{"report_id":"aeb88676-038d-471f-962b-0256a44dc7c2","version":0,"status":"done","tags":[],"date":"2026-06-24T14:02:38Z","url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"80b5e0de99ff2252fb4741c444bcaf1e","sha1":"e672db4fc03ff6bb6b21a7f9f1f3bf93a53da4cb","sha256":"0b4faedf356fed372f4821557a8d5a8b0c25da44174f59baf447ebdc9b604028","sha512":"1df11db036409b1af66a4b537d018161840948ea139f73bc51e4113806995f733d96a769090fb40aa1081d9be187b75af5f04c7b1a51ba1f763b3ba083b6aeda","ssdeep":"96:DJFs1Bx13gb61j1l0so7gx10UFZV4jl22D+i8kDNLeOl:H61rphFmULV4jM2D+z0sI","tlshash":"7b9161a444f1663b18a386a9e9d17f57af81760bce8d29407baf00e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T14:02:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"get-etherfinances.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-06-20T13:53:26.76788Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-06-23T19:14:27.742036Z","alert_count":0,"request_count":1,"received_data":957,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-06-20T13:53:27.435937Z","alert_count":0,"request_count":1,"received_data":671,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-06-20T13:53:27.733657Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":12285,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":5,"received_data":148345,"sent_data":2868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-06-20T13:53:27.485596Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":3,"received_data":606653,"sent_data":1454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ether.fi","ip":{"addr":"64.239.123.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-06-08","domain_rank":1271018,"first_seen":"2025-06-05T08:07:30.286602Z","last_seen":"2026-06-13T17:37:01.837491Z","alert_count":0,"request_count":1,"received_data":2068,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-06-20T13:53:26.083563Z","alert_count":0,"request_count":3,"received_data":2950659,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"get-etherfinances.xyz","ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-21","domain_rank":0,"first_seen":"2026-06-24T14:02:41.546302Z","last_seen":"2026-06-24T14:02:41.546302Z","alert_count":3,"request_count":3,"received_data":471760,"sent_data":1453,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/uvKJALG8pX.js","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","size":440892,"data":"","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-24T22:31:04.676608Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","size":492622,"data":"","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-06-24T22:31:04.727947Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b4020bebf4d53ae3bdbe908114b38fd","sha1":"be27935df3138e5d531b745cc5a728b4a7c20dd6","sha256":"4d363f44eea8055c88910fad06d90036bd97662a886644a7ea2624c89ac6de67","sha512":"6ffac162ee647b39e2167d434d1d23912fad3c8259cd26c2f2a6aa3e28e54206365838bad412f470c76fc1c2666be1f05a711384dad94058bfaa3cf2be2d8b00","ssdeep":"3072:Lz0Usp3z0UsfKJvtwkH5E40EisJFItE2SjTEZSo/e1h07lcJhB9jmGJbTWA5rNUi:v5SvEZPsnpJT9","tlshash":"609443f8a2c7550fc7cf05c6bdf289c8d871487ed305263aaa03e695ecacce158d2995","size":418610,"data":"","first_seen":"2026-05-12T17:14:33.828157Z","last_seen":"2026-06-24T22:31:04.730296Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-25T01:06:10.208157Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75451a37a7b8f9c2558aca4152a5e107","sha1":"bb734834de6eb19095fdfbb19eeb62bcb06be688","sha256":"2723a4ad7240c7bee853d4d4ef5d7eaae882c4d6b5358e86d337cf726be1e80f","sha512":"7383392c5a4320c0f151ff1b88f98f5e1136ec96d6cf82b5b75f632a5ad0ca2fdf7c346e1d57457963ae76cae89b00da3d5b5dbe749b26ab8d13d88a37a2b180","ssdeep":"6144:UK1Ttbhyjg7laKnyNY4ZVnF+5+SONx5TxpVQzGH+nqJoCFLSBC9YUJfdXBgvuRUf:UKJl807l/4yEPa","tlshash":"6b94acb80ff3d8aaca5df4046fb07189d6b97d223e782c44bd77230656fe18112d691a","size":445343,"data":"","first_seen":"2026-06-02T08:49:54.161415Z","last_seen":"2026-06-24T20:32:44.982473Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-24T20:32:44.958633Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v2.7","filename":"https://fonts-css2-sans.b-cdn.net/index-3ebeq329.js line 1 \u003e Function","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj36 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.6296631382117586] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj37 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78230973318e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj38 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj100 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj102 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj104 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj110 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj172 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj173 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj174 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj175 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj176 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj177 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj178 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj179 