{"report_id":"b3ffa9fd-bd5f-432b-86b8-9ea7891ddd3b","version":6,"status":"done","tags":[],"date":"2026-01-28T03:40:58Z","url":{"schema":"http","addr":"check-ethgasfoundation.org","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"104.21.6.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"check-ethgasfoundation.org/","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"title":"Governing Realtime Ethereum | ETHGas Foundation","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"check-ethgasfoundation.org","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"104.21.6.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T03:40:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"check-ethgasfoundation.org/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"check-ethgasfoundation.org/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null},"summary":[{"fqdn":"check-ethgasfoundation.org","ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":22,"received_data":6152483,"sent_data":10591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ethgasfoundation.org","ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2026-01-19T19:40:36.632391Z","last_seen":"2026-01-28T01:02:07.599825Z","alert_count":0,"request_count":1,"received_data":9687,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"check-ethgasfoundation.org/2f21d318-62fe-4e18-bbce-eda0f9f38210","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T18:12:06.649103Z","times_seen":5109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"check-ethgasfoundation.org/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/orion.js","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"check-ethgasfoundation.org/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74ebbaec04075207461c3a5ebe42e634","sha1":"044a7b41800e133de4c3a57fa1b6406cbe8a6384","sha256":"9dbd08557d7969da07b2901c9b63f401efd4dcf983aae5ebeba9612504f79def","sha512":"b5575f74af50b5e4efd5c96119754f686c0eea4bb910ebe67b4d2bc03052b927c2b4bff1b5dc21c973950e803f6e8d65c933e0a6ba2f3af1c544d567a87dfccb","ssdeep":"","tlshash":"65f0505d37f632b9627f1262d103c889be40416070dbdc8e605c40d95fd7e6470dea9b","size":521,"data":"","first_seen":"2025-04-23T13:46:41.390151Z","last_seen":"2026-01-28T03:41:02.846565Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T22:56:56.816967Z","times_seen":418258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"check-ethgasfoundation.org/x_icon.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /x_icon.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-35f5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxFUkKsFdR7dtkU5RTqGnX6PofnAhLhJsU2As6C5X4uPgzck7QVq4%2FrIvngEBoPBfpcTvKyOcn59oFL5urDZ8KhT9NZ378gFKRQBb2nP51Db2aCO2G27iPVf\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d782d6a9db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f4001da1285d7ad204c6d9cce59f4c4","sha1":"08819e0de04c0c199d0996416c2017042ed040cc","sha256":"7b4d13130c19bad3243d4fc06c1df541132fa92deee6ff8e3a546bbd2c3de383","sha512":"32616d807aa13df2c4fd505275e81bdfc8a9dedacf4d19dcfd93fde7fd56c8ed15ff63afc51d5e54a9cc29616f54faaccc89db6198e06feffd5ef0bb7108d5d1","ssdeep":"384:ckQZgymr3hfWtwT8zE7Y1yJHhOWBmVFyjytiHLTXRvPY:5kObMtwTaE2yJHhOWoDntkLTX6","tlshash":"4d52bf70e70e9c09894ed62b62276852e1fb970ff3c8855ad98950796f53dcdb080837","first_seen":"2026-01-19T19:40:42.396431Z","last_seen":"2026-06-24T15:53:06.893562Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/css2.css","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-132c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBLoXq9oGkbsRez4HSV%2FEI1CKgjThcT15wFxO3nVyt%2BcFprwBaE%2F7edLIRpYz%2FXQDcAoCMaey5Rkuf%2FXI%2FY25hQupC7HbSEn07Bho%2Fw9CvQ9JE%2FQmMO110g9\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c4d7824aa25b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6610001bfa5e6c48811d2d373e2a901","sha1":"6c9cb16953c0aae8bb6dd4fbea3e47d0a19a19b8","sha256":"531727186285ed362474c320730d9769ed7a5a1c78ba9a48358429d640ca12e0","sha512":"a5c2804fc6d13414c8b30546bf3c1a7f2d41318bc9d0b52ee2b5aac2630238a5fe541ce2fbb8a97be62f3330ca0241abc22b0f389968d75de68ff5a6130c6253","ssdeep":"96:1O4ayJc+uBO4adNDNQOEaPQOEayJc+uhQOEadNDNQOXaPQOXayJc+uhQOXadNDNd:2atLxXaiLCwaRLfpa4LY6a/c","tlshash":"3ba1ca50087aa100d7976cd127ce7f32ae9df140a095ca386ffe0449ed8bd25a3a6b1d","first_seen":"2026-01-20T14:33:48.886822Z","last_seen":"2026-04-04T20:40:30.397198Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/about-token-icon.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /about-token-icon.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-328\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPzTqqUJSlRm3jlkZqfzRVnrznexExuYUGx%2BYd4bWmdmQJGAcUsQDiDo9nCd75ysSn5z4jUkWPj6zO%2B7PjtX8H1D4ERbMNRKqcoUvtmzRoW361J16XYg8hfq\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d7824aa29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14bb5d246a626823c4af0c7ea066e293","sha1":"40484e7a7cdab5743f5274013a40ab00db55e785","sha256":"ad9f8186a18360ff36242d910e9cf0127ac28e6bc6afa03bd939e629b30570ae","sha512":"b3cf2caf3f3eb5ff3b95a300e0410982069e2bc41815af565deb3ac6519a93511bee0bb32b69ff85c4ae556f09da7ef2d7c104a7b67ab6416f29ba9e3bab3add","ssdeep":"","tlshash":"5801f1c6b5d825e0f8190322467f6476117708fd2f6812d086a0212bd158deedc9fe88","first_seen":"2026-01-20T13:24:06.813216Z","last_seen":"2026-03-22T23:21:27.642142Z","times_seen":13,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/about-staking-icon.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /about-staking-icon.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-170\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0fuIx%2Ff9LqDnUrYr83jO1fOnc7nwaXeOSfCZSYpCGFtRJXyk3PXGXT9mXqkX5mpyj42c3h%2F35%2FYwvFWlH74mAgQxM2hx8FBWNLfLG6KEReOiPTI7xioBLTh\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d7824aa2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1f766438e7f00ff846f63744d05dba7","sha1":"77caee660aae1372b850e206d90c4601c67649b2","sha256":"17d73d9eead2adf39a15457fb5a864f22eb98c032f71e8c20eed4d53d3647bc1","sha512":"3e23e8cf65e0e31d7870a146d2246a11e383abdb98a71a96f55f4958ac728a9d53e49de1a16989010512952c6ecf9c4ea2d1854195b3a9305387aeb5b1168505","ssdeep":"","tlshash":"7ce0205d53496d7476714204f33f7068d4be5151032e7184c5703638e84a68e387b5dd","first_seen":"2026-01-20T13:24:06.857254Z","last_seen":"2026-03-22T23:21:27.659447Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/ethgasfoundation_logo_big.webp","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /ethgasfoundation_logo_big.webp HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2180\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-884\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1yn8o5%2FOugxoRV2OZgHJEc00LNpG4a%2B0BwA99dPE%2BslRUSQw8j%2B%2FoT08ewi%2ByhhXkEvj%2FQ2kc4os9xkPFlTPuRxfJYgvFVVmB%2BdGw8WeHuDXXAKxnuTVzTg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782cea94b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53083eecb953b081615969c80dea80ec","sha1":"2df8fa59de276539c3fbff7045393114d02cfa9a","sha256":"5388e317839ab8e23bc966704e66219bf12f191b9a0a9e34e675f4e360377b58","sha512":"99f5ae94c7a6e12e1c91a8f497ece4f9057685ba74fd170dc0f6578bac5ea057a16f96ad96fcf5bd19b7efd44ed60bf746f65cf05676f18a25424798b4c5d438","ssdeep":"","tlshash":"3f411ad378c2f1019af83c26fbb648aa65a2756d7ac304651573853a906f901597cf1c","first_seen":"2026-01-20T14:33:48.884336Z","last_seen":"2026-06-24T15:53:06.917118Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/airdrop_tile_bg.webp","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /airdrop_tile_bg.webp HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54414\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\netag: \"696fdcb4-d48e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WECJdoPD4PYHcdD9GPLYX4n10Qu51YGoiihsT97M0SrbwReRC3Q%2FtRZ5pHU02HmmuyWPCiOj8F9OruVCcIdIlBb%2Bstqn07ewD7MZiassysfAWe7G3MiLVfAK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782cfa96b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14d205be078723571ccd6047cfa1bca9","sha1":"39ff92c075cc7631d5bcfe03e05e69d6e2ab3fe5","sha256":"2d91fe0b81d733d35aa6c2dc4ec11f42dae25d1f825b09f83966b128fe1bf9df","sha512":"c4aa9266a13c1406e99b3955dd143fc4360f11990626804cc951bf329fda0b309203607b279df996d4b081183b511269546fe231834b41ecc9a53c52c1c9b4c0","ssdeep":"1536:TYm5rpJSe9+r1VD/ka6cWZDtojaqj6EF5Ai6/q3o6Ws:TTdpMf1VD/kUmJnqj68KUo/s","tlshash":"fd3302845184e266cf07f9f38e6a4f6391fd30da5b0e271e4199d44357c89e0cea8eb6","first_seen":"2026-01-20T14:33:48.889321Z","last_seen":"2026-03-22T23:21:27.660915Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/Inter-Regular.ttf","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /Inter-Regular.ttf HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 309828\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-4ba44\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltxaZHysbIKEnGm%2B7R1cMIRVOWeQKftNSqjMOthCYNXWwHbr9xN9YyfeCEHPJo05aVt9RuIMYswAnQcaFzD%2BuxCi%2FF9r3p3P7BHYSFz2YTNcKif3wAh0EsMZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782d1a97b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-11T19:22:37.462716Z","times_seen":4424,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1135,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/discord_icon.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /discord_icon.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-58d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7t3ARCpqScydV4jQPXYa3zSfie92x9DqNns%2F17g%2BXcewylnvQYDvL01sMFUVmNgaShqWPEW5afWrsVC3FX%2FevhfcZHIA%2F7H2TVwjG7U7vkrwRrLLV53%2BMW7U\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d782d6a9eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f77b2934e0fec03a670309986c444f59","sha1":"91c88cb0866352f2a7f61633df1994546832d136","sha256":"7ebded967793c4d42b4b787108ff7f47adee22fd2addc772be95a6e1a84dcd7b","sha512":"d468dee67b20954d43b146c1fc49cfa0c3eda482bed20e4badcd2ca331ade85aa379d6a259104c947a17a117247630074e409633734fde76fe18dee676be8768","ssdeep":"","tlshash":"c821aeea5aedb280e702f730d31571741ed610bc3b5a015583d29f3d55251dace8f8c8","first_seen":"2026-01-19T19:40:42.379785Z","last_seen":"2026-06-24T15:53:06.874121Z","times_seen":60,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T03:40:34.