{"report_id":"d9cc5c67-812b-4948-ad2e-5a9a64a6a18c","version":0,"status":"done","tags":[],"date":"2026-06-25T00:59:19Z","url":{"schema":"http","addr":"web3earnprotocol.com","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"web3earnprotocol.com/","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"title":"Aethir - Home","dom":{"size":7597,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (511)","md5":"711f98332820d3e950306b92e4f4fc6a","sha1":"929a2b7aabc4734d07283e11670b72b14caf9da5","sha256":"72b1ea0266326e8aebbfb0930d59bd749d183b802e49084fb5c6d396fa211cb5","sha512":"4a012c680e9799a298baac7b750c277417698c1c62b1dfcb728844849068a6e80885957c1e3810a131f7502dcf4af9726f95e72cb1b70f8e65f5d8a475ee5f5d","ssdeep":"192:RbDrzqd9Usco/Ke52mrN8MxqDJ8RFe/GfcJ7:RbfzqFxP9NNYDJokGfcJ7","tlshash":"79f1f8628b84152b020315d47574ab34ecf04a16d707ad59b1fe02acaff0f979a3369c","dom_hash":"domhash3b2c6a010111b6fc0f00710043d7cc47","first_seen":"2026-06-25T00:53:12.37934Z","last_seen":"2026-06-25T00:59:21.129153Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"web3earnprotocol.com","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T00:59:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.iconscout.com","ip":{"addr":"172.64.147.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-06-01","domain_rank":1011342,"first_seen":"2017-01-06T17:08:07Z","last_seen":"2026-06-19T13:48:12.092721Z","alert_count":0,"request_count":1,"received_data":5496,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":1,"received_data":15709,"sent_data":576,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-06-22T07:41:25.842388Z","alert_count":0,"request_count":1,"received_data":21686,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"web3earnprotocol.com","ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"domain_registered":"2026-04-09","domain_rank":0,"first_seen":"2026-06-25T00:53:07.079512Z","last_seen":"2026-06-25T00:53:07.079512Z","alert_count":34,"request_count":17,"received_data":1923046,"sent_data":8331,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap:2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"cdn0.iconfinder.com","ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":762823,"first_seen":"2012-08-19T15:27:35Z","last_seen":"2026-06-21T06:22:11.642885Z","alert_count":0,"request_count":2,"received_data":35120,"sent_data":1179,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":6847,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn1.iconfinder.com","ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":518439,"first_seen":"2012-07-15T20:26:59Z","last_seen":"2026-06-24T02:00:10.218278Z","alert_count":0,"request_count":1,"received_data":16535,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/main.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"83947368c25853f0c04f04ed0de17cef","sha1":"e98efb17543108d1a921120a6f33435e5afa23a0","sha256":"400db121a9da2bb948b5c2b78a4b74d0dbf2be6353917bef973116c0943f31f0","sha512":"1329ad96a90b89e2d76f7ea8ec9199cfd1bf29d02f6a634faaa754dbfeebd38f2a1f4144ebbb4db825ab53414828eec9e4c402625956abf35299b1c3f602aecf","ssdeep":"","tlshash":"ac51f01e51662031457ba32dab7bdb84fab8011bd14291273cbf46882f70b9515f0fcd","size":2893,"data":"","first_seen":"2025-09-20T22:00:03.570475Z","last_seen":"2026-06-25T00:59:21.154101Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/bootstrap.5.0.0.alpha-2-min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a3a39a965ab0d1dec09c0ab0c896a5","sha1":"579c3bdbc0c0e3915efc36014401201be92db2e2","sha256":"f7f3c24178f18044f4b6b60ba67afc5568c6e08abaab91a07110bcac46d61fa8","sha512":"2ce163d229a48ddaecae019aed65bca21c8e6a49f11a09fa43b2ad83abe898ccacdb4bfa7b38e36ebee29d5a49e2b03eb05a4cd1a561c4f5ce1b5e819c60fcf7","ssdeep":"768:pEXnUINDYnur7uHVMAuUXrt75TtVkNLoozl0FIlBviiOnARRwa6LED3IMNM1o:pO57gqefoAn8RlDx","tlshash":"0c538249b254787205df747a807b060fb73a2899a446813cb96ad8de1b7cc897273f7c","size":63422,"data":"","first_seen":"2025-09-20T22:00:03.569369Z","last_seen":"2026-06-25T00:59:21.149919Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/count-up.min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee23ac13aa348210bb7293ee257c59be","sha1":"531ed6aa96ed4e8f8fa2e1cd9b9cf3cbff6fa579","sha256":"dfab708f99d677edf763e997189f2c6692142152e81a7a370ca1f752303eda1b","sha512":"aa5a6ac6ccc87a4e1c221846a8246d54b20d2592a70cc8c4afa1039380a68b95bc307d1c0350cee03a3a2a6032e395b14bf362b08113ae5c1568fd55b631b178","ssdeep":"","tlshash":"5d3111657537dca90e2201d9b10b19509662963e00eb485cbff2c8c46de3c0d9d0ab7d","size":1622,"data":"","first_seen":"2025-09-20T22:00:03.556294Z","last_seen":"2026-06-25T00:59:21.141974Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/tiny-slider.