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj180 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj181 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj182 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj244 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj245 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj246 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj247 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj248 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj249 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj250 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj251 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj252 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj253 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj254 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj256 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.6296631382117586] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj257 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78230973318e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj258 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj320 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj321 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj322 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj323 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj324 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj325 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj326 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj327 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj328 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj329 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj330 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.148Z","timestamp":1782309732148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:45 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 532287\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-06-25T01:46:40.649636Z","times_seen":1182,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":25,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/crimsonpro/v28/q5uDsoa5M_tv7IihmnkabARboYE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.152Z","timestamp":1782309732152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/crimsonpro/v28/q5uDsoa5M_tv7IihmnkabARboYE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 12:04:50 GMT\r\nexpires: Mon, 21 Jun 2027 12:04:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 266242\r\nlast-modified: Wed, 10 Sep 2025 17:04:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48200,"size_decoded":49013,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48200, version 1.0","md5":"de9c1d8bbc46453f436992a92d19e308","sha1":"a62fce6278f8a06dbd16d706fff2d274d7706041","sha256":"20ce4189b9e41b3439a2a36dd63deff44b6d91182532202cb96b65521b4a3c23","sha512":"d28ff369a07b81467cf76a57d2502df36ec4e9ca93436eb42a46b143380ab6f5af8027fc6a983b524f3c9ed964352f56fe076a04748365e18604ac4caa2f8204","ssdeep":"768:aU9ybgTkcwloB4H3hEObgFfWe2axJ5MVpa4N9fhqX62voGpAfQsm3mt44ou5i0X:aU9ybgTbwloBqNDFa6ba4N9fTu0gwR0G","tlshash":"e323f16e800f39eecd806ed5e3d9e6dcbdb605c17a3a2c55612fd70842525708527be2","first_seen":"2025-09-16T07:04:25.689827Z","last_seen":"2026-06-25T02:13:19.673341Z","times_seen":979,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":52,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.290Z","timestamp":1782309732290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://get-etherfinances.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +gPOqzLvFk6xhXr6BPFeYg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 24 Jun 2026 14:02:12 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: aNw0ZGaH0sOSEwwAUN8oM0gC3Z4=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":106,"connect":127,"send":0,"wait":24,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:13.147Z","timestamp":1782309733147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 14:02:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230179-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 39754\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qVKjXN%2B3kaoodWrd720zPZfJKf46RDTG%2By2mgigAB%2Bhalm%2Bos4Q57r0GwprQSV1ygDUT8VMw9y28bDwaR76zRPRBhhzKtSw4Nmb9h%2FC3TJKHml4Mu8Lp0ZkrZtZuVlwpiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a10c44d84e02c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":7771,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-25T01:40:24.011244Z","times_seen":4582,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ether.fi/images/favicon/favicon-light-32x32.png","fqdn":"www.ether.fi","domain":"ether.fi","tld":"fi"},"ip":{"addr":"64.239.123.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.157Z","timestamp":1782309732157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ether.fi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:37:44 GMT","end":"Wed, 12 Aug 2026 08:37:43 GMT"},"fingerprint":{"sha1":"BC:71:59:DE:EA:3A:7F:2D:6F:B5:A5:41:61:45:A4:FB:E2:3B:6C:49","sha256":"10:D9:E9:FA:28:34:25:03:06:66:89:AB:47:ED:2D:19:1F:7C:99:6D:7E:D9:A9:95:F6:D6:03:21:5E:06:F8:2B"}}},"request":{"raw":"GET /images/favicon/favicon-light-32x32.png HTTP/1.1\r\nHost: www.ether.