{"report_id":"be70ea55-c8fc-493a-8f59-0e1385195f6c","version":6,"status":"done","tags":[],"date":"2026-03-11T03:55:37Z","url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"title":"Governing Realtime Ethereum | ETHGas Foundation","dom":{"size":107770,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bd428563cd036938867e965f71f1d2a3","sha1":"4bfcd8f45188332644760e7fa0b6e9a2a5928295","sha256":"1a05cff41ac8c5bfedb035c12149cb6971083164fa2b0b792b8e82b2d3ce7f61","sha512":"fea32fce6756af7ae89d4679a42c9e7905e66936e6b9af505c0948ef83ee4c2836c2999e6e80e502fab2a9ef8e9cd320a4f0478099664340a9baabf75440246e","ssdeep":"768:fvWFuXLCYyxvGceZxqLHDCuoy/LoreD25GpolRX/+fntPurLl6ILji:mcLChvwxmvJ/kreDgnX/+f49i","tlshash":"46b3779651e314592d13b0a41beb474ea335f043c54ece983fed12d88f8abd99da3389","dom_hash":"domhash3a3817aea84338f8a2139c24ebdae408","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-15T03:55:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-11T03:55:14Z","timestamp":1773201314,"ip_dst":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36498,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-11T03:55:14.628725+0000\",\"flow_id\":2165844224402302,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.32\",\"src_port\":36498,\"dest_ip\":\"104.21.31.116\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"ethgas.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":912,\"bytes_toclient\":2672,\"start\":\"2026-03-11T03:55:14.615294+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethgas.icu","ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-11T03:55:40.47831Z","last_seen":"2026-03-11T03:55:40.47831Z","alert_count":19,"request_count":19,"received_data":4984334,"sent_data":8715,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ethgasfoundation.org","ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2026-01-19T19:40:36.632391Z","last_seen":"2026-03-05T13:22:27.663674Z","alert_count":0,"request_count":1,"received_data":9687,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethgas.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T17:43:04.719817Z","times_seen":292321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a0a21af5c4ed404509c83c929641e4ef","sha1":"4dc38bcdc183e8fb66265b3616dadd95634093e5","sha256":"9ae5bcbfda699875bef87d1c92a4b372dc909f08b301d7b61a3e2840554c740a","sha512":"0fa993176fc431562cb72df6561cbf644483fefc5264d7f9cfa4b4e46c853dbbed19db56eebacaf0a2f70be03428bce1d7c6eacfe16d04a712939c2c2844caac","ssdeep":"49152:PakouE2DQwp6i8VdECUIyJtInhhfSOG5kD1z0MztWZpZZSntPT+GcjwD7lq4o9LM:si8VdECUIVgwMFJMTROBCn/","tlshash":"e7069db173a1b0a5479351d814671001f235a88ab00d80ecf7ecd9eb7fa99ca957bf36","size":3992168,"data":"","first_seen":"2026-03-09T00:54:03.3Z","last_seen":"2026-03-12T16:00:29.376274Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-04-04T12:35:18.104301Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ethgas.icu/favicon-16x16.png","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:19.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 389\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\npriority: u=6,i=?0\r\netag: \"69a6b255-185\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hO1ypnodtGlSDmA1LOLIqB12c5crw9e%2FFlsOi%2BVXWFBrATHqyF6gfzJs%2BI7XJdRGdCE7zHHJ%2BQGeDszxfMYuIH6LuvPaz0tDTUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f742f925ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"69f9f39f921375908f7ce7edff37e84d","sha1":"f0e5f77105161ed478a1dfd530b9464eb2c6324d","sha256":"372ebeb97c54ef3dfa35ee53b5b637327852d3ac4e47b66eae6cca8a351536af","sha512":"47301d07500115da571a60e1c239f55bb704448f053a0f597d94103af2ce7bd57af5655371a3242a79d98b94ae23fa9e988b45e9354767f784cbc1c952752110","ssdeep":"","tlshash":"8ce0f1837e663d69ebb311726316456c789a150c859119ca508644550f422e50070991","first_seen":"2026-01-19T19:40:42.408958Z","last_seen":"2026-03-22T23:21:27.666646Z","times_seen":26,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfoundation.org/assets/favicon/apple-touch-icon.png","fqdn":"ethgasfoundation.org","domain":"ethgasfoundation.org","tld":"org"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:19.