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6175bc5942c154f986939ffd9ec1fd2a","sha1":"92597054cb6ac1d50df3bd2dfc779a76baf18cfc","sha256":"f46da916752c80206150eea1815f80ce705e25ee6940323ecfc2bf0f9d7de697","sha512":"6404429d8eebb76b0e7c14b278c356a5026574ca24a5e461b5675c72e7b1d0fe674362c898e72e48edefeeb7b72cfd72dd2bc9aa7f206d806ad1947e3f4fafb3","ssdeep":"768:VbsyNMH0JXmZ5lW2E9nUbTJuyynhdHbtG:R9NMH0Y5l+RUJuyQntG","tlshash":"aee20ad97220713282d721ea12ef820a73365928dd038e849439fdd83dfd569626fd6e","size":31912,"data":"","first_seen":"2025-09-20T22:00:03.573101Z","last_seen":"2026-06-25T00:59:21.143103Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/wow.min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00e9ed246588064da7a367b6e07165c","sha1":"9799cd49dc83cb48aecd6c2f259acfb3fd9bbbb0","sha256":"e56d529d7b32bd622574aa5f701ee393e97d6eea67b9b56cb75a4a4aa0ebf572","sha512":"6d92c2cd1a6a05559c48da317dbb3ef7bc20bd7a5365945a357e17303b89b4b7599af6c0e67fd98c413baa01f8b49c888d86162a292fa5a5452a53764a362742","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poI4:iEE/Amu6qUxVBxGkAI///I4","tlshash":"bbf1bb95374a70718a9b6176c92f02026532256e74d4c8ec747cddd4aeb4929336bf3c","size":8158,"data":"","first_seen":"2023-03-10T21:09:22Z","last_seen":"2026-07-02T03:52:30.83951Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Can't find.testimonial-active","filename":"https://web3earnprotocol.com/assets/js/tiny-slider.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/animate.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.616Z","timestamp":1782349135616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4002\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70592,"size_decoded":4311,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a3294e2069601cf477721abc9c7854d1","sha1":"3e63620978feef0d38710b6442914721025d1ff2","sha256":"d3ac73fa8c5f074a9ab7fc8ed9351e03a7b6aecdb0588cbb284d29a36b721697","sha512":"05b039f6f86642124e42a794dfeacaa6a6d148db0af306ac59f66b442fd833451641e844182dc89a5004eb44d4511024b0c7dc04617a1a76e85230a45d5528b5","ssdeep":"192:2HQvFpjIBz+a+pjxm7YfPZBWgQc95YKm/0kLyJgprWXhOX8yRTeVSqwMbPeCC/AF:x7CY+Y7VQV4YuYG","tlshash":"9d63c96a1c91114447720b25d7de8f6ceb3ca57318226efa73c2588b8f61bac13cda57","first_seen":"2023-04-11T12:14:16Z","last_seen":"2026-07-30T20:32:58.256646Z","times_seen":238,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/style.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.622Z","timestamp":1782349135622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 466\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1475,"size_decoded":774,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6d1da5f2c6bb77692145a46d3c62ab4f","sha1":"234dda971eb92b2c071bd63fafcad5b60ab28d89","sha256":"91ab798771a39401b26f8222c2f2dc3a098eacbf273a2e85bc64c7f9af49d3be","sha512":"38667c8c5e2b24808cd6925c1cb0dc8e5901ce7d5e754e3009ed6dd5c1a69bfd90972ce3b8cbad9a9fc1307ffce38987ca04f34c66138fd85a1827e737d1bbfc","ssdeep":"","tlshash":"a831fd1ade02320a6037e665dff20708d6550053e30912e87fdcb1448ffea988171ecc","first_seen":"2025-08-25T05:53:17.116847Z","last_seen":"2026-06-25T00:59:21.133604Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/wow.min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.640Z","timestamp":1782349135640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Mar 2025 03:40:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2637\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8158,"size_decoded":2874,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8100), with CRLF line terminators","md5":"b00e9ed246588064da7a367b6e07165c","sha1":"9799cd49dc83cb48aecd6c2f259acfb3fd9bbbb0","sha256":"e56d529d7b32bd622574aa5f701ee393e97d6eea67b9b56cb75a4a4aa0ebf572","sha512":"6d92c2cd1a6a05559c48da317dbb3ef7bc20bd7a5365945a357e17303b89b4b7599af6c0e67fd98c413baa01f8b49c888d86162a292fa5a5452a53764a362742","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poI4:iEE/Amu6qUxVBxGkAI///I4","tlshash":"bbf1bb95374a70718a9b6176c92f02026532256e74d4c8ec747cddd4aeb4929336bf3c","first_seen":"2023-03-10T21:09:22Z","last_seen":"2026-07-02T03:52:30.83951Z","times_seen":9,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.iconfinder.com/data/icons/font-awesome-brands-vol-1/640/discord-512.png","fqdn":"cdn0.