{"report_id":"8226fcda-09d9-4eb3-a05e-73c6d2df175a","version":6,"status":"done","tags":[],"date":"2026-04-15T07:46:07Z","url":{"schema":"http","addr":"wwwethereum.org","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"8.218.116.14","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"title":"Ethereum","dom":{"size":3031,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"25c2c90624ed6a9930244efdd20a7ebf","sha1":"52edb3d317273031cf0d2060a230a5cfd1e86ce1","sha256":"4596a0a6fe401fc313eb9bc34543e15c1a4cbf1bfbd9bb6bb6a5b2f85e81ef58","sha512":"765b23fa80800ccf3a839e302f6184c0937deff03f66e186bc624fd9d4f4b5a47cacaa70b1a3be40a2731c927f6ce412e0ea52eac8b0861eef9c06bcff5566f7","ssdeep":"","tlshash":"3d51448baa630042780690783bf7ab877645e407810ec9747f8c720ccf456c489ab74c","dom_hash":"domhasha911406c3e2789fb0008e37a9aceca19","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wwwethereum.org","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"8.218.116.14","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T07:46:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"wwwethereum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wwwethereum.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":789809,"sent_data":1590,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-13T04:36:40.415277Z","alert_count":0,"request_count":2,"received_data":30883,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c035a11ee4b2af669e2c899e3931a9c9","sha1":"18a74510db389b07394c0e85d599839e4b9a5989","sha256":"9207fb72dd891044c2be6e759ecfcd8360cb1ca6fe49b8887b731f33bfeef0e4","sha512":"0dc9c904f8ecdef5d5e2075c0066ef0a30eabdf89098fa4a0a5665cb28f06397a569a2ee4a9a1e04916a4f4c1fdafffe16c1db8ca06375bf4aa2f732130adf6a","ssdeep":"","tlshash":"6ad02b1f6c661870a767046d62ffc54eb591644f503ed001b48cf4508f54dd9082dbc8","size":284,"data":"","first_seen":"2026-04-15T07:46:11.940299Z","last_seen":"2026-04-15T07:46:11.940299Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-19T11:33:39.811962Z","times_seen":106442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-19T11:33:39.811962Z","times_seen":106442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?fabe882183d57c1b8cb1c52f1e5d1591","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"824cd5c8a4aa922013c3d88dd9fc5b94","sha1":"30ef1d554564f849ca1e42a3c220fe6c02184016","sha256":"926e405f2ceceffebdc857c7c33c09d04ad7d919a30db264e44e8e107a644fe9","sha512":"6a1636ea504db5b02ff1069dc6d6f00f5efea814cdf434eee5e7f1c731fd98f45508065274bb8756808adfab8f7414f1e3def17473b1b0f68e9b0077af61a203","ssdeep":"384:BFJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:BF4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"c1d2d9a9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29901,"data":"","first_seen":"2026-04-15T07:46:11.93578Z","last_seen":"2026-04-15T07:46:11.93578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9816f1e66b83e366fb595f26f0658189","sha1":"aebc7edd00be376ccd55a6050155d29e483599c7","sha256":"96d52a5fe3348dfcd4d8e3619bdc247f740584b19ce702bbf96d48714196a699","sha512":"5f2fb3224adbbb7171e9428aab250a4046b5dfc0fb2aa904774e8c454a33414f58d7f7a1bdb2c089bc6486ce9c06b2ebf7f9079e45f3624c87e519da1e92b64e","ssdeep":"","tlshash":"e7d02bcd319148cc46d62d81a5d5944fa558ae0220189e408e043957244af33138da9f","size":274,"data":"","first_seen":"2026-04-15T07:46:11.943393Z","last_seen":"2026-04-15T07:46:11.943393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T07:45:45.289Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wwwethereum.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T11:23:18.17825Z","times_seen":13932203,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":547,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"wwwethereum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"8.218.116.14","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T07:45:46.121Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wwwethereum.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 14 Apr 2026 13:51:09 GMT\r\nAccept-Ranges: bytes\r\nETag: \"80c44abf15ccdc1:0\"\r\nVary: Accept-Encoding\r\nServer: Microsoft-IIS/10.0\r\nDate: Wed, 15 Apr 2026 07:45:46 GMT\r\nContent-Length: 1364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":3104,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"60c30ece7857cc6f1f739bcd4468a3e0","sha1":"6901cf825f294e80ab02168e290c3c268b671b7f","sha256":"8a18cb63cec1fe2805126a716ad2ce9199b6123a4dffe245db5bb1be277ad487","sha512":"df27cbdd2723cd9bd637b1b53b405034844c551a97b1ecb324469cdce70452839e9c353b9df0abe590734d01156e236d12a20e7ae72d1dee7d5c327ecaa12614","ssdeep":"","tlshash":"4251431aea40145270369378bfb3978afb869157830682757fdc73068f75a48859bfcc","first_seen":"2026-04-15T07:46:11.929892Z","last_seen":"2026-04-15T07:46:11.929892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":279,"dns":1,"connect":279,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"wwwethereum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/668.jpg","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"8.218.116.14","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wwwethereum.org/","date":"2026-04-15T07:45:46.770Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /668.jpg HTTP/1.1\r\nHost: wwwethereum.