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfoundation.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:88:80:B8:E7:2D:DD:34:B3:68:2A:6A:B5:88:27:06:CC:EA:9C:D3","sha256":"11:0F:40:51:AA:B0:E1:80:CA:6C:7C:96:8A:B0:9F:63:2F:0D:98:CF:A2:23:1D:B9:A9:2F:B8:E3:0A:4E:75:C1"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8973\r\ndate: Tue, 10 Mar 2026 06:35:03 GMT\r\nlast-modified: Thu, 26 Feb 2026 10:05:54 GMT\r\nserver: AmazonS3\r\netag: \"c71f962ec1df58bfc97c4449f7f1d134\"\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 76817\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: user-country=NO; Path=/; SameSite=Lax; Secure\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 86tpdqfOnxycxg1AXqtDqk5kST8_4cvxKQY0HESLe4ZYK0B0SfWpTA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c71f962ec1df58bfc97c4449f7f1d134","sha1":"46ad99759edbaa73fa8bec1d934ca98548bdc7c5","sha256":"a525825364bd986c40a963067ac23715d84ed72a3bb4179a8a75ac9086bf42cb","sha512":"b89370936621e1de7e55fc95a3e2dc3df34160cd10f775a0e21bcd32b5d505fa366e8bd320d71cdd175c639b1dc05577dd2829278ce50e04660085bc169b75d9","ssdeep":"192:vDa06tI0N6jU4YottgdgYoi57EkE6tM8dhNeLRDGJZhAzBxA+Hypqot:vDa0agjUcX2gYoi5/y8hORKQTACu","tlshash":"1202a020032c80a75ab1837ad2aed7c589068ed6b5a01e8e0f1d54f13f6735f6834d9f","first_seen":"2026-01-19T19:40:42.361476Z","last_seen":"2026-03-22T23:21:27.663784Z","times_seen":26,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":54,"connect":1,"send":0,"wait":14,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/hero_animation.webm","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:19.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /hero_animation.webm HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:19 GMT\r\ncontent-type: video/webm\r\ncontent-length: 194346\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 03 Mar 2026 10:05:23 GMT\r\netag: \"2f72a-64c1bd7771ec0\"\r\ncontent-range: bytes 0-194345/194346\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEf3uswY4UMoGtANaZG7Zvc4sCvJHiCb8JuyVKp4YpXSNW%2BTYvHo2lXjnBfy%2FNQ%2FpKZNqKWV%2Fh5F%2F4%2BH3x%2FobrwRGFfBHQ7NQfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f745f955ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194346,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"e1a97bf33546706693fcb1ccc94b1c66","sha1":"7fa84d5a43c0d54a8141d81562612b85edf40f27","sha256":"6f15124836b2733bce22b39b4da323667847767c5f1daf1d23973ad8895a43b1","sha512":"4e9f5edf03519905df6d669bbf1f242dd9f41a4a1cd240197426f786309fa28d630571b6d1c28731eeb027f37ac6eea1cc5e97165a56b0a3addb12e0791e9634","ssdeep":"3072:/h1Z2Afmge5QElolqii3KwwaDZSgTnMQhezjMiFXVcd2J7wpKS7fZ0sSH1ec2vre:/rZ2Af65j+ls6vYZPTnlhesi8dKYBy1f","tlshash":"691423cec28c6a24cf887abbc7033c98da6f531f64d2519e4e709393dd0aa5069575b3","first_seen":"2026-03-11T03:55:44.221175Z","last_seen":"2026-03-12T17:24:06.232221Z","times_seen":4,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/0335efd2c6f86160.css","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:15.