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.654Z","timestamp":1782349135654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 02:46:51 GMT","end":"Thu, 06 Aug 2026 03:44:06 GMT"},"fingerprint":{"sha1":"F9:5A:E8:0F:E1:16:37:13:9C:5B:08:5C:27:42:C3:93:A5:98:10:25","sha256":"13:AD:BF:85:31:BC:F0:8D:DC:FD:98:2E:D4:26:D2:AB:4F:B2:E9:8B:00:18:CF:80:0E:EE:DB:A3:0B:37:2E:3F"}}},"request":{"raw":"GET /data/icons/font-awesome-brands-vol-1/640/discord-512.png HTTP/1.1\r\nHost: cdn0.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"9168976.png\"\r\ncontent-security-policy: script-src 'none'\r\ncontent-type: image/png\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=nAoseJTRTg%2FoM01%2FmhWCQ4J%2BcEYESlwnRaRg9dIFOy0%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1782347932\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=nAoseJTRTg%2FoM01%2FmhWCQ4J%2BcEYESlwnRaRg9dIFOy0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1782347932\"\r\nserver: cloudflare\r\nvia: 2.0 heroku-router\r\nx-request-id: ac442c1d-5463-6cc8-cec2-c6deb335eeee\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1202\r\nlast-modified: Thu, 25 Jun 2026 00:52:42 GMT\r\nexpires: Fri, 25 Jun 2027 00:58:55 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-length: 14431\r\ncf-ray: a11006d20b452efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14431,"size_decoded":15669,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5ff0b0913068105ac73a675e185eb7c0","sha1":"1423f00925e75f704b897fa22376c49a01f10484","sha256":"176678af56af5e4720eab421b9e3782758b0039d6dd34358522660c5da479ef4","sha512":"996a2dfbfe0b3b2ece978d07150c71ab8c05df35f532bbb912fb3b41a9946b702a8971c3d03f0818f7d090826e8b5a46959a215b5190bc4572b1e4239adcef03","ssdeep":"384:S8e+MK9a9cXqIdMVmuSa+uaQjQKoOYLVBd6E:i+Lo9cXL41yOct","tlshash":"0a52d0c523f22421ce6228f82b979b1e116d9dc87da34544169eeef9b42603ee045df4","first_seen":"2025-09-20T22:00:03.552814Z","last_seen":"2026-06-25T00:59:21.136109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":5,"connect":27,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T00:58:54.883Z","timestamp":1782349134883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Apr 2026 12:03:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2204\r\ndate: Thu, 25 Jun 2026 00:58:54 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}],"data":{"size":7298,"size_decoded":2633,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (511)","md5":"e036b716ed41d8b1ab448da703e997d7","sha1":"c66f44893fef02b242a2173ffba6bfc5c1535ebe","sha256":"47d8367d6a04cdacb1619cde04771396613b3afd890ad4a087b5d9b990b39941","sha512":"ffd43eb7e4eaa8aa9ae5aa28d48170fe8410515f428b7d33561ccdab9e9d2c76c3c7f3dc932f80bb2924be07802fc1c336336ca2d4c11611da9a17ea7b727084","ssdeep":"192:pLDTdOqdYUeXyT2ms8MxqDJ8RFe/GfcJd:53dOqyNYDJokGfcJd","tlshash":"77e1d566cb84152b024305c87474bb35e8e08612d70bad95b5fe06adaff1f96a93378c","first_seen":"2026-06-25T00:53:12.380957Z","last_seen":"2026-06-25T00:59:21.139112Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":25,"connect":25,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/count-up.min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.635Z","timestamp":1782349135635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/js/count-up.min.js HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Mar 2025 03:37:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 629\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1622,"size_decoded":865,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1622), with no line terminators","md5":"ee23ac13aa348210bb7293ee257c59be","sha1":"531ed6aa96ed4e8f8fa2e1cd9b9cf3cbff6fa579","sha256":"dfab708f99d677edf763e997189f2c6692142152e81a7a370ca1f752303eda1b","sha512":"aa5a6ac6ccc87a4e1c221846a8246d54b20d2592a70cc8c4afa1039380a68b95bc307d1c0350cee03a3a2a6032e395b14bf362b08113ae5c1568fd55b631b178","ssdeep":"","tlshash":"5d3111657537dca90e2201d9b10b19509662963e00eb485cbff2c8c46de3c0d9d0ab7d","first_seen":"2025-09-20T22:00:03.556294Z","last_seen":"2026-06-25T00:59:21.141974Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/tiny-slider.