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 53405\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon-light-32x32.png\"\r\ncontent-type: image/png\r\ndate: Wed, 24 Jun 2026 14:02:12 GMT\r\netag: \"47fb2ccd7101e2639d07857e40c7a113\"\r\nlast-modified: Tue, 23 Jun 2026 23:12:07 GMT\r\nserver: Vercel\r\nset-cookie: sync_id=0000hmdtwk; Path=/; Expires=Thu, 24 Jun 2027 14:02:12 GMT; Max-Age=31536000; Secure; SameSite=lax\nsync_sid=1782309732383; Path=/; Expires=Wed, 24 Jun 2026 14:32:12 GMT; Max-Age=1800; Secure; SameSite=lax\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /images/favicon/favicon-light-32x32.png\r\nx-sync-device-id: 0000hmdtwk\r\nx-sync-session-id: 1782309732383\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8g8v9-1782309732339-cf07c4745fe1\r\ncontent-length: 1198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1198,"size_decoded":2068,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"47fb2ccd7101e2639d07857e40c7a113","sha1":"88f862218b6d54a864b62562f9da733088097ebc","sha256":"d7f650f0c4d5efeea144b9346b64af04b472f81d97c5155ac9292110fc0db3a8","sha512":"796a1d08f1957195ab09f796f59100c57bdc71831683853bee240d34e2f48d405a6c037bcf5305ede58eeab4f79610f4b4369ec17b25a8b416e55628927ecf46","ssdeep":"","tlshash":"5821e7da26082e99ad1f5fb7e10e74917253f3c8e6403209ad85882e6620ec8b710de1","first_seen":"2026-06-10T17:59:38.255872Z","last_seen":"2026-06-24T14:02:45.581184Z","times_seen":31,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":60,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.320Z","timestamp":1782309732320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://get-etherfinances.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: CleREoIyKfZCn0XaF4FrfA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 2QDW/cU4k80bljs+CHFDARr118Y=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":129,"connect":114,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.661Z","timestamp":1782309732661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-1aoGusm.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:12 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e004d-7844e\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:33 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bddc03438abf67b87c3856c6f70011e8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":492622,"size_decoded":110466,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-06-24T22:31:04.727947Z","times_seen":112,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":85,"connect":1,"send":0,"wait":8,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.894Z","timestamp":1782309732894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 24 Jun 2026 14:02:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 3558195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UodlZ4su120Z8JnQj4B4ZPYdY6%2FR3bBhpz28pkkQ0WOASBRODAh34bbq2OFgpDDG8kl0L9y83bNv6KhIN1p0yXrKX71IYKLwu%2B67OilBF%2FXxYAZpnNGGef9EysNSE2GCtwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a10c44d69fdfc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63432,"size_decoded":24472,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-24T20:32:44.958633Z","times_seen":397,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:13.143Z","timestamp":1782309733143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:13 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014dba-2bd6be\"\r\nlast-modified: Mon, 11 May 2026 03:32:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f74a1898102e4d64040760cc83e3e6b0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-etherfinances.xyz/assets/css/style.css","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:11.498Z","timestamp":1782309731498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-etherfinances.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 01:50:40 GMT","end":"Sat, 19 Sep 2026 02:49:09 GMT"},"fingerprint":{"sha1":"DD:DE:4E:85:C2:93:24:1B:49:59:75:03:72:3B:B6:03:0F:87:0C:CA","sha256":"1A:E2:22:B5:12:1A:AB:05:A6:A2:75:1B:A6:96:36:7E:F0:AB:4F:D4:AE:2C:D8:35:01:C5:39:10:EA:61:B6:6E"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: get-etherfinances.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/rewards/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:02:11 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 21 Jun 2026 02:18:59 GMT\r\netag: W/\"6a374a13-2bf0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnJCQR5AZybbD6kMggxGDiK4PVHcq2ncrvZAU5Wtz%2BiWGWH%2FbNvG0xRv5kzf0H5jcicJa3pEE8syMfV5rW3XG%2FvCsMCHUai8%2BcxvVISAf4Lv%2B7yBnfRWXtFuiJ2NXRGs700zto%2BLnro%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10c44cded10b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11248,"size_decoded":4235,"mime_type":"text/css","magic":"ASCII text","md5":"82b0933ab66365d7882282a5b7675f16","sha1":"ee42dd035859c920bc82154606937dc7998def1f","sha256":"260d3f4c0f34637220ebcc9c6478726393bb760cbcedad6d0e086c8a3a834072","sha512":"a3c64b43db9fc03b19e1c37b3edf9ddb7d58a20b70e00d89e6f747ba489ab97128d80e80e91a8e43346e51ca8dd7496e961eeb8a5510f7242f168cb36ba2a0b9","ssdeep":"192:4Iyn8OGKDHyJfaQUvIXPVzzQ48CKc6fUhZHhBmQb9JiXIL/MwD6sQMKJkSZ:4Ib6SjUdnL0ZH/BDiXzu2X","tlshash":"7e32629817a45164b86bd8d47a878f99739c90468d0fcebd6be2104cadcc3fd35a2b4c","first_seen":"2026-06-10T17:59:38.250411Z","last_seen":"2026-06-24T14:02:45.583415Z","times_seen":32,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"get-etherfinances.