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /0335efd2c6f86160.css HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69a6b255-b6fc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNlLd5zBFC4O7NvQ5KS2fXypyqksJLFsAvtXW3hJ7VEWLoCdP%2Fa2TjKIsb8lI3mzyiTLIlx23whAVR7Ica%2FDhdYz1QwOP%2F8lnmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f5acd955ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27678)","md5":"782c98c4adb4e561c704244a105527ea","sha1":"fc17236579b39ae961f2d0cd559c64cb85debac8","sha256":"fb01e7460a5259f47633346ac5f33d695cba76eaee511d1b16f9da3e481c4e12","sha512":"607f006db25b208a0b0a7eb40724c823313fcf0f690c8bb8fffeeb11e08bf94ffec92ae43db68649e710c14f94c7d8b7f183fadc2e107609506638b09e78c092","ssdeep":"768:NRTR0R8R0Ralj3SYRZAuf6y+vXGPF4LzIAz/Hd:NBiqGgAuiy+IG","tlshash":"8823a9047d1d3f387913bb2101c89a9c920b778bdebe479bbcda161d4d8d78532a8b25","first_seen":"2026-01-20T14:33:48.891897Z","last_seen":"2026-03-22T23:21:27.655872Z","times_seen":23,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/ethgasfoundation_logo_big.webp","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /ethgasfoundation_logo_big.webp HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2180\r\nlast-modified: Tue, 03 Mar 2026 10:05:11 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b257-884\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1V2kBQqTugAfyDCrw70fDAUsHIfXkpCw589iKA3XBwGrPjw8D%2BVUu%2F1IX4scCCxjmToTTvmkiHlIDdJSNMeGeJy8bqhIiCiaoM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f716f545ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53083eecb953b081615969c80dea80ec","sha1":"2df8fa59de276539c3fbff7045393114d02cfa9a","sha256":"5388e317839ab8e23bc966704e66219bf12f191b9a0a9e34e675f4e360377b58","sha512":"99f5ae94c7a6e12e1c91a8f497ece4f9057685ba74fd170dc0f6578bac5ea057a16f96ad96fcf5bd19b7efd44ed60bf746f65cf05676f18a25424798b4c5d438","ssdeep":"","tlshash":"3f411ad378c2f1019af83c26fbb648aa65a2756d7ac304651573853a906f901597cf1c","first_seen":"2026-01-20T14:33:48.884336Z","last_seen":"2026-03-22T23:21:27.64918Z","times_seen":15,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/x_icon.svg","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /x_icon.svg HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5efwiV19Kl4GxBvn%2FBsaT%2Fb%2Fs%2Fe%2FBEpapl3Dlb3z158sifKR9vxfq%2Fuqm3G24hOTStgstM7wFHeAWEaBYn%2FD1awmPdIh3Pne9Gc%3D\"}]}\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a6b255-35f5\"\r\ncf-ray: 9da79f731f865ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f4001da1285d7ad204c6d9cce59f4c4","sha1":"08819e0de04c0c199d0996416c2017042ed040cc","sha256":"7b4d13130c19bad3243d4fc06c1df541132fa92deee6ff8e3a546bbd2c3de383","sha512":"32616d807aa13df2c4fd505275e81bdfc8a9dedacf4d19dcfd93fde7fd56c8ed15ff63afc51d5e54a9cc29616f54faaccc89db6198e06feffd5ef0bb7108d5d1","ssdeep":"384:ckQZgymr3hfWtwT8zE7Y1yJHhOWBmVFyjytiHLTXRvPY:5kObMtwTaE2yJHhOWoDntkLTX6","tlshash":"4d52bf70e70e9c09894ed62b62276852e1fb970ff3c8855ad98950796f53dcdb080837","first_seen":"2026-01-19T19:40:42.396431Z","last_seen":"2026-03-22T23:21:27.662794Z","times_seen":24,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":123,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/f1fc7e4189.php?e=/api/fp","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:19.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"POST /f1fc7e4189.php?e=/api/fp HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethgas.icu/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 00FA-AF60-6C1F-9826\r\nContent-Length: 1292\r\nOrigin: https://ethgas.