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.637Z","timestamp":1782349135637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/js/tiny-slider.js HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Mar 2025 03:25:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12363\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31912,"size_decoded":12601,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31912), with no line terminators","md5":"6175bc5942c154f986939ffd9ec1fd2a","sha1":"92597054cb6ac1d50df3bd2dfc779a76baf18cfc","sha256":"f46da916752c80206150eea1815f80ce705e25ee6940323ecfc2bf0f9d7de697","sha512":"6404429d8eebb76b0e7c14b278c356a5026574ca24a5e461b5675c72e7b1d0fe674362c898e72e48edefeeb7b72cfd72dd2bc9aa7f206d806ad1947e3f4fafb3","ssdeep":"768:VbsyNMH0JXmZ5lW2E9nUbTJuyynhdHbtG:R9NMH0Y5l+RUJuyQntG","tlshash":"aee20ad97220713282d721ea12ef820a73365928dd038e849439fdd83dfd569626fd6e","first_seen":"2025-09-20T22:00:03.573101Z","last_seen":"2026-06-25T00:59:21.143103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.iconfinder.com/data/icons/picons-social/57/75-reddit-2-512.png","fqdn":"cdn0.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.658Z","timestamp":1782349135658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 02:46:51 GMT","end":"Thu, 06 Aug 2026 03:44:06 GMT"},"fingerprint":{"sha1":"F9:5A:E8:0F:E1:16:37:13:9C:5B:08:5C:27:42:C3:93:A5:98:10:25","sha256":"13:AD:BF:85:31:BC:F0:8D:DC:FD:98:2E:D4:26:D2:AB:4F:B2:E9:8B:00:18:CF:80:0E:EE:DB:A3:0B:37:2E:3F"}}},"request":{"raw":"GET /data/icons/picons-social/57/75-reddit-2-512.png HTTP/1.1\r\nHost: cdn0.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1617471.png\"\r\ncontent-security-policy: script-src 'none'\r\ncontent-type: image/png\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=%2BfY7dNO5M0BiuAWjY4usHKpGbgDtneBfwf3S4JVAiDg%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1782303615\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=%2BfY7dNO5M0BiuAWjY4usHKpGbgDtneBfwf3S4JVAiDg%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1782303615\"\r\nserver: cloudflare\r\nvia: 2.0 heroku-router\r\nx-request-id: eca6ebc3-a4c5-6e09-2001-b09a326533f3\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 45520\r\nlast-modified: Thu, 25 Jun 2026 00:52:42 GMT\r\nexpires: Fri, 25 Jun 2027 00:58:55 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-length: 18220\r\ncf-ray: a11006d20b462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18220,"size_decoded":19451,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"393976da3e5136ed73587bf38f2c345c","sha1":"7f9d000942b4381157a6c195f1807b08791f605b","sha256":"2a69cfe5c25a8b53bee8313bb71031c958694c986e07b7778b440316700f7ff0","sha512":"6ceab2633cda4b6a32bf14dc474e64a2f06cbc956550fbd7084a441d51502606cfc494b7dbb8ec82a2e825215f2aa65af1781f26ab5b5593a29cd6b77ce0c65c","ssdeep":"384:S8sQ3DEQMdgzlW6Tuqqm+aM/Mu6yR4AYEDfAzWvLS9ErC:/3NMdmjuqqPkTK4AYEDYzWvLe6C","tlshash":"3682c0536909d5d2d49bbffc0af05a166faed40502302f2f059f1d564ee322a4ee2b52","first_seen":"2025-09-20T22:00:03.554665Z","last_seen":"2026-06-25T00:59:21.14445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Hind+Siliguri:wght@300;400;500;600;700\u0026amp;family=Sen:wght@400;700;800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.805Z","timestamp":1782349135805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Hind+Siliguri:wght@300;400;500;600;700\u0026amp;family=Sen:wght@400;700;800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 25 Jun 2026 00:58:55 GMT\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6163,"size_decoded":1262,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f61dcba1eb668356bff5ac62bc8a2c9","sha1":"becec23d7154f053b402b2579a7cbda0584e24f3","sha256":"e3a6269f1722e51669e2e17162da2d42461f1dbef1fd3455368cda088feb14da","sha512":"ad3445c79d40b3805dbf0fee35db56f1a5051b833ef9d26a7338738e5d18f1b76405f463a9a0b3b81674205bade985d45e4e472cc9ef3f6afe28cf261ae1ddcb","ssdeep":"96:UOWiOWdJc+uCOWCNbOLJOLBJc+uCOLrNbOg7OgoJc+uCOgVNbOxTEOxTDJc+uCOr:w6VpDMxATRMrsPXigeFlrB","tlshash":"34d1c092053a9840a75338c552ca7d23de1f73a0a045ecae5eff188a9ce6c358752f5e","first_seen":"2025-09-20T22:00:03.56081Z","last_seen":"2026-07-02T05:01:45.769325Z","times_seen":52,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/aethirlogo-1710504661.png","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:56.032Z","timestamp":1782349136032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /aethirlogo-1710504661.png HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Jul 2024 17:37:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1302855\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1302855,"size_decoded":1303123,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"ff56300f71df084fd4f6556c31332ba1","sha1":"e28dacc4e7701530e7990094d369281497eb4706","sha256":"9dfd31b88f0bb819b9798fc015b1caf46b8c1a234623f395f183073a1b7c8e9c","sha512":"7f70309a203273cda3646164a76a06c5b5bce9ceaba7c555b4465029ab9d128f5e677fa63463702e421de3c6379ca54126e145af58965f21578138f3644567b5","ssdeep":"24576:7XDMWYIYDb2HYnypnbOTb+Ynsz6w/Wj6CZX8X9njA:7AvI62H+kI97hjF8X90","tlshash":"c425239ee9ef5d74fd96744a9732c424871229ee763ba082ee05f111d48cdfc831217a","first_seen":"2025-08-11T23:19:05.31274Z","last_seen":"2026-06-25T00:59:21.14705Z","times_seen":7,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/bootstrap-5.0.0-alpha-2.min.