214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9586,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"95969789b650b5ce2aefe54e872a5aec","sha1":"18cda54c824b3c713f29eba888780bb941098fd2","sha256":"79a5fc1aeaae93443aa38dfe22e88d1ba971daa99bad45e238e8d1239d4dd0b0","sha512":"a93458e9a74896622ccb12baafbbda5662c75987a90628f541a06583dbf366766f8d445ca372b890650bfd6780c17dc739b77a7d661309cc84401878b911a852","ssdeep":"192:dEZA5SLcJYRh0Qlg5zTsh4I5vZjpdH155d/lcxnACO9d7vJCR5pAM+n7dw0ro:dE65SLcqjRlg5i5v7dT/lcxjO9hvoR5d","tlshash":"0412ae1f6f0b8c54ecd753b806eb2aea371e064193879b2839c42c859f2e08d5e547ed","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.044026Z","times_seen":42,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_13.a7c733e6.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_13.a7c733e6.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 17276\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-437c\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YINHEio4K2KFikU%2B4Xrv68Yr3dIsxz8ZYVamrSeWVFd2z8V8Yk0MP40rkTw3MeeFNE3IR2dvgcyAeFlXTpp39TVW%2BECGpnSj%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881ddb284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"53ab2665fbdf36211f1d611c2c959ada","sha1":"065a5792fcaacdb52a62491bf499b3fa8f5d35a6","sha256":"86774fe08e7bdae3cfc71d415b8bdf74c6fedcf2157f08f130f8c9a1d0f79d1b","sha512":"4460de0f3d6a884af02d665765fd1b373452b562804fb579045f334cb9955c41ee8cf8a93f089a305060266dbbac4b6ba5eaa28eb624b750d062524a683eec38","ssdeep":"384:DrZ509c5rkMOj4Chw07FkZsavQEN4Ca3tzQnnyoiXpriz:P2gUDlhk74Tt0nnyoCUz","tlshash":"1e72d0015b9dc039227b225772a208e4094a42aea317f14e67d381f87f25df2f4b7492","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.05329Z","times_seen":40,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312596483","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:39.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312596483 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Oct 2025 11:07:39 GMT\r\nset-cookie: tgw_l7_route=c9e19a811bf1017581da594c7514d6ce; Expires=Wed, 22-Oct-2025 11:08:09 GMT; Path=/; sameSite=Lax\r\nx-powered-by: ASP.NET\r\nvia: n62-083-201.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 17611312591fc736ba02cacdd3b3b22b6b837d0ebe\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=40, edge;dur=233, cdn-cache;desc=MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"92ae0b1cd0f8bb516490cd04876bda63","sha1":"f7371656b00a03dc9ce0d094f4e4c1c864065af9","sha256":"c52a744ec30cbff75762586d260e5cc582a21171234bcf919827b43d6e3222b1","sha512":"a3f052d613fc5e5b2aa94ce4d8279f85094bfbe312cb0353e09db63e9196f9b325a945ffe101ddf127bce92ed7205327f12c8a8b1b43c9d641f076a6f10dc1db","ssdeep":"","tlshash":"3ac08ca10c841a830e4921820c6a1a56dff235b48b1a42e1ccaa410c8a106db76a2834","first_seen":"2025-10-22T11:08:03.677582Z","last_seen":"2025-10-22T11:08:03.677582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vant@2.12.54/lib/index.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/vant@2.12.54/lib/index.