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1292,"data":"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"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Daf7QO98lFJ1kowmIb2NQN%2BfEJOKuHDLgiXdBuEJgf4s2e%2BG3gVtKnPbR4HIOTTTwq5zdGxNe7FiuGDBszd6UQGjR1zo%2BbHALd4%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f759fa45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3827a63f5cd7b7879dc98c49be4f9eba","sha1":"f1ba01e64ebcbe1320179901f97b5997d85d8336","sha256":"312f17a7fa48dc52aa9ee93bd0aeb8c76284baa7d436ae65abba32064a23ea08","sha512":"b25a0de2ccdefb92a9195269a881cad8ee79418d80dbf0fbd3b7afa13c354dc936cf9b480b94143bfb8f6999d5d44c5cf7698c2467750ea210432943490fa806","ssdeep":"","tlshash":"11d02b40ac1d52b1c8450d4b14432a12871a4f92cd1b646865b94ec069e971f99fb9fb","first_seen":"2026-03-11T03:55:44.230533Z","last_seen":"2026-03-11T03:55:44.230533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/f1fc7e4189.php","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:15.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /f1fc7e4189.php HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAM6tzfRxTUC9Jcs9bpHeEOCIzj%2FAgEHhQhpdeKrHVLHt%2BzQJIMe1nklcjdkF6GEByT9YYEFXVm70wstdVCUJTSTSSkAN%2B%2B%2Fk4o%3D\"}]}\r\ncf-ray: 9da79f5acd935ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449291,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"f5711734b5210bb2806acd0a1676c7d0","sha1":"586143f7e24b40ae3ec6cd6de7a93ba10e7a278f","sha256":"5c52fae6a94b59398e96e3c9eb84df0f6935602eb7315c3b0bdd0bff76647b3d","sha512":"59f7b35a3b89f5e5209ca4450422fd094847ddd06ae81a4378bb54bc3f755b08351b2e90f9bb02a901ebc5adb06e04cf0499a28e05c2877e3361895d15219819","ssdeep":"24576:hhy6omGp3xPNg3gLWW7XQ2AYwh74IBBIk2WXsZmF519KUpSN:ABlVt7XQDiY5AN","tlshash":"96a552598673f3a49ec876e43c1152e4b9b943dfc6cda36d0b6bcce029d583c259a0e1","first_seen":"2026-03-11T03:55:44.232829Z","last_seen":"2026-03-11T03:55:44.232829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1535,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/css2.css","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:15.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69a6b255-132c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDjAJX%2FoP%2Bu1EfaNxF6imuPtMD04C9HZ3cQKF2xlkuDjdYnAitTWGIm3fX1DZJuh73YJl2RNd0unDUADGO4Jxsu1Zs0CNR5KXYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f5acd945ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6610001bfa5e6c48811d2d373e2a901","sha1":"6c9cb16953c0aae8bb6dd4fbea3e47d0a19a19b8","sha256":"531727186285ed362474c320730d9769ed7a5a1c78ba9a48358429d640ca12e0","sha512":"a5c2804fc6d13414c8b30546bf3c1a7f2d41318bc9d0b52ee2b5aac2630238a5fe541ce2fbb8a97be62f3330ca0241abc22b0f389968d75de68ff5a6130c6253","ssdeep":"96:1O4ayJc+uBO4adNDNQOEaPQOEayJc+uhQOEadNDNQOXaPQOXayJc+uhQOXadNDNd:2atLxXaiLCwaRLfpa4LY6a/c","tlshash":"3ba1ca50087aa100d7976cd127ce7f32ae9df140a095ca386ffe0449ed8bd25a3a6b1d","first_seen":"2026-01-20T14:33:48.886822Z","last_seen":"2026-03-12T17:24:06.233542Z","times_seen":21,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/Inter-Regular.ttf","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /Inter-Regular.ttf HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 309828\r\nlast-modified: Tue, 03 Mar 2026 10:05:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b258-4ba44\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AyFaivbmmIRXx1qV6gMTM%2Bre3McnYkUmALHT2dJTbRfauRTiC%2BddHl%2BX8F49aTaZLcicCPS5Mv5p%2Bue1CaGCukWS2EBxuHTFOIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f717f575ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-04-04T14:37:45.571939Z","times_seen":3490,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/InterDisplay-Medium.ttf","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /InterDisplay-Medium.ttf HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 410472\r\nlast-modified: Tue, 03 Mar 2026 10:05:21 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b261-64368\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yq1DI7ZnCQIJgbPnRxCTUA67l%2BrG4SAu7mlohoXOOAEOkfFHbnJ5ZmvCRkh%2FkldI3%2BQ8c%2BXA4qSrUp81fIe7oqTdcTC5BdV0wak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f718f5d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display