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.606Z","timestamp":1782349135606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/bootstrap-5.0.0-alpha-2.min.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19230\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147382,"size_decoded":19718,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319)","md5":"10f4ab6798ca01ac99543808cf593bde","sha1":"774bb0484b4ccc40ecb5e0d6d493093e73bc3685","sha256":"40d2440d77b247e2e87a54b155175ce38f37cc8037d5de9138abab50047ae9bf","sha512":"e04e04827851a28d085f002daa4fd122ee548d6eff99da953960717a1da89aaf667a6d967b8f97871fa85e6a64d0ec87345ddcdd767ee4f5ee468a4da1e55f1d","ssdeep":"1536:0Rc8Svo5/YrkplD+sEBpy0cuJ7BWdpEdpz603IleJ:0RJSvjdpz603IleJ","tlshash":"f9e393d7f581241ed4a7c21990d1bffd092f5686e3025babb0277bb88b496c70963e4c","first_seen":"2023-07-17T01:06:12Z","last_seen":"2026-07-17T01:41:01.388978Z","times_seen":60,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/main.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.619Z","timestamp":1782349135619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4077\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25209,"size_decoded":4386,"mime_type":"text/css","magic":"ASCII text, with very long lines (25209), with no line terminators","md5":"4d571bfea4766adab40bc249ae1e5702","sha1":"00131a2e24dfa8bd2be70db260c63438d4995aa2","sha256":"ed15923d2cff5afb24c5a52b796fba31d79b732bb8e377c32a7e1587fe6bb261","sha512":"07eb881ebd5b120c8fad5b9602371585e60d92a872f8f477f385be2b37883e9120c47175f404fb678a7278ea2ac9fdad3d22bc4b270858f6f2a4696ab114a5b1","ssdeep":"768:+KX70aFawduRT6fVE50Xr50Xc50XjeTs470I2kkZ/vad:+K3awduRT6fVE50Xr50Xc50XjeTs470E","tlshash":"abb2a5932a12303c6117953ae482b1943378e412f71f57ef6cb7766bcb8a1d91236e4e","first_seen":"2025-08-25T05:53:17.136772Z","last_seen":"2026-06-25T00:59:21.14905Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/bootstrap.5.0.0.alpha-2-min.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.632Z","timestamp":1782349135632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/js/bootstrap.5.0.0.alpha-2-min.js HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Mar 2025 03:41:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15396\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63422,"size_decoded":15634,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63135)","md5":"23a3a39a965ab0d1dec09c0ab0c896a5","sha1":"579c3bdbc0c0e3915efc36014401201be92db2e2","sha256":"f7f3c24178f18044f4b6b60ba67afc5568c6e08abaab91a07110bcac46d61fa8","sha512":"2ce163d229a48ddaecae019aed65bca21c8e6a49f11a09fa43b2ad83abe898ccacdb4bfa7b38e36ebee29d5a49e2b03eb05a4cd1a561c4f5ce1b5e819c60fcf7","ssdeep":"768:pEXnUINDYnur7uHVMAuUXrt75TtVkNLoozl0FIlBviiOnARRwa6LED3IMNM1o:pO57gqefoAn8RlDx","tlshash":"0c538249b254787205df747a807b060fb73a2899a446813cb96ad8de1b7cc897273f7c","first_seen":"2025-09-20T22:00:03.569369Z","last_seen":"2026-06-25T00:59:21.149919Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/WhatsApp_Image_2024-11-08_at_11.57.28_PM-removebg-preview.png","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.650Z","timestamp":1782349135650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/WhatsApp_Image_2024-11-08_at_11.57.28_PM-removebg-preview.png HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Mar 2025 01:27:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108162\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108162,"size_decoded":108429,"mime_type":"image/png","magic":"PNG image data, 634 x 393, 8-bit/color RGBA, non-interlaced","md5":"ef33ef2d6fb1a2d86a18ed9dd44424bc","sha1":"3017b03bf736283ad7b15e5e10bc7e11b4f6a299","sha256":"aabdb93a810e18cd273242115365f561dda281f1851a02432770f228f7ccd9fd","sha512":"15f02a6787965ac14c862eaa1298e1c133bba03cf4a88362f299de435ee4a4778b6647acda5b91ce0762b8a639473f25d8b356fa79e49c17f8aa60280f3da822","ssdeep":"1536:bSPURx0I4SKW2JnhoxacbyooOUzyd5WqCUndSciZO34PphYRvPYT/pKYv4QlVt6h:pFaW2BCxP1oOyyqXy5QTfv4QleFsClF","tlshash":"edb3025d6370683d598ceb30f5f7e89991f83d3224a0b794a02e3365b6ca8797124fd1","first_seen":"2025-08-25T05:53:17.12616Z","last_seen":"2026-06-25T00:59:21.150709Z","times_seen":5,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/GPT5vixaQAETy_R.jpg","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.652Z","timestamp":1782349135652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /GPT5vixaQAETy_R.jpg HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 23 Mar 2025 01:40:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45704\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45704,"size_decoded":45971,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x628, components 3","md5":"04d2589e5425ec4115c9c65d2736bd15","sha1":"57a51569a815e514a292ea429d99b49005f91119","sha256":"18f8fa4bb7b0da40907391b961f7d056d35e91a4ad066f68e7f768262bc42df2","sha512":"7249069a445de38dd8c0557308db97b5aae2b73887e3859215c011affab4e917e1e75b3f3469794843d022a8298c2a430a29b260dee4af9fa148dd913ddd85f0","ssdeep":"768:wbMo1djdYJZMXsaBYZtUlsnfXecunVysoW0MBORwh6gJ7xvefW+t/hj:+JdjG3aB8zG5BORooZ9hj","tlshash":"4c23e03f5fe28e84e9de3331e0d47b36b805991444cf027e809a5fb6a1869f3e827165","first_seen":"2025-08-25T05:53:17.118752Z","last_seen":"2026-06-25T00:59:21.151616Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.iconfinder.com/data/icons/social-media-circle-7/512/Circled_Twitter_svg-512.png","fqdn":"cdn1.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.655Z","timestamp":1782349135655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 02:46:51 GMT","end":"Thu, 06 Aug 2026 03:44:06 GMT"},"fingerprint":{"sha1":"F9:5A:E8:0F:E1:16:37:13:9C:5B:08:5C:27:42:C3:93:A5:98:10:25","sha256":"13:AD:BF:85:31:BC:F0:8D:DC:FD:98:2E:D4:26:D2:AB:4F:B2:E9:8B:00:18:CF:80:0E:EE:DB:A3:0B:37:2E:3F"}}},"request":{"raw":"GET /data/icons/social-media-circle-7/512/Circled_Twitter_svg-512.png HTTP/1.1\r\nHost: cdn1.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"5754360.png\"\r\ncontent-security-policy: script-src 'none'\r\ncontent-type: image/png\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=g0xQlPC3jcRl45aR4IEOqkFeuYMtIoCCihHUy3AmWKU%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1780556143\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=g0xQlPC3jcRl45aR4IEOqkFeuYMtIoCCihHUy3AmWKU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1780556143\"\r\nserver: cloudflare\r\nvia: 2.0 heroku-router\r\nx-request-id: 6e514910-e94e-3e06-55a8-21c526db3b69\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1792991\r\nlast-modified: Thu, 25 Jun 2026 00:52:42 GMT\r\nexpires: Fri, 25 Jun 2027 00:58:55 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-length: 15306\r\ncf-ray: a11006d20c9956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15306,"size_decoded":16535,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"80968cd6a29da098691dfa80155c8c7c","sha1":"247299189af17dff0568f38048207d42c34343d2","sha256":"0b0eee2e22fff875867f8ddcca19ea24500eb9ac50d1fe9bd246fba4c151e8cd","sha512":"e49a3b0cb33069855ae209a524a6d4cea9fb5148f4097def82e01b350fdb15425ac19e163465e9b66d4122e7fadcff3b2ba1c1c9843fe975dfffa2d33801f782","ssdeep":"384:S8CR66ESKIGSSHJ0wcVYTP2PBMpIByGky0o/8:eR1EhGwcVYTP2pMaVj0w8","tlshash":"4662c04ef592cd258821ba3c404ef239aecb238da066522515e447b7b9b5429e1352ff","first_seen":"2025-08-25T05:53:17.12827Z","last_seen":"2026-06-25T00:59:21.152417Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":7,"connect":23,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/tiny-slider.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.613Z","timestamp":1782349135613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/tiny-slider.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 629\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2178,"size_decoded":937,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-08-02T06:10:32.470338Z","times_seen":3584,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/js/main.js","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.641Z","timestamp":1782349135641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Mar 2025 03:21:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 915\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2893,"size_decoded":1151,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"83947368c25853f0c04f04ed0de17cef","sha1":"e98efb17543108d1a921120a6f33435e5afa23a0","sha256":"400db121a9da2bb948b5c2b78a4b74d0dbf2be6353917bef973116c0943f31f0","sha512":"1329ad96a90b89e2d76f7ea8ec9199cfd1bf29d02f6a634faaa754dbfeebd38f2a1f4144ebbb4db825ab53414828eec9e4c402625956abf35299b1c3f602aecf","ssdeep":"","tlshash":"ac51f01e51662031457ba32dab7bdb84fab8011bd14291273cbf46882f70b9515f0fcd","first_seen":"2025-09-20T22:00:03.570475Z","last_seen":"2026-06-25T00:59:21.154101Z","times_seen":3,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-256/free-medium-47-433328.png","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"172.64.147.