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42488\r\ncf-ray: 99288816ad8756ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.12.54\r\nx-jsd-version-type: version\r\netag: W/\"23227-US0BvPwBpMl/evdfUwsbYIyaujM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 60525\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=207bB7OY3gz2vj%2FWEK8Pv%2FuC%2BOntuR6yU0tM21NY%2FWrNt5aCZjcM5UOAg%2BEIY9fMpZ82jo98QS2GQWxlor%2FYJjTgil4JM3Gg%2BXEi79a24BDQcfNqDa2FighRp%2FXPFpc0%2BsA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143911,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65268)","md5":"f3a3dcab13dbeac97697a1a4412a96c3","sha1":"512d01bcfc01a4c97f7af75f530b1b608c9aba33","sha256":"fd9dec9287589e4eecf10aa70e4d12aa7b672a89d98cbc721a44e85414b6a843","sha512":"a638b65c547aae59c8735ec75730dc8a5e14d0d4bd76227d6e8b2a31f3e6d3eef11a5412a998d9e8bf63ba32bd1d5978afc0fb25ab7e6627dc7727483811172c","ssdeep":"1536:4UyCltWrqoK3U0iNEBVcZH5NHMja4drYMAfP1rz12VLSV:4TeVc5HMjajVfNfMSV","tlshash":"89e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2024-12-13T06:24:46.657089Z","last_seen":"2026-06-25T19:18:25.914426Z","times_seen":66,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue-router@3.5.1/dist/vue-router.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/vue-router@3.5.1/dist/vue-router.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10290\r\ncf-ray: 99288816bd8e56ae-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.5.1\r\nx-jsd-version-type: version\r\netag: W/\"7123-LhNqn/SrrZ3U03puO3NsbfPV4Qc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220024-FRA, cache-rtm-ehrd2290047-RTM\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1072281\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=svgQSmCt9AdqyXcUkwmmWczFsXQbyLtNsSPodwEmpRUGVn5ki1kKDDrJq%2BJgxyWL2KjQiu0gvnjUEcbU1lJIzi5MZcNxj%2FS2yjuSw6VsE4%2BsxEHoM0EoZTXMoRaZbSj2HkQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28963,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28893)","md5":"78692f3f7f01d6d3cf761c9e240e196c","sha1":"2e136a9ff4abad9dd4d37a6e3b736c6df3d5e107","sha256":"799cce69728d5300816e2c6dc21ebd480805b45a864fad36f162d6d3530d3ca0","sha512":"739415b077f7dfa4e65a770fc92b0d2b69dc16256c3c458e8891831ff2deff953aab5854e85e41ef3880811c02a24c639aee0764191f5ac420fc3ffe5f7845c3","ssdeep":"384:gCErJV+oOim4GR7/q7f03bYP6Q11u8ZprWQrnS37puroAjahZ:gNDPGR/qR6QNRnQ7pVj","tlshash":"7ed2d7edb282b03547e326b1412f110ff13b699d744e8498f2aae4d46cbd94e8427f79","first_seen":"2023-03-09T21:27:22Z","last_seen":"2026-08-01T06:54:01.003122Z","times_seen":133,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":12,"dns":3,"connect":1,"send":0,"wait":18,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getLanguage","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getLanguage HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUm0B6OT%2FVRMBW2nQoCY9QvVYj0%2BX95U9hz233AY8QXP77T4EpH%2B%2BTThFER%2B6jb64FxGIASLti%2BbWjlxjIsklWz1S%2Bj1%2Fgv04chplaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881ecda04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getService","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getService HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 191\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Voys9Li4U5DvBWAfmiJbiLPYuLxBUqHFmtOzTaXsZXiTBdCrTqR4e8bPx07yFP%2BPR7Rz2v%2By5OnzK7v9n4No04R34pnRGcijBdS%2B9Nk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f8fb14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6d9356207227d0bb85e13bfaa7ac3b93","sha1":"0d28cd15df5cf15a7bcfbf6ebbc43b3240adfb62","sha256":"e44408def48d303fdf7a3fb83cedce44394c3512c76741991a87ac4797db73eb","sha512":"9915dc517d48f492b98ca516b5732e58ed654a8f0825842b7d71fd05e508c941bb434ffe2718e2f0a51727590defa4bb48efa5c6958b7d2cc3bde5aff89936ea","ssdeep":"","tlshash":"75d023e31234d5d5fb4630d535063a0d048ab07375082031c148cd7cc9148d0735fc57","first_seen":"2025-10-22T11:08:03.680238Z","last_seen":"2025-10-22T11:08:03.680238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s0.static777.top/uploadfile/20231021/574273733645045761.png","fqdn":"s0.static777.top","domain":"static777.top","tld":"top"},"ip":{"addr":"172.66.43.