MediumRegular4.000;git-a52131595;RSMS;Inte","md5":"c3a19669953c82148d31ec5e8dc67858","sha1":"61953e5312b886c32b1c0b7e40da29aca58897a0","sha256":"3728a5143aefa1f75b7d271de56f76659ca726da1fc35973138b27a583d2b94c","sha512":"78cd2c3c092977bae03d83426577b510084ebd735209637b66418b7c704343ca04422a6dadfe38bec9cca222942f31bfff2ba62dd1102abaf0572b782ce61855","ssdeep":"6144:gSpAo9l7yJWPziKSQnY3l6S05wD/FegHOhS5g31s6AZ6j3k4yhM18:gGjl7NPziK43GMIum8","tlshash":"6f945a17e305eb0dd9161e708ab987c033bdfc81791bd28bb96e3b59c9871b40ad62d1","first_seen":"2024-09-18T19:40:52Z","last_seen":"2026-03-22T23:21:27.664723Z","times_seen":57,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/Inter-Medium.ttf","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /Inter-Medium.ttf HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 314712\r\nlast-modified: Tue, 03 Mar 2026 10:05:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b258-4cd58\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCMmTzXZpAmCe5fWlWcqq4OgopAq6tVlRbZSAm%2BuGbfXVSBY8PxlgzfIZdKbBZ3FTqQe88FAYBDXr9%2FZGNyxgHOZ3yfTCoxs%2FSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f719f5f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314712,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter MediumRegular3.019","md5":"ed533866b5c83114c7dddbcbc2288b19","sha1":"a418a8ba73bbcfa8c131c426ab836d78457afa9b","sha256":"10d48331f5b3c7362ca357b00c17ac4863ad35199b13b0eceb0962c8c1ad7dc9","sha512":"f0653d74393bf0b78685cbbdacd1e8180034d51bdefc6af8e0a3a7a4b913a63b20a2c72093f82daf9d99c40efd65ab28d916d3e439087552be4dd7f8a79c6f4f","ssdeep":"3072:2d9CwXSBu/5QJJCz0zF4stCr5x3s5DU+FFlUOUK6EfJyq41tIW+mGMaf/coPHUGB:2d9BX0CUnDU+FFeDER11IzaUX4P","tlshash":"28646c03f363835dd9272d3a87a7c7a063a3bc913a12d20bf7283669ca8b5b44d574d5","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-04-04T14:37:45.592386Z","times_seen":1159,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:15.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 11 Mar 2026 04:43:15 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KEapmQ%2FzRLEwugIcKV1eQttgOFcMM0YBp%2ByZ0N%2FC5EbCDy8cYxa7VnAV0SRE2ZSIDD34SV6aszT3YpNsfbIOEJP46qH9kvG6qo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:15 GMT\r\ncf-ray: 9da79f5acd965ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T17:43:04.719817Z","times_seen":292321,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/staking.webp","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /staking.webp HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85278\r\nlast-modified: Tue, 03 Mar 2026 10:05:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b258-14d1e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpQOVCWM%2FDiSXuXtBTvkE%2BMF12AHkhpWodISWX%2BjepTJsaglHYhLuleGBcsseWVYWLsir5o21J2xyQLIHP1vC0KkEO%2BV%2FA6zlvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f716f555ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1584x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"854d0e85a4e748461b224e8c793dbe0a","sha1":"d35e4a44e5bc61e0393f289e36b8695adf713f44","sha256":"bac844b8a82eb4f78ba82e725c231570ae87b22f7ddc4c787eb1ae759c7c40b5","sha512":"e54a1b8e57f32f20c2b5af7169130f6c0186a48fc3b78d5da0d9ad7cd3b0ebe15872ea0039696d98dd98a1725b6f1a18d95fbffe634a3c66bd56924d294e2aa9","ssdeep":"1536:EzhU9x+o/4Aiinc/+GJAzD1lbSRQJWynGdQwYjtyGwHeqQ:EzhU9xrAAc/+ESVnGotyGw","tlshash":"8783028dec0cf181ce713cf66ad1946948296845f538112ec5339b9b0cd1cfe566eb7a","first_seen":"2026-01-20T15:45:42.452608Z","last_seen":"2026-03-12T17:24:06.240034Z","times_seen":7,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/InterDisplay-Regular.ttf","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /InterDisplay-Regular.ttf HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 