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.657Z","timestamp":1782349135657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 02:10:40 GMT","end":"Sun, 26 Jul 2026 03:10:36 GMT"},"fingerprint":{"sha1":"B6:85:25:C6:AE:BE:4E:38:16:14:CB:D9:28:C8:6E:54:99:F7:74:F7","sha256":"CD:23:15:BA:D2:D9:4D:05:79:70:C4:6D:EC:AC:9C:E3:E2:99:30:A3:9F:89:40:26:E9:AB:86:F1:B5:08:09:28"}}},"request":{"raw":"GET /icon/free/png-256/free-medium-47-433328.png HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4354\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\netag: \"e03e9c87f73d38df24e3cc5a0f0b543b\"\r\nlast-modified: Thu, 23 May 2024 04:55:02 GMT\r\nserver: cloudflare\r\nx-amz-id-2: NdkjdTHi+6PtYFOMbTjgC+6p5/GZTExNAxCBOHNv0XwkTMR2tk/NQUxT1M+IVWK6GW4wj4L30BQ=\r\nx-amz-meta-generator: Iconscout.com\r\nx-amz-request-id: BJZJZ25DG3G20M1M\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KKBk1_BB.i.hCnaJr.oEln0gtXKKviY0\r\nset-cookie: __cf_bm=mN2zRutGjY0TwQE8EKHn1lat2vGq7WmuIv_a2KCdPnI-1782349135.6936297-1.0.1.1-zZMI3V8JCxnv9dNNKcYah0t1f8p6WXTLz.kQ.To0V2.Io3MdMuFw6x7sDuD0GjRvHSDIbR9ZhIODlnRHvqZ9bM5k.Wxt4noSftuFsrvrUfJDed1w3KcqLQV4SxOOdO.O; HttpOnly; SameSite=None; Secure; Path=/; Domain=iconscout.com; Expires=Thu, 25 Jun 2026 01:28:55 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=7889\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1202\r\nexpires: Fri, 25 Jun 2027 00:58:55 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: a11006d21c88569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4354,"size_decoded":5496,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0410f8f33bf58b6f5bed0efa5ce1cf98","sha1":"f439211876132e003be2203cd01a65397d01a27f","sha256":"93e25477b3d404e3431f0d33af2d1fd2e8b514107825bd1a690d16715f4f5a9a","sha512":"9439f677932f820c586201c8ff06ad064a0811c0f502cebe0b5f453f52118476cea6f6fdece25952bd041d11d49053ed5ff95c8e36474977cc3de9b736749dc2","ssdeep":"96:InpeKrgMbIkHT+mPVlb8J3NR33DWWSDHuXgOQgJ48JgAyK6judW/4727IBHGUc/e:InpdrgMkkz+Slbu3NR3yWagQCvJgAA1c","tlshash":"1b919eb606595eacc8cb1a6c019e258b2cd3c2a85cefce04cde53c8513ba25d7935385","first_seen":"2025-09-20T22:00:03.56684Z","last_seen":"2026-06-25T00:59:21.15488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":12,"connect":20,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/img/hero/map-bg.svg","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.923Z","timestamp":1782349135923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/img/hero/map-bg.svg HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11124\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25104,"size_decoded":11439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"989ba920a54d7d28a78cc477409612b1","sha1":"b75bfcc024b4b98306adc7df99376346b76fa684","sha256":"226c607eddb6d9d7f6c502b22350a75168f36e9ca38ac9e73bba28526bd577d3","sha512":"520fc140d2c242316f600cdd3b0a65ebda2b4367482f919c8739ef5d57531150452e05d0017e0fb59aa7932c3295abc0dacdc74bb7dcf445af3ee4e8e488bd6d","ssdeep":"384:+EMFiAW0i1rnISPTli+JZqzRJao1qT2KNxw6YXE/6QF2IjTWssRw9Ys:jcInVhvArQKKNxw6TXWNRG","tlshash":"53b2b8fd6f7490fc93db5f5bef2258ac6b0da07a7a7245d0862d4a4419a3cc8e24bc10","first_seen":"2025-08-25T05:53:17.091746Z","last_seen":"2026-06-25T00:59:21.15563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.945Z","timestamp":1782349135945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://web3earnprotocol.