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static777.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 10:05:46 GMT","end":"Wed, 26 Nov 2025 11:02:33 GMT"},"fingerprint":{"sha1":"1D:7C:B7:30:34:13:DA:20:76:7E:50:87:6E:AA:C2:D6:1C:D3:6F:43","sha256":"B2:EB:D9:F4:12:A6:66:31:73:EF:E3:D3:40:04:6E:AA:B7:88:13:46:E0:87:64:6B:85:94:BF:98:A5:D0:82:0F"}}},"request":{"raw":"GET /uploadfile/20231021/574273733645045761.png HTTP/1.1\r\nHost: s0.static777.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 53768\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6879F978CA3BF63838D7A7B1\r\naccept-ranges: bytes\r\netag: \"D1FE729F69A8945D9267666700000000\"\r\nlast-modified: Sat, 21 Oct 2023 08:38:47 GMT\r\nx-oss-object-type: Appendable\r\nx-oss-hash-crc64ecma: 6743199713680621265\r\nx-oss-next-append-position: 53768\r\nx-oss-storage-class: Standard\r\nx-oss-server-time: 4\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdiLgA8NFrgkPLfcbE%2FNRN8OYpji2RgPoPsMTQ5dXQp8RdTBkGZTj9ZKe3oEQQTl%2FO4zLHc8snqrTVOSA1YGDJsc327bgQ5C%2Badduzir\"}]}\r\ncf-ray: 992888204fcd0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"d0ae8ce5d18432880686d1ac114826ca","sha1":"f46c6b748cb55b33fb7bbe2371465fad2a01feef","sha256":"6e0fcf6caa5e7109f5bfcf86dd6e297322fad55ea0cdc767a9cfb193608a7fe3","sha512":"ed166399df97bf4087bcb31d43cecdae34eef0588a1faccbbc1f3e9a8d34ebd06cbf08086f0909c995c7d5e8807ea61bdc755c6d9bbcc4b53aad3f14603eb0e5","ssdeep":"1536:yZs/Z2Bnx00JIErXgRFuxM1UhAaOooYG9XDeRXR:yZsB2Be0JjCFu+sAboa9z4B","tlshash":"b033f1fe2de70879ccb5727d8ea2ff2507ae427687a456243392cf6494951a0c23f079","first_seen":"2023-05-01T23:49:23Z","last_seen":"2026-06-21T21:49:49.0162Z","times_seen":103,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":16,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"s0.static777.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s0.static777.top/uploadfile/20231021/574273733645045761.png","fqdn":"s0.static777.top","domain":"static777.top","tld":"top"},"ip":{"addr":"172.66.43.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static777.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 10:05:46 GMT","end":"Wed, 26 Nov 2025 11:02:33 GMT"},"fingerprint":{"sha1":"1D:7C:B7:30:34:13:DA:20:76:7E:50:87:6E:AA:C2:D6:1C:D3:6F:43","sha256":"B2:EB:D9:F4:12:A6:66:31:73:EF:E3:D3:40:04:6E:AA:B7:88:13:46:E0:87:64:6B:85:94:BF:98:A5:D0:82:0F"}}},"request":{"raw":"GET /uploadfile/20231021/574273733645045761.png HTTP/1.1\r\nHost: s0.static777.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 53768\r\nserver: cloudflare\r\nx-oss-request-id: 6879F978CA3BF63838D7A7B1\r\naccept-ranges: bytes\r\netag: \"D1FE729F69A8945D9267666700000000\"\r\nlast-modified: Sat, 21 Oct 2023 08:38:47 GMT\r\nx-oss-object-type: Appendable\r\nx-oss-hash-crc64ecma: 6743199713680621265\r\nx-oss-next-append-position: 53768\r\nx-oss-storage-class: Standard\r\nx-oss-server-time: 