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwwethereum.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 14 Apr 2026 13:38:59 GMT\r\nAccept-Ranges: bytes\r\nETag: \"bb54a8c14ccdc1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Wed, 15 Apr 2026 07:45:46 GMT\r\nContent-Length: 784835\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":784835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 2732x1409, components 3","md5":"1476e21ae3f9715da50e31088ca9e005","sha1":"9bd7534c9cf8d0f4a4e1353cd6554df14bb2b1cd","sha256":"704ef059d32b771910d07223bb6710d20757cac636574254995441edb04bdf87","sha512":"afdb89192e023c0006f1d7bb33a63c1eb613e915714a7a6cb92eba3ef0e972c3c6f6f5393623c9ce2f43f4ba30a01e72ebce72fb1d971ecffe7849e082ebf353","ssdeep":"12288:aVf4igeRU1Xbbgj3o0yqPRhJewRvTeXAu54vjvbqaG4iSl+HimDCJiSjfSBRHmMp:kqeCJb+3oLuhJFRvpbzbvWYvSHHQkXL3","tlshash":"66f43398b8e62885a24723b74dbf0e0fd2dfe12157708fe563601f65922a310778bd9d","first_seen":"2026-04-15T07:46:11.932725Z","last_seen":"2026-04-15T07:46:11.932725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"wwwethereum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?fabe882183d57c1b8cb1c52f1e5d1591","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wwwethereum.org/","date":"2026-04-15T07:45:46.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?fabe882183d57c1b8cb1c52f1e5d1591 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwwethereum.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11295\r\nContent-Type: application/javascript\r\nDate: Wed, 15 Apr 2026 07:45:47 GMT\r\nEtag: 03856533443d1c4b934c6b30689d142a\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=C82E8B48BDBA1F9B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (625)","md5":"824cd5c8a4aa922013c3d88dd9fc5b94","sha1":"30ef1d554564f849ca1e42a3c220fe6c02184016","sha256":"926e405f2ceceffebdc857c7c33c09d04ad7d919a30db264e44e8e107a644fe9","sha512":"6a1636ea504db5b02ff1069dc6d6f00f5efea814cdf434eee5e7f1c731fd98f45508065274bb8756808adfab8f7414f1e3def17473b1b0f68e9b0077af61a203","ssdeep":"384:BFJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:BF4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"c1d2d9a9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-04-15T07:46:11.93578Z","last_seen":"2026-04-15T07:46:11.93578Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2331,"timings":{"blocked":1003,"dns":1,"connect":499,"send":0,"wait":315,"receive":1,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwwethereum.org/favicon.ico","fqdn":"wwwethereum.org","domain":"wwwethereum.org","tld":"org"},"ip":{"addr":"8.218.116.14","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wwwethereum.org/","date":"2026-04-15T07:45:46.970Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wwwethereum.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwwethereum.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/10.0\r\nDate: Wed, 15 Apr 2026 07:45:46 GMT\r\nContent-Length: 1231\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1ad754fc9a6969d673982bbd1498d79c","sha1":"44e396ee7733cd19e32519bf5e9f7381e16542a3","sha256":"6e5d917da044b7e6be0ca5cd01c3af6f0f64953698ca0c5ecda7d2fb9d1ffa61","sha512":"83903271afde4c7fd26d31a22fcb2f794249b38b3bb6a8e16d57143953f4e6ad386494aee89b4995c050c90b0619883f32d9a8c57f4fccc3d8156dbfee5e2245","ssdeep":"","tlshash":"ba21422a93942814f69785a070f277d63f078282f55b0b58e413b227e4c36a281d7384","first_seen":"2025-04-11T00:22:25.352663Z","last_seen":"2026-04-19T06:45:26.229382Z","times_seen":426,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"wwwethereum.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=C82E8B48BDBA1F9B\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=491972809\u0026si=fabe882183d57c1b8cb1c52f1e5d1591\u0026v=1.3.2\u0026lv=1\u0026sn=44043\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwwwethereum.org%2F\u0026tt=Ethereum","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wwwethereum.org/","date":"2026-04-15T07:45:48.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=C82E8B48BDBA1F9B\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=491972809\u0026si=fabe882183d57c1b8cb1c52f1e5d1591\u0026v=1.3.2\u0026lv=1\u0026sn=44043\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwwwethereum.org%2F\u0026tt=Ethereum HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwwethereum.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 15 Apr 2026 07:45:48 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=30DD0A6BAB9FA197; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-19T11:04:27.788626Z","times_seen":338046,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