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:17:47 GMT\r\nexpires: Fri, 18 Jun 2027 10:17:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:44:46 GMT\r\ncontent-type: font/woff2\r\nage: 571268\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14896,"size_decoded":15709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14896, version 1.0","md5":"3f586c48705ff89afb70a3835c2ec8b6","sha1":"13481d7d5e36e2e257191f14ad794791c3e2e032","sha256":"50c07c577a7c527c2d471089cf3473bb90c7f010f8dfa343a45cf9e81fb4c5e8","sha512":"f06b9b68b28da6b318c56c6c4f4b00d00a388a190eaa83aec617cff658dc5e64f5af04132350af33d9c9316f6fc268c8d2c88d4b4a61cd402e38e7929b62931a","ssdeep":"384:9n2f55fdy5GnT7PNtV4s7LfGwlNLuG88WvfAnFHD6dK4jy:Rv5kPNtVF7LOGOrfAZmS","tlshash":"7a62e0d6888a3cdc364d2034b85d1a3b2f29988e911b3be7ff5c64518274f98918a61b","first_seen":"2023-05-05T14:26:18Z","last_seen":"2026-07-28T23:28:38.914826Z","times_seen":556,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/fonts/LineIcons.woff2","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.947Z","timestamp":1782349135947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/fonts/LineIcons.woff2 HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/assets/css/LineIcons.2.0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51676\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51676,"size_decoded":51943,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51676, version 1.0","md5":"ab4f93708f366ab8c6576d60e1646dbd","sha1":"099c8552ddc2cfb05159333577c1821d2c6d4919","sha256":"22d65627d2483a04af29571b0637043746d2536c84a977860bc3ece769cf3418","sha512":"922a15cc852de48f4c1f6456d1c35bd3c37d434d6071c7ce9513176cf10ecfe85c484cfe06e7258c75ae028ea31116e96ea9449a75403d8af4d81b142299419b","ssdeep":"1536:300E1+oUoXBAlRcofcklQagQN4zBiKgNT:k0q+JoXBY+S6QOBRgNT","tlshash":"5933f12c3416b2d2567850afb84e8afa4c5ef576ecc257ad98110650cd833c9fe7d08a","first_seen":"2023-04-30T20:48:07Z","last_seen":"2026-07-29T06:17:50.039561Z","times_seen":651,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.602Z","timestamp":1782349135602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /font-awesome/4.1.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"bbfef9385083d307ad2692c0cf99f611\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 04/11/2025 08:48:35\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d5aee37a290f4dc56a6c1799e47cce6e\r\ncdn-cache: HIT\r\nage: 3697684\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a11006d1aa2b712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20766,"size_decoded":5570,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20604)","md5":"bbfef9385083d307ad2692c0cf99f611","sha1":"63a234ea4d60f6643a60a4d79e28f291b93c1743","sha256":"b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0","sha512":"efb922772183246596989d0c54ed02469fba9d181944aebb7eb515051be72f5cc2726730f45902431a431eae7649e6d6f8a5930279ee5f4424dbf3105a8816a1","ssdeep":"192:xq9jjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:+jPyW/TUK1+KlkJ5de2UWWyAf0","tlshash":"c99266f8e54d01c66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2023-04-05T10:34:03Z","last_seen":"2026-08-02T07:03:14.582412Z","times_seen":10600,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3earnprotocol.com/assets/css/LineIcons.2.0.css","fqdn":"web3earnprotocol.com","domain":"web3earnprotocol.com","tld":"com"},"ip":{"addr":"86.107.77.15","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3earnprotocol.com/","date":"2026-06-25T00:58:55.609Z","timestamp":1782349135609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web3earnprotocol.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:38:03 GMT","end":"Mon, 07 Sep 2026 22:38:02 GMT"},"fingerprint":{"sha1":"52:36:B2:1B:4F:80:D7:69:CF:E2:60:C7:FA:19:21:2C:16:80:D7:07","sha256":"86:33:95:33:73:F3:6A:88:BD:60:DC:4E:89:4B:99:B2:98:8F:EF:A5:C3:D2:6A:13:41:B7:6F:39:2E:22:9C:E6"}}},"request":{"raw":"GET /assets/css/LineIcons.2.0.css HTTP/1.1\r\nHost: web3earnprotocol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3earnprotocol.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:58:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 18:07:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4155\r\ndate: Thu, 25 Jun 2026 00:58:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22375,"size_decoded":4464,"mime_type":"text/css","magic":"ASCII text, with very long lines (22375), with no line terminators","md5":"89704a69ed5a4c34faea674c2f654c6c","sha1":"93fcaa8addff808805b6845aa6c943f4e8824609","sha256":"a0b65098ced25c5e297bad2d15d60bb699e598fae6f80faae7a0a6903e59d21d","sha512":"02c6f5c59cee71428aad607b328936cdd1a5e721df54232e9042b3a53098cb997b64122e5c70e56236f9be9fec993f82c2e082dbbaae7a7909e072a463337f3a","ssdeep":"384:a7UMOomFRDDd1dzgTILqfR0HKFjmYV3SR1pM/1zW9glPGs9GxVR7Xtmxkpfa1nOx:aytuXZiFcxyLR","tlshash":"f3a20aa7d8ba0cd4f7b2c40f8b8ae75a1498f531e5024c56f69fb00f19e166806e5b3d","first_seen":"2025-08-25T05:53:17.114429Z","last_seen":"2026-06-25T00:59:21.158798Z","times_seen":28,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"web3earnprotocol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}