4\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJdLt1D%2Fgp1Lx4eJQQ44F5%2BjXt6NQITRocJmJN4Q9uZ7B6XSr0wHipojP93S3KAJuPr%2FXmemug5%2BUacutXylGQJZE1hdbxnqXvDzHSjsHvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928882139dd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":53768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"d0ae8ce5d18432880686d1ac114826ca","sha1":"f46c6b748cb55b33fb7bbe2371465fad2a01feef","sha256":"6e0fcf6caa5e7109f5bfcf86dd6e297322fad55ea0cdc767a9cfb193608a7fe3","sha512":"ed166399df97bf4087bcb31d43cecdae34eef0588a1faccbbc1f3e9a8d34ebd06cbf08086f0909c995c7d5e8807ea61bdc755c6d9bbcc4b53aad3f14603eb0e5","ssdeep":"1536:yZs/Z2Bnx00JIErXgRFuxM1UhAaOooYG9XDeRXR:yZsB2Be0JjCFu+sAboa9z4B","tlshash":"b033f1fe2de70879ccb5727d8ea2ff2507ae427687a456243392cf6494951a0c23f079","first_seen":"2023-05-01T23:49:23Z","last_seen":"2026-06-21T21:49:49.0162Z","times_seen":103,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"s0.static777.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312543142","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:34.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312543142 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\ndate: Wed, 22 Oct 2025 11:07:34 GMT\r\nset-cookie: tgw_l7_route=7b779c7e91c2e4910d7d7a3ff740813c; Expires=Wed, 22-Oct-2025 11:08:04 GMT; Path=/; sameSite=Lax\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-powered-by: ASP.NET\r\nvia: n62-083-201.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 176113125407b8f49f5aa50e5b751d99bbcc33d771\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=73, edge;dur=228, cdn-cache;desc=MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9069ff4ccf585e168aea6fdafc4571be","sha1":"4064140b42817755ab9844ac8caef4176c1f8e03","sha256":"4455bfbc59beca5a1c8275fb856a02fcaf1d1545b824212ade4679086d67830e","sha512":"737cf1e1412396f179732aa28a96d96ba566541488c7434ebd8d30727877f0ecc69c1055bb099bac8a016d4f10544161316d9cc0a8b33bfb2a620b26c1a7d455","ssdeep":"","tlshash":"94c08c910c845a930a4922430c2a1a4bdff13aa48b0602e1ccaa000c8b606db6a62434","first_seen":"2025-10-22T11:08:03.682479Z","last_seen":"2025-10-22T11:08:03.682479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emdchk.xianshangkefu.net/api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312703065","fqdn":"emdchk.xianshangkefu.net","domain":"xianshangkefu.net","tld":"net"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:50.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emdchk.xianshangkefu.net","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:B4:53:3D:EB:40:F7:82:E7:FA:61:9B:5E:6D:85:C6:A1:1C:00:FD","sha256":"61:02:97:5B:F1:49:04:E8:76:50:FD:9C:B9:1F:9C:6A:34:3B:B0:50:63:5B:34:A9:53:10:33:43:22:89:87:23"}}},"request":{"raw":"GET /api/visit?accountid=150565\u0026visitorid=5406783455900767392\u0026sessionid=5434434444505961121\u0026cseqid=1720368283592\u0026ctag=\u0026act=polling\u0026callback=jsonp17611312703065 HTTP/1.1\r\nHost: emdchk.xianshangkefu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: application/x-javascript;charset=utf-8\r\ncontent-length: 161\r\ndate: Wed, 22 Oct 2025 11:07:50 GMT\r\nset-cookie: tgw_l7_route=c9e19a811bf1017581da594c7514d6ce; Expires=Wed, 22-Oct-2025 11:08:20 GMT; Path=/; sameSite=Lax\r\nx-powered-by: ASP.NET\r\nvia: n62-083-201.bdcdn-sgedge05.ToB,n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 17611312708e41b21baa395e178276ce9f76225b45\r\nx-dsa-origin-status: 200\r\nserver-timing: cdn-cache;desc=MISS,  origin;dur=86, edge;dur=230, cdn-cache;desc=MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0f2d5f96b0b2e921be011e3284ac7401","sha1":"2a44181720ec7960229f46b85ff580200ac46089","sha256":"45f233cab413760428447e30ba2119a50ff22e00654d4b940bfcb4dc417b9862","sha512":"4e62b7014493dfa694935db2ac7412041f9b2bfd6045b94023306fde62e24ba9322897b1988959dc95dee9b2be45ea4b201a6e367ba7d089d39446adfe84a618","ssdeep":"","tlshash":"0ac08c914c9526830e4822520c2a5a62eff13ab88b0a02e0ccaa000c8b106da76a2428","first_seen":"2025-10-22T11:08:03.683938Z","last_seen":"2025-10-22T11:08:03.683938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/js/app.ce57dae5.js","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:32.