{"report_id":"e0ed7acf-608d-434d-b13d-1cbe511b102e","version":6,"status":"done","tags":[],"date":"2026-05-08T11:12:18Z","url":{"schema":"http","addr":"www.evofince.com/","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.evofince.com/","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"title":"EvoFince | Cryptocurrency Trading and Investment Platform","dom":{"size":238151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4806)","md5":"e9ffe80d7c422dc9344fcdd36f34c8f3","sha1":"1dfae3dff59139c5e28fd9bdb4ab522199ada945","sha256":"bf8e7130591ffc0f536c4986d9cb1b995cd23ab43aec1af18a00478953e51e98","sha512":"e402722d64c5504272a1a0e73bd7e114f80ec110e017e4a5d775df8c5fd7d66937c04c313955e2dbffc341636c8906c57cfe0e03d38b739bfd2c6924d0434ce2","ssdeep":"1536:Ej2vMv3U5lnCVMYTj2vMv3U5lnCVMY4VHIGzeM3Zjq2GYdtpsRfcq2bmuwI0vEqn:6HsuNE2uEvEqPesA/uagl","tlshash":"89341af493f8a5d59441d3e8ea3a212abd0b64fbdf02c658b3ac0e54ef4189e88174d5","dom_hash":"domhash74d58c19cc6e108bb4027bfc0c061de1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.evofince.com/","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T11:12:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-05-03T23:18:09.372888Z","alert_count":0,"request_count":1,"received_data":88168,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":1,"received_data":23026,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.evofince.com","ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-05-08T11:12:20.690089Z","last_seen":"2026-05-08T11:12:20.690089Z","alert_count":112,"request_count":56,"received_data":5099500,"sent_data":28016,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-04T00:24:43.265765Z","alert_count":0,"request_count":1,"received_data":149045,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-03T22:36:05.340423Z","alert_count":0,"request_count":3,"received_data":190329,"sent_data":1358,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.binance.com","ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-05-01T12:26:54.26407Z","alert_count":0,"request_count":8,"received_data":39807,"sent_data":4210,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.socket.io","ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":199187,"first_seen":"2015-03-23T22:14:03Z","last_seen":"2026-05-07T09:48:25.048084Z","alert_count":0,"request_count":1,"received_data":65033,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"furypanel.com","ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-13","domain_rank":0,"first_seen":"2025-04-17T10:11:13.024598Z","last_seen":"2026-04-28T23:15:10.858969Z","alert_count":0,"request_count":7,"received_data":17367,"sent_data":3109,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.evofince.com/external-embedding/js/socket.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cbfaf430d4d21ec537c799ce730a16f","sha1":"2f96e23343d18b4df17f13bb83c1f501112b8918","sha256":"3163eca9cafd8f8d8022f73cd33f6d3098ff6519afb71839c9fea62c906e6387","sha512":"b8a9f18ca2fcb176d400119591628718f2ab6f058f0269370f5ff63c396b61b47447329221b6e1e67890d8129af765a24c59cca36b81bc9f53418b807d04120b","ssdeep":"","tlshash":"94e0c0c09d10aa52bb33411000123804fd31ba131b00412e32b70eb88e33f8172d27eb","size":369,"data":"","first_seen":"2025-08-24T14:35:15.29788Z","last_seen":"2026-06-26T00:21:04.071311Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/header.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96bf30627b45e28dc689f59687faa875","sha1":"613daf052f975ac48ef2929923ade7552096fbe9","sha256":"17047b2750f13423652d6cc992c987f4e2a919d8c1bddc672990434275c8da6d","sha512":"f345b6ff8b56af18e6fcee5544fac932eadef6add1ad5794ff51b3a8f0329b65967075da9e948880f1f940b97ccf890721b9da8d9cf73678a814b66ddd31ea24","ssdeep":"","tlshash":"1901f227a2147e7944bb0baaa7e10e94f62510d76461403730ad8e8f1fe25c1a6aadf4","size":662,"data":"","first_seen":"2025-12-20T23:57:37.814436Z","last_seen":"2026-06-04T20:50:37.227917Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/crypto.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0871f65600e5f9daa2bf8397f02438ee","sha1":"1e8fe31a90b8142a83c75c5937459e69cabfacf4","sha256":"8488910e998bc1f8321d4adaf65e1a16e34bd71b32aa0ca7a22671377a15a16d","sha512":"4dcdd956b7c6eb22128fcf0b42650350a558a8878b06a5a9d4b8f0cccce5536e6822cc31152e5cf1970ac0205d22267a985d8264b824215c168f9c00f286fd5c","ssdeep":"","tlshash":"33f01c09865914bf25faa72b3cbd8310e186136b81c45ab77abd02d61f33109619def9","size":572,"data":"","first_seen":"2025-12-20T23:57:37.799194Z","last_seen":"2026-06-04T20:50:37.176849Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/support.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c0c536f2693fe6db2d30bf52397aae","sha1":"1bd8b3e1000ba48d64f05fd3ec3e8146eac7c26a","sha256":"801a511a34b1c9a0ad56422480cd0221c3f24267f2704307eff5173ae8680c66","sha512":"ff9884aafe01e771c9f119aa506d5731afed15b60f90b3e2d79571d5c5a34f5851d587ee0eb5cff5fd98feec75675ad22f714711d6615d34d5f92531dcfbedcb","ssdeep":"","tlshash":"9281ce26b176782d1073236b79077b03ee26513b92d0e592fe6c46d02f3d4e6e112f68","size":3979,"data":"","first_seen":"2025-09-22T09:58:25.992389Z","last_seen":"2026-06-04T20:50:37.23603Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/external-embedding/js/countrySelect.min.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b266db9f5b2e862b38fff25034b2e528","sha1":"c9173ce2b9092ed9447a14060fd5ac56592095fa","sha256":"49cdf6c1b00908bdd41a936102c18c2680cac6a29bf386bcc5d9a9ed8dd23b8c","sha512":"72b8ae537e293500ce231d974922211d2be37d071e935df463d7e2bc8b593d57c7ee96990c476d00cb70671c8fabfaf6a72afd42972d8a90c57ad2e951d298e2","ssdeep":"384:lrWb7nvQdBV8d36/axYU5O/khe1jL4stzliDdwSRJ66UozXHQi5Py:AbEwivWAPzliDdzi63jc","tlshash":"8282a39ee240036bd9f3b69d30a6d25a403e0c0c480dd1