403396\r\nlast-modified: Tue, 03 Mar 2026 10:05:23 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b263-627c4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxYSv34ZsPjCqWWv2adwMxQAHYA9CnhuPTMTRcjAsp5TFAl%2BUpb9SBDPGD75bmqWxrGJ3TKjeoEvpB%2BuUYaf0MMgiH7ZFA1%2BvGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f718f5b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403396,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 37 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter DisplayRegular4.000;git-a52131595;RSMS;InterDispla","md5":"6087baf32494adfe1bb91a9cad6aa7cf","sha1":"d95ca7cbad5a031ad278e9d333fcab0f067bfdc0","sha256":"1cb7b997bd7a39ee151752946809bbef50648aa05ff50a855ef642886a57e1db","sha512":"2a9e6b2fff790c3885cd23c4d8b0c439601652326f57cd638639d3eeaeffeafbee9749a4afd724c2103f614fe280b9f68498f133f53fc09cac7b8ffe85e0d30b","ssdeep":"6144:3jWwXSpB22yJWPziKSQLmXGTd5kcAmGTRYZyNAyg5a3ga0wZsTArj3k4yhE18:3jwB22NPziKqe0aMCg8","tlshash":"05846b1beb05eb0ade1a1c3486f693d133a9fc953d1ac28bb05e3a59c9931b40ed71d1","first_seen":"2025-03-13T11:19:58.162328Z","last_seen":"2026-03-26T09:06:49.032014Z","times_seen":45,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/InterDisplay-ExtraLight.ttf","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /InterDisplay-ExtraLight.ttf HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 401652\r\nlast-modified: Tue, 03 Mar 2026 10:05:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b262-620f4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1pNXatSYVuZO4EVCSQZ63iIY5mTfD3%2FUZ12aBzOedEVDYgT6dkoH3tYoNkYe9pVQrRT0xgkoQClcbYKSROb5Rz4OXLxvh94BC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f718f5c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401652,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display ExtraLightRegular4.000;git-a52131595;RSMS;","md5":"a18aff5787993d079bfebfd6b552a6e8","sha1":"980e951ff3374bef6c8f7ea68f689bcafa7f8f5f","sha256":"3e4dba487880c57288fc80acc1c50ae19882f2a260e35af774d304d4c9688639","sha512":"117c16781b28e8dae099003566752ad07eb0116b891ab205f8cc679e92541b4e6e1e95f2564fc9d8d8933d58e12a79112545440049c320418b6e51a06718f064","ssdeep":"6144:F4ZfOCLXEpTCwXJWPziKSQ2U07aaBw55IIs+il2a5Qno3EDtInzVpSVJPj3k4yhv:FofMTCw8PziKd07aINKd+88","tlshash":"db845917e706e70eda1a1d788af987d433bdfc90791ec25b749e3649d9932b40a872c0","first_seen":"2026-01-19T19:40:42.349376Z","last_seen":"2026-03-12T17:24:06.208028Z","times_seen":9,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/discord_icon.svg","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /discord_icon.svg HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvtKpsMhRMziYb5iFdj78a%2B9qUP%2BKJ3VTHYOU%2BFdDljWca42j77Dtvj4TeUF1Ndy12hmCr5uERw62LgU6jbLez0HlQPRsXwRKbs%3D\"}]}\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a6b255-58d\"\r\ncf-ray: 9da79f731f845ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f77b2934e0fec03a670309986c444f59","sha1":"91c88cb0866352f2a7f61633df1994546832d136","sha256":"7ebded967793c4d42b4b787108ff7f47adee22fd2addc772be95a6e1a84dcd7b","sha512":"d468dee67b20954d43b146c1fc49cfa0c3eda482bed20e4badcd2ca331ade85aa379d6a259104c947a17a117247630074e409633734fde76fe18dee676be8768","ssdeep":"","tlshash":"c821aeea5aedb280e702f730d31571741ed610bc3b5a015583d29f3d55251dace8f8c8","first_seen":"2026-01-19T19:40:42.379785Z","last_seen":"2026-03-22T23:21:27.673462Z","times_seen":24,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/vision_img.svg","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /vision_img.svg HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8ORY6NvbuOr8AiK%2BlD%2BEFt9lO17%2BqIs8cyWPeXKuC3dgDiriLcUQRHyP5WbrUfQUO%2F3yIkg354%2BB2xCLyYYhEXIiPKH%2B97i0vc%3D\"}]}\r\nlast-modified: Tue, 03 Mar 2026 10:05:09 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a6b255-793\"\r\ncf-ray: 9da79f731f855ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b06b67b6231880e8db2863d47f388522","sha1":"54566bf14dee5f2ed1591397bb0fc8787691e5a8","sha256":"234d302ba0f93775dbc2d39980b47c400f527a9daa9e717d60f551be740b87a4","sha512":"18fa7b371ccd09b8edbbd117465cc9109da18929280bfdcea78a34a6274bfe748157c2ac927c3ae73ebe8a76a30a80fe85882d3b7a8af5156d2f3b529d32b514","ssdeep":"","tlshash":"7e419f6fd72894bae444c28cfaca90c8764b829764918591619cef7f8c509492cdf3b0","first_seen":"2026-01-19T19:40:42.407186Z","last_seen":"2026-03-12T17:24:06.237619Z","times_seen":9,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-11T03:55:14.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Mar 2026 03:55:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNXXnWI8mvQE%2BC59fq0avw3q1YHx0k1%2BThYsMFW77rlurjC9ozzSQbIZHbKgzDLQg1j25Xcj8ZydY7x1WxK%2B1bOOUfN%2FsZzM22w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9da79f588ea38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106758,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"cffa67e4aa4bae98fc888c8db56a8ab3","sha1":"31df42b8d89189c5c992af2dcf14ba6e115c61db","sha256":"2313600fe300096add7c0dbed453c1de1d3b279ae26ba9b67fdd4293ee4a03c9","sha512":"f8db1abe55478128ce016c4fc4962092e7ae6dac4b997d14a105a1e2b2c5d737fbcb6db6d169a70a69bb3233df40c95f9f10ed058e065a22488aa014a686587d","ssdeep":"768:fvWFuXLWYyxvGceZxqLHDCAoy/Lc9GfWJdOq8rpQ/LLk3Le:mcLWhvwxmBJ/ufOq8ry1","tlshash":"80a3679651f314592d23b0a41bfb474ea325f043c54ece983fed12988f89bd99da3389","first_seen":"2026-03-11T03:55:44.253134Z","last_seen":"2026-03-11T03:55:44.253134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":70,"dns":50,"connect":1,"send":0,"wait":102,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgas.icu/governance.webp","fqdn":"ethgas.icu","domain":"ethgas.icu","tld":"icu"},"ip":{"addr":"104.21.31.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgas.icu/","date":"2026-03-11T03:55:18.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgas.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 09:45:32 GMT","end":"Mon, 01 Jun 2026 09:45:31 GMT"},"fingerprint":{"sha1":"5E:7B:E6:88:6B:65:A3:3F:E3:F4:F1:FC:19:CE:54:5E:BA:BA:71:89","sha256":"6F:F6:EA:EF:5E:A2:C3:C7:24:A5:FE:6E:AA:70:3C:A7:E9:B6:F3:7E:BF:0F:E1:01:8F:2C:C1:48:24:00:41:74"}}},"request":{"raw":"GET /governance.webp HTTP/1.1\r\nHost: ethgas.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgas.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Mar 2026 03:55:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 222934\r\nlast-modified: Tue, 03 Mar 2026 10:05:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69a6b258-366d6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bxlOYuioBLF7GG72xPwBpHdikfasSr%2BifpWKr5rQ0mEEWASpDfB6fiZI8Ak80yMHQ7XyVkyeLakSTBhHTWOE1e8IlA9P8NjiWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da79f717f565ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1584x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a2a0d6d8ffed1da7ca43bc6b7c247b4","sha1":"4d762ec9db61862f800537549eb3c3791f068f58","sha256":"7f8aa9794bf09b654bfb65d773de9f93d4d0fb62a44abe7c0353a7f74d625d38","sha512":"8ec38574aefadb41b315f7ea3fab8a44c5c6c7d680eb6df1c1994e177b75a9e93b8030575b5865b01034668ee2d6cdc2fc2b1b7813b1073e617057e3555fc6a2","ssdeep":"6144:M0Sx6piwbDOUVmW0jEVGgJLtn0kohv7XMm:0x6piwJP0uX5n0jv7X","tlshash":"3e241217736c09a9fbc905786788c7a120edf5302e16de8b5c9dad31b7ec949caf8409","first_seen":"2026-01-20T15:45:42.432089Z","last_seen":"2026-03-12T17:24:06.241278Z","times_seen":7,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ethgas.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}