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 03:40:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=722PCULuVylT76EvEMjhw5A%2FtoW3dORalPWCdyWlYDN%2FnNiq%2Fkecoakr7Vlrwwtj%2FUH8NXKJuTzSZEJnt%2FvskwM%2BZkfBelZWVvO%2BSDu%2BZ94Ir%2BvBdFAaqA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c4d781c5f1cb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69568,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14181)","md5":"6e43661ac3bbfa403083c32290eb588a","sha1":"277db1493481e6a09253b2ee154271d13689cb8e","sha256":"33615c14db6c09be1131e59ae24167dc764b415fe39b4b96a9ac7360565a9f3a","sha512":"ef5d84aef830a56ecf3762796c28bd5492d4fc4798e695e93c6d68336400de541c129b927fcaf5562659ee5731e1ce7d7d4b8b095a1b34e5e6f8718755db4bf4","ssdeep":"768:0zBQX7csHzhfv/oLhjFcpc2Gq7X8ERQUHRq:0zmIClnojcfU","tlshash":"716308215560293a651b6894aafb5b0cd322d253c54e26ed7dee104ccbcffd607b238a","first_seen":"2026-01-28T03:41:02.836414Z","last_seen":"2026-01-28T03:41:02.836414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":29,"dns":5,"connect":1,"send":0,"wait":1141,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/contacts.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /contacts.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-222\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guGELEITZ%2F6e%2FpAHBKMoVqsYVBvpK8qxgkMw5TpMtVab2fUeI0O%2BhVnEX5aDGDlzMW2Od5%2FWe%2FZRREK9ZDXX4BvT6FBKYJyI9vzdrqVaInQHj7QPW%2BUPpnfA\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d7824aa28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d69baceab40edef2d14baa64d4294524","sha1":"ad7977b7c599144fefffb6c52b3b5b272187570f","sha256":"0fb8a20112de321337e270c31ad77e0ff1babe7b6da71808afb35ac13e0e6732","sha512":"99fe93533a644e45c5370b0abad44991dc45d4ce114493350f94015b0645b20914e4ed4afb173e92b60be4b56c728a87ecab83ed38ac28ec07cf0e7c1ef69a7c","ssdeep":"","tlshash":"05f09efbe74a1620e4998bf123391d3d6bb608a62d95d1f064f013b173203de0d2b4c1","first_seen":"2026-01-20T13:24:06.8434Z","last_seen":"2026-03-05T13:46:43.404087Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/InterDisplay-Medium.ttf","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /InterDisplay-Medium.ttf HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 410472\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-64368\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHHTBij%2BuHlbKmjeW%2BaymXBtH7uJ1t00ab77YFbErPd%2Fj0zGz%2BnmNBYuB7PhpNQhZWv1NXnCK9KuxW6PJOHNHVg7fMR4BTuCFVZhQJIFibyhQ5tQIWZIUQmU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782d1a98b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display MediumRegular4.000;git-a52131595;RSMS;Inte","md5":"c3a19669953c82148d31ec5e8dc67858","sha1":"61953e5312b886c32b1c0b7e40da29aca58897a0","sha256":"3728a5143aefa1f75b7d271de56f76659ca726da1fc35973138b27a583d2b94c","sha512":"78cd2c3c092977bae03d83426577b510084ebd735209637b66418b7c704343ca04422a6dadfe38bec9cca222942f31bfff2ba62dd1102abaf0572b782ce61855","ssdeep":"6144:gSpAo9l7yJWPziKSQnY3l6S05wD/FegHOhS5g31s6AZ6j3k4yhM18:gGjl7NPziK43GMIum8","tlshash":"6f945a17e305eb0dd9161e708ab987c033bdfc81791bd28bb96e3b59c9871b40ad62d1","first_seen":"2024-09-18T19:40:52Z","last_seen":"2026-08-02T08:46:10.038211Z","times_seen":116,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/Inter-Medium.ttf","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /Inter-Medium.ttf HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 314712\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-4cd58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1airIkmqkwL1%2FRCm5DjYUloQ8UEENSxuvGVY%2FXMYOXSqlmlXADv25Y98ygXrIM3H1uOqpnHQQdgZEtlD2N4rY8%2BfmTENWjI3%2BHkD%2Bs7bvSefi3Eona%2FFcMWy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782d1a9ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314712,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter MediumRegular3.019","md5":"ed533866b5c83114c7dddbcbc2288b19","sha1":"a418a8ba73bbcfa8c131c426ab836d78457afa9b","sha256":"10d48331f5b3c7362ca357b00c17ac4863ad35199b13b0eceb0962c8c1ad7dc9","sha512":"f0653d74393bf0b78685cbbdacd1e8180034d51bdefc6af8e0a3a7a4b913a63b20a2c72093f82daf9d99c40efd65ab28d916d3e439087552be4dd7f8a79c6f4f","ssdeep":"3072:2d9CwXSBu/5QJJCz0zF4stCr5x3s5DU+FFlUOUK6EfJyq41tIW+mGMaf/coPHUGB:2d9BX0CUnDU+FFeDER11IzaUX4P","tlshash":"28646c03f363835dd9272d3a87a7c7a063a3bc913a12d20bf7283669ca8b5b44d574d5","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-10T14:28:40.325671Z","times_seen":1487,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/sigma_prime_logo.webp","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /sigma_prime_logo.webp HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6534\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\netag: \"696fdcb4-1986\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2bIFi3FL9YadHx7mNtEd%2FfADPJCrdnB5g9aivIhpg%2F0%2FcdHEgkZMyztQ5iLxBkRWlCQQyuA1dKXZ8ScKODlwJo46uRhcnlFknYIM6LPYziz4AqZ4QmEXePD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782d8aa0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b682c206d539eadfefe392c98c1001db","sha1":"d6aecfbb3ac96e210f61eb975459dc223d419b1c","sha256":"8ef6863a54449c4d2c2d45777d1ea20bf1160a7343e14c9f7f56394184a855cc","sha512":"f3b44dc33a3914f9ebf51788351e33f2e3054a2a58e03c66d0f795d2b79ace471b714fc7108ec2aba7d7eaa1a9f205cea02b70a12c115f4a06a8d373c062bb8d","ssdeep":"96:30buoxjw8mCmIVnuqsX+0pGhQN8fIszxKftbQ3NtKyIIjmypfDS37eq:30bPxTmCuV5GhjIQxKftENtK9IldW1","tlshash":"1fd1ae2938a10b384eeddeb45cf2d6af4e168c4150b03a71185b1e13d4b4bcb17718dd","first_seen":"2026-01-20T14:33:48.878176Z","last_seen":"2026-03-22T23:21:27.654727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/secureproxy?e=jscdn/getFile","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-ethgasfoundation.org/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://check-ethgasfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5i2ti5F4Xi9ZjWvqV0IAidLvrykB5CDIDbOMMTEGE148BY8COXudwdv08nIKe%2BSO%2BWInmo%2Fjqw9Y%2BAjVoCZDSvq8OnRR6JEtqOnii0qpFWnw%2FQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9c4d782d8aa1b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4256566,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ff9347966e5c17371b7005df33519f8","sha1":"bf5d687d56cd98d868b592c72a76bb3d9655422c","sha256":"8dc798f3966b1978cca689024137007944e2fd37673dfaf9fe6cc2346c8fc032","sha512":"149b4b324371d82c2745fd5dcacbe87c3d61a3ae1a494928fc8b46cb5ab49e6dab53401d4d3c29082190b33386feb1c1ccd151877fb5c4f91632af9be2dc740d","ssdeep":"24576:FnvFI7AFTUx/Ps/4//E+1+vszd8MnJ+rvqf8:FnvFI7QTUN0/4nr1csoLqf8","tlshash":"d82512e6b055e0c32625886aeae19dbdbad3109d7dd60e737a44fd8530ee014c798fe0","first_seen":"2026-01-28T01:02:11.706408Z","last_seen":"2026-01-28T05:20:04.912664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/orion.js","