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.150Z","timestamp":1782309732150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:45 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 532287\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-06-25T01:46:40.649636Z","times_seen":1182,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":33,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3ebeq329.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:13.145Z","timestamp":1782309733145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-3ebeq329.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:13 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0d01-1151ed\"\r\nlast-modified: Mon, 01 Jun 2026 22:51:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 92f0e5aa8348c3a17921cee6f862a7ef\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1135085,"size_decoded":226617,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"880fd4c4d2bd4d033c6769cf3c5836fb","sha1":"e0a781586235ac9386ccec979f60787e7bf59071","sha256":"52b1da2c53fbdd4b4ac9f3c65672bf4ddeb928dc967bdd062c4259c66c4b0385","sha512":"b1915fb019a27429f7396219e64d66852f7b22e88b071e0658df75009e798fc5072e5141181a425ae54eb78cbc4332084bbe3367afb194604fed4588441a11eb","ssdeep":"12288:kHhEvcEWE2wBkjtole49j/eodRZ+tNg6d1AWrYiqwnKE7l:kBEvchrpOZhzRZJ6d1AWrYiqwnKE7l","tlshash":"3e2553f54583bb99ca50fc439ca54eeb7c1599e4884b4825fa23fb50eb89e12cdc3631","first_seen":"2026-06-02T08:49:54.120665Z","last_seen":"2026-06-24T19:07:04.569953Z","times_seen":85,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T14:02:04.575Z","timestamp":1782309724575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-etherfinances.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 01:50:40 GMT","end":"Sat, 19 Sep 2026 02:49:09 GMT"},"fingerprint":{"sha1":"DD:DE:4E:85:C2:93:24:1B:49:59:75:03:72:3B:B6:03:0F:87:0C:CA","sha256":"1A:E2:22:B5:12:1A:AB:05:A6:A2:75:1B:A6:96:36:7E:F0:AB:4F:D4:AE:2C:D8:35:01:C5:39:10:EA:61:B6:6E"}}},"request":{"raw":"GET /rewards/ HTTP/1.1\r\nHost: get-etherfinances.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 21 Jun 2026 02:18:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YE9%2Bu2T8waLYzYX1GKwxXV12uW95P%2FWzsEKjHSpuobihF5dZ9M1509xcRI6V%2BxlVq0lUS7gncvXmjswBG9756VwHN7NoutO7WeBqeKO%2FEqTpIyiBbLzpe563SFpmNmLcoapYWydP8ZY%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a10c44cb38522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16853,"size_decoded":9253,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"3c1e027cf7f9871458532d58f0604287","sha1":"e66d2281e87e5ee99fba47e3c674763b827578d5","sha256":"5b8462fdaaceca0f38ab08a0f74754b6eeddba7377dee42abdabd71baab33ecc","sha512":"5409ddb5142705e28d09b771095ec3288b11af4ce292978f112c1a6fc1f4c439cda19be1c2df09271d8638b97dce2dbec93b1ee466b6ac6ce327d5859b4220b4","ssdeep":"192:vrOpcLbQzKcwJ4jWO3HmECLxNy/mD8uWIG/a4auWVspQIn/2NfxYl83ST+:vr6b1FV3ixNhoIT/hs+NfxYl83f","tlshash":"7672c56061f02a774293d1c4ab65a73b7bd1ea57e956100133fe0be44feaec6cd27088","first_seen":"2026-06-24T14:02:45.584513Z","last_seen":"2026-06-24T14:02:45.584513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6694,"timings":{"blocked":-1,"dns":58,"connect":2,"send":0,"wait":203,"receive":0,"ssl":6431},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"get-etherfinances.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.088Z","timestamp":1782309732088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1755641\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCTLB8KfROaLhFeA%2F0AC0aFYiJZiDJ7p1eFbiz1GdufkNrriOL2rLbYbA%2B%2BxgrbXzTlURtbY89Ah0YIwl1tI97Igbd3xohlewclKsBKagEbQtZ0voIuJDBefQtce5ZcIhJU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a10c44d1bf05b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522095,"size_decoded":159693,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-25T01:06:10.208157Z","times_seen":307,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":10,"receive":7,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.147Z","timestamp":1782309732147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:45 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 532287\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-06-25T01:46:40.649636Z","times_seen":1182,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.155Z","timestamp":1782309732155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://get-etherfinances.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:45 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 532287\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-06-25T01:46:40.649636Z","times_seen":1182,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":39,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.295Z","timestamp":1782309732295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://get-etherfinances.