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /js/app.ce57dae5.js HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67534c29-17d6a\"\r\nexpires: Wed, 22 Oct 2025 23:07:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DH52xL%2BIZwV9agjgy3gS2iKi4FBDlpIdN9EoUp369ufegMH4Bvd74RIjTXIuog0IZrexqbIU6YXTv8o3ZOYel2JAKPsnSeU6Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99288816ae884e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97642,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53682), with no line terminators","md5":"bb45b0902a8cfad4b4866cee378d67c1","sha1":"e2c77321af6d4d9bcabc676fa74bb28fea5888d6","sha256":"38cda60cd07f57296b9165ddcdb90932f2edfb3151afbba93a69e7b6ee6bb23f","sha512":"3554d5dce9014dac6872ba7a53a6aef095aed8e952dc6cc9ed6445352d97c5e80d5d63d1fbec75eb819f735c2537bb0289556ff2481d46260a4df0f03c18e059","ssdeep":"1536:awtQOoQUXUHztNbTghYR2nWlF7a+Q7SKHpHTo0CsC3iUzfbrO:awTTbTghYcO0+Q7SKHpHTo0CsIiUzm","tlshash":"9d934c6b314a397d04422640614f770b71bc24fab7ca88e609fccebd53e5249947af6e","first_seen":"2024-12-13T06:24:46.772235Z","last_seen":"2025-11-20T03:47:51.951709Z","times_seen":20,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/index_partner_5.544077b8.png","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/index_partner_5.544077b8.png HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 10810\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\netag: \"67534c29-2a3a\"\r\nexpires: Fri, 21 Nov 2025 11:07:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0apeNJfDZx7Wkhsly3ytJOybpyBwp0SdIvy%2FXcHx8Sx%2F4sxu3sfWMYR6DObQMbxRfCsC7ZqjzIwK69%2Fye0HmmSQou218lndGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881dbaca4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"70db7c4d70516dede1fd5119b3a2f196","sha1":"bd323f8bd22f608a5d7f8ed6ebf54d4cba25c53c","sha256":"ce2cbd423901407d1cffeece80577dd2d9737f39f8b6b96f569a30faaae70538","sha512":"5252a874d0d21c17d5ecada31fa046dfd5853ac8baf8e32d79bb6ee348f0acf2c5525520d5da0d18b28c3a05b9072dd20bb6d51d8b84f9ab72de33939ae7969b","ssdeep":"192:dE8EIFMJZizGclY6iOOrW4xyZullpdfaE0fKWD5O0xgBT/z/1MP12:dE8TMXbN6iHrOmbfa1KhggV64","tlshash":"ba22af0bf02a4d19e0323cf8ad7647ab892bb537be096b490ed415e4a99b744fe70185","first_seen":"2023-12-14T08:56:23Z","last_seen":"2026-06-21T21:49:49.043195Z","times_seen":41,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getCurrencyRate","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"OPTIONS /api/common/getCurrencyRate HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://ethyh.com/\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eIYfxYgwX2L4G%2BjNx3wFiqpaghcwKSga%2BEWL6euAthmy72PSmJS7XGDYISIDFJ4laLRl6yv%2FU1P4YSPlnijuLWCs9XsMp6shL9QF7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9928881eedde4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T17:16:06.965139Z","times_seen":17657013,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ethyh.com/api/common/getCurrencyRate","fqdn":"api.ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /api/common/getCurrencyRate HTTP/1.1\r\nHost: api.ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://ethyh.