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-1a5d5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2Fw9k4clnfsJW1EvNRGtm%2BjSC2nEKrMw7CDG5X5F1qUxObazUjTl0WOA8mF0ohcZRtlWNJc79y5KW7fzayaxdySoiQsPcdy4hTZYS0N%2BSahUdKXC%2BfCuqo6d\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c4d7824aa24b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"check-ethgasfoundation.org/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/0335efd2c6f86160.css","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /0335efd2c6f86160.css HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-b6fc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elJgnxcLLj2ZMnQ2UikpXiwtmVMmGpiof2TtY%2FT7zZiICCRwflR2p3gESEk95fMbZ4sCIHVKbT7DWIoGjMcnQk%2F%2Fq%2BpzIqYzXvQ68OVw%2FsY%2Fyf%2BnRYlEXk8W\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c4d7824aa26b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27678)","md5":"782c98c4adb4e561c704244a105527ea","sha1":"fc17236579b39ae961f2d0cd559c64cb85debac8","sha256":"fb01e7460a5259f47633346ac5f33d695cba76eaee511d1b16f9da3e481c4e12","sha512":"607f006db25b208a0b0a7eb40724c823313fcf0f690c8bb8fffeeb11e08bf94ffec92ae43db68649e710c14f94c7d8b7f183fadc2e107609506638b09e78c092","ssdeep":"768:NRTR0R8R0Ralj3SYRZAuf6y+vXGPF4LzIAz/Hd:NBiqGgAuiy+IG","tlshash":"8823a9047d1d3f387913bb2101c89a9c920b778bdebe479bbcda161d4d8d78532a8b25","first_seen":"2026-01-20T14:33:48.891897Z","last_seen":"2026-04-04T20:40:30.379636Z","times_seen":24,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfoundation.org/assets/favicon/apple-touch-icon.png","fqdn":"ethgasfoundation.org","domain":"ethgasfoundation.org","tld":"org"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:38.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfoundation.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:88:80:B8:E7:2D:DD:34:B3:68:2A:6A:B5:88:27:06:CC:EA:9C:D3","sha256":"11:0F:40:51:AA:B0:E1:80:CA:6C:7C:96:8A:B0:9F:63:2F:0D:98:CF:A2:23:1D:B9:A9:2F:B8:E3:0A:4E:75:C1"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8973\r\ndate: Tue, 27 Jan 2026 09:51:28 GMT\r\nlast-modified: Fri, 23 Jan 2026 09:44:33 GMT\r\nserver: AmazonS3\r\netag: \"c71f962ec1df58bfc97c4449f7f1d134\"\r\nvia: 1.1 62e740a3ccdabe7c6d3d19052f330dca.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 64151\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: user-country=NO; Path=/; SameSite=Lax; Secure\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qyCOQ3pmyvd8QjszNyHaJUE3Bo38PHezulXdU5oy71GwXoapFbKhlg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":8973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c71f962ec1df58bfc97c4449f7f1d134","sha1":"46ad99759edbaa73fa8bec1d934ca98548bdc7c5","sha256":"a525825364bd986c40a963067ac23715d84ed72a3bb4179a8a75ac9086bf42cb","sha512":"b89370936621e1de7e55fc95a3e2dc3df34160cd10f775a0e21bcd32b5d505fa366e8bd320d71cdd175c639b1dc05577dd2829278ce50e04660085bc169b75d9","ssdeep":"192:vDa06tI0N6jU4YottgdgYoi57EkE6tM8dhNeLRDGJZhAzBxA+Hypqot:vDa0agjUcX2gYoi5/y8hORKQTACu","tlshash":"1202a020032c80a75ab1837ad2aed7c589068ed6b5a01e8e0f1d54f13f6735f6834d9f","first_seen":"2026-01-19T19:40:42.361476Z","last_seen":"2026-06-24T15:53:06.942461Z","times_seen":62,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":3,"dns":14,"connect":1,"send":0,"wait":6,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/favicon-16x16.png","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:38.