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: NWjunga/8ZVWSzpdtfjNog==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 24 Jun 2026 14:02:12 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: LZWVim0B/uI/RFwWvRP2nRkOCqU=\r\nx-via: het-fal-2075395\r\nx-servername: het-fal-2075397\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWBJ63AqRmmzuq; SameSite=None; Secure; path=/; expires=Wed, 24-Jun-26 15:02:12 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a10c44d31915a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":671,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":21,"connect":21,"send":0,"wait":258,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.323Z","timestamp":1782309732323,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://get-etherfinances.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kw8AQYgiwW3MAoCPgs+AAA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:12.499Z","timestamp":1782309732499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://get-etherfinances.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LVzOp364BcM8PnVRK1OiQg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 24 Jun 2026 14:02:12 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Y0ATSqS2DED5G4zrkdzdfNu9UUU=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T04:14:33.60256Z","times_seen":16699276,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":1,"dns":0,"connect":30,"send":0,"wait":24,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:13.139Z","timestamp":1782309733139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:02:13 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0042-142492\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 15bd45686311176c6ffd8c0d3ce7d0a3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1320082,"size_decoded":282438,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a06dcf0ae36eb0d74fafb9d09c6033d","sha1":"1960604fc7fc992a758d80ee2873c12fb0ff3848","sha256":"80242312c3b0d9ea60b6832c3fbc11b201dd03ffeecd83166eb6eb92f77530d9","sha512":"c5bc4dbeaae92111099a1d44e55f9e596c5f10e451cadb0cec44d9e2f2613990e1b79c01e55d013862f847eac6b65ff16e400de43867a066004b4694e981cd76","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGD:QQqJr/0SVwZmzHCD","tlshash":"22255deb0bd1892db4afd951de3c4c7c40f686622d69218be613e9cbd68c3744f49b48","first_seen":"2026-06-02T08:49:54.145531Z","last_seen":"2026-06-24T19:07:04.573213Z","times_seen":86,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-etherfinances.xyz/rewards/uvKJALG8pX.js","fqdn":"get-etherfinances.xyz","domain":"get-etherfinances.xyz","tld":"xyz"},"ip":{"addr":"172.67.186.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:11.500Z","timestamp":1782309731500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-etherfinances.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 01:50:40 GMT","end":"Sat, 19 Sep 2026 02:49:09 GMT"},"fingerprint":{"sha1":"DD:DE:4E:85:C2:93:24:1B:49:59:75:03:72:3B:B6:03:0F:87:0C:CA","sha256":"1A:E2:22:B5:12:1A:AB:05:A6:A2:75:1B:A6:96:36:7E:F0:AB:4F:D4:AE:2C:D8:35:01:C5:39:10:EA:61:B6:6E"}}},"request":{"raw":"GET /rewards/uvKJALG8pX.js HTTP/1.1\r\nHost: get-etherfinances.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/rewards/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:02:11 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 21 Jun 2026 02:18:59 GMT\r\netag: W/\"6a374a13-6ba3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Clq05VeCJE3fprTI9GvwJfHGhM4VX9Q9rEDnUwRTm%2FY8Vn1WH7f62bBq7A6CW6vOJtXmmmGwbhhE0GNzyMfcGT0nxRcasGoq1vmIx1eorPqgl1CprqdsTbbI8izPCJ3GnyedyDAwkSY%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a10c44cded11b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440892,"size_decoded":112974,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-24T22:31:04.676608Z","times_seen":210,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"get-etherfinances.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Crimson+Pro:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026family=League+Spartan:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-etherfinances.xyz/rewards/","date":"2026-06-24T14:02:11.916Z","timestamp":1782309731916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Crimson+Pro:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026family=League+Spartan:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://get-etherfinances.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Jun 2026 14:02:11 GMT\r\ndate: Wed, 24 Jun 2026 14:02:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11601,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"841fc03f23f39ca3924d78b797711f59","sha1":"9ebbb46223dfd99d17be47cbafe69c18d447d4c8","sha256":"3eaecdfc5a8c8ce98cabf66b83f34417187d2c6b64c9b2207d3e8dc44db78ecb","sha512":"05482bd2bc6f91e395e8e291ef1378df2a9549604794b96e0bf121027bf89bd64b448f2046b3ec78b99e9d06b677424d446c10e42c7aeca23ca71fe17ba46122","ssdeep":"192:cUO8fO8SRO83M8b8U/8PT808U48PW898UR8P18+8Ui8PYjH9xfcH+xCFHbxxmH0+:cUnfnGn3JQJPIRIPv+vP2X2Pq58E","tlshash":"3a32ff91443ba500db875dc623cf7e33adae6150b440d539affd18c8adaed222365b1e","first_seen":"2026-06-10T17:59:38.253Z","last_seen":"2026-06-24T14:02:45.587474Z","times_seen":31,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}