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 204\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb6yCSPUVdO2Xj9tv%2FQXVg%2B%2FNQRhUzx7H07JOFKv1H9AWH5pU7qvn8hb7fgbqe8%2BjJyzqmwbW3nJ86hpqNxgRLJwiLEdOJWqu7PU1Ow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9928881f7f954e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"35e52a218593555ef2b7a985c0107fe5","sha1":"74656a0640506a6a5493eb88a08cc123e7e4871a","sha256":"89ac9a1565a7d48d16a0b6e0f0b43ed6d7747a114c1bb2a89b05242441974f90","sha512":"8f795e2411b6bd24f4738894d6663796c26d7ee99d3a4499579fcc56beebadeb445792f77916b62a4ff66c6a2fceab861dcb1305773077b81563ac4106e2926d","ssdeep":"","tlshash":"99e0dff3b6388ca4ca2418830417f911564f301b3887dcb5a96cde29da94090841ec3a","first_seen":"2025-10-22T11:08:03.689051Z","last_seen":"2025-10-22T11:08:03.689051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"api.ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T11:07:31.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfnB5L8Us7ZiOnkqht1OojbAw87LW%2BxuD57q4KgADdWGFtXNcyMcWFfiF9ZIEuy%2FMM1dUWCXw4YNsL8OndjzYr8PZi9YaK4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99288814eabd56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Axios:1.4.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (983)","md5":"f4b31b0744590e1f28d1d27a3f626735","sha1":"3cef12f7d22ad2c89805831f1bd1d6ae3ff9e105","sha256":"f2e2f2a5337ddc45c05abeda2b80a29b7acea4375a39389cbc873fa6d89dfd74","sha512":"b7d9455646629cbcac786b5a518610983dc8eb56852203dbb7fa399458c15225fc305a93d6bff2422048670d287b1b77d9649b785a65561a0fec0dc215357049","ssdeep":"","tlshash":"fa51549f8c05a41917a164ed7977f10ca8a7340f9850d8d0f9bc424a5f60bfe6d97d8c","first_seen":"2025-01-06T07:55:42.324298Z","last_seen":"2025-11-20T03:47:51.955552Z","times_seen":19,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":54,"dns":30,"connect":3,"send":0,"wait":112,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethyh.com/img/share.37932219.svg","fqdn":"ethyh.com","domain":"ethyh.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethyh.com/","date":"2025-10-22T11:07:33.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethyh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 14:44:49 GMT","end":"Fri, 02 Jan 2026 15:43:24 GMT"},"fingerprint":{"sha1":"37:AF:C7:17:4C:98:3A:6D:0C:18:49:B9:3D:72:32:02:3D:78:FE:E0","sha256":"08:3B:47:FE:B3:C5:15:60:EE:7A:A7:4D:BF:6E:DC:93:9B:60:0E:6B:01:DB:C8:FE:91:E7:A7:D2:85:25:93:50"}}},"request":{"raw":"GET /img/share.37932219.svg HTTP/1.1\r\nHost: ethyh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethyh.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 11:07:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Dec 2024 19:10:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YQR1p%2FXqGTIjS8PxKcmsZvH3HrFbpIrjczYDBTe2DHBXNXHyfjvyqxu98lQW0WwWArJipjRobujzfnbzqfigHwtlYkZ1tFwRw%3D%3D\"}]}\r\netag: W/\"67534c29-39b\"\r\ncontent-encoding: br\r\ncf-ray: 9928881d59d44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c019fa9f7f31bca2caf7f1aa7cb5a6e","sha1":"fe67ca989388d50b7a6cb1f121822adfe922abbe","sha256":"4ce1e78289021536687d0a38fdd0ea57d9ee99a9f23da05bbcd27ed3bd4bc78d","sha512":"d820c3bc9f8f895dd61cd42189bd0ae2a01de4b5031fcce6c74c3ec4b4d1602fa3db4baa1be15c27aa8341d46f759381a21cb8e0967990d339cf53f473f8e52c","ssdeep":"","tlshash":"5a1176e8caf1212ca628128ae3a0c051f78f207ff8e74a58f965aa0c40d2c503806d6f","first_seen":"2024-06-09T00:29:02Z","last_seen":"2026-06-21T21:49:49.048967Z","times_seen":33,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"ethyh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}