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 389\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-185\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0n5eolkJGKyd60J3L540WeJ3cwAvjYSDRKPtj52aYnvXKbiu0okd8ap99inp8lt0soA%2B4Fv1f96QBjVkHJ30NGlilzRPFtfOigMTMI8qsdsxl5fINSZrQ3zJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d78320acbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"69f9f39f921375908f7ce7edff37e84d","sha1":"f0e5f77105161ed478a1dfd530b9464eb2c6324d","sha256":"372ebeb97c54ef3dfa35ee53b5b637327852d3ac4e47b66eae6cca8a351536af","sha512":"47301d07500115da571a60e1c239f55bb704448f053a0f597d94103af2ce7bd57af5655371a3242a79d98b94ae23fa9e988b45e9354767f784cbc1c952752110","ssdeep":"","tlshash":"8ce0f1837e663d69ebb311726316456c789a150c859119ca508644550f422e50070991","first_seen":"2026-01-19T19:40:42.408958Z","last_seen":"2026-06-24T15:53:06.919673Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":1105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/ethgascoin_banner.webp","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /ethgascoin_banner.webp HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117546\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\netag: \"696fdcb4-1cb2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n01%2FG7FY1ADoI9uyTCtJ6BUFpU8CdblOhHSo5uj9ZOjnhEhb%2BZy%2B9qKQh6Y178mlHfZhwZ7OjlsW2WUqww%2Bqlu6slLrHuyDXl2G1TBfiqy2DRngT5jM7tz28\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d7824aa27b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"247f4a40228702ed7763ba99ab36f7f6","sha1":"132f48cf9271165a6cac4a5b8d1176ea31e5d5f5","sha256":"b22022a27deffc26707c921476121fd106b464e49ad836a861fd402e7e463f5d","sha512":"7465a06463cdb617c7479a5f9303ef4d2c18f8a00c2c6a72d8ed1c2b80110b7ebd6ad5b87a9172ffffc91f4cd6996e423be6a4528f2257542cc74507eb663ea7","ssdeep":"1536:KHqvQoI1hOO2eiJYv+MUJa1Xjm8owHy76kVqzRaxfbXnyPESuMfaIvwFxWYRhF:jvQoIeO2emM8kTmKHyJVT7KRvNuF","tlshash":"e4b302491bd6aca3fdd6633894821101ff6945cca9b1e82ee77814b34783ee04d99f88","first_seen":"2026-01-20T14:33:48.887695Z","last_seen":"2026-03-05T13:46:43.399898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/about-governance-icon.svg","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /about-governance-icon.svg HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696fdcb4-252\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqQVxzGOBfPEoMHar91zENgbjfZh2k31w04Ba6h%2BsSdtkWJlIikQi0jcXBafq8C8hJllfEFbpcRt1rnADIqsXq5AZLobb%2FUzM9sx%2BXkN%2FMSKoTiommuQTpkj\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4d7824aa2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bc4e32d1227764ad26238a6f009a047","sha1":"c304129da7110712537f6ac96eb0eca887069672","sha256":"0af33ee78b9491c43d6de61a4b59670e64248c56926a1c536c8905c993529f84","sha512":"88156904874029a99e877cafa0ee7ee63bcbebda5e6fd62bb0a828a3fa8f2c47c33e6f8b65b83af67b09aa92898d99850e5189da90bf5fe0b3a019fb08695e6d","ssdeep":"","tlshash":"7df078968204b751b4b8df116719a474d93a20e08d5c80acc5a022287a2959f68ffddd","first_seen":"2026-01-20T13:24:06.848106Z","last_seen":"2026-03-22T23:21:27.647171Z","times_seen":13,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:35.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 28 Jan 2026 04:28:35 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1RUCFX6YvCvdorx%2FvwfAyUtcvE%2BgGXf27ykqsImbCo%2BnXulDOFrBabFdbCqamww1bdEtvkudmDp0tuWOH5VsVqzaTTv5ql%2B5X6%2F8JVdfla4iZT6TCcFWHvW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:35 GMT\r\ncf-ray: 9c4d7824aa2cb28a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T22:56:56.816967Z","times_seen":418258,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/tokenpage_banner_1920.webp","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /tokenpage_banner_1920.webp HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4388\r\nlast-modified: Tue, 20 Jan 2026 19:51:16 GMT\r\netag: \"696fdcb4-1124\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xl2JBGqRcHU4gJ3mKhQ6MRCCowcawUE6gg%2FAhG6z3Wp5NWEisUC2PH9cLoAewKQtl6%2F%2BX8S%2B4U7WfEBzYLnuYVjEIyEXyQ6F0J4yQzZaSg0NCp7Lp0oEz8E7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782cfa95b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01cc21fe10aebcc967d7fe9b75a51717","sha1":"0d6e10b1bfa4c71d7f03ee01c78c850a99464b07","sha256":"9ca0051b8ed5fecd9044e04a70ac1240522eecdb2d2e7ea9c5648d37d4b7ea8d","sha512":"34d2ba7b4944e870f1c4c7cec4ac75379e5bcc7fe656f7cd7e3cc64746621694c9076232c19c0d851721fc503c2a78ade4f59d9e76b2326bd6a605c18a83bd7a","ssdeep":"96:savSFVhKnhHLszE6JJHAlZ9hj9X7uXna/ghIuWR:s+fnhrso6J6lZnh7uXna/ghHWR","tlshash":"1f9173874b4ec52bc6bc7fb74015b680cbb09262e038dded16a49b6afd863c814dcc41","first_seen":"2026-01-20T14:33:48.874911Z","last_seen":"2026-02-13T01:34:12.575584Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-ethgasfoundation.org/InterDisplay-Light.ttf","fqdn":"check-ethgasfoundation.org","domain":"check-ethgasfoundation.org","tld":"org"},"ip":{"addr":"172.67.135.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-ethgasfoundation.org/","date":"2026-01-28T03:40:37.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-ethgasfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 19:03:53 GMT","end":"Mon, 20 Apr 2026 20:02:20 GMT"},"fingerprint":{"sha1":"41:2D:96:27:81:25:6B:5B:38:25:7D:DC:6A:98:1E:D2:D6:7F:C9:1F","sha256":"D3:61:00:14:01:0D:E1:20:5F:DE:90:15:56:96:97:28:4E:7E:E7:BE:89:5E:55:16:08:4C:00:83:40:F5:60:37"}}},"request":{"raw":"GET /InterDisplay-Light.ttf HTTP/1.1\r\nHost: check-ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-ethgasfoundation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 03:40:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 407588\r\nlast-modified: Tue, 20 Jan 2026 19:51:15 GMT\r\netag: \"696fdcb3-63824\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYwAiq8Z1k8rTQCig9nMxOozT9j%2BoyG0wC6IFK0o%2Fg1%2F1Ui2ethffgBP9bEShEuwxhaWI0pyqZUIO7n0k1tPeMS0nF%2BHYKtr4DzIeYLHgquXf9OFocyb7P3Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4d782d2a9bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407588,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display LightRegular4.000;git-a52131595;RSMS;Inter","md5":"942c280285b66e30a388c8783f58ff58","sha1":"e3f917919e091092732bba14a127268f5b4a0c5e","sha256":"048b1b3e98489f449634931483756f3b77179774cea9e597d91bd3880668053a","sha512":"6233d468c9c52ac3235e53c4dbaa26f16cb332f3ddab19606785446987b36045c6dfec7eee1d131f49d23f41d47997ede83c12a957381e78ffb88e409594d324","ssdeep":"6144:NbNGZ6SrIXgpWw+JWPziKSQRxl4wG3hJRZTuHEJhMqym85Z38isBj3k4yhk18:Nhq6qWwZPziKjlBhEJcm38","tlshash":"cb846b17e705e70ece162d348ab647d433bafc907d2bd25bb15a3a58c9d31b40aa72d0","first_seen":"2025-12-21T04:40:24.961138Z","last_seen":"2026-07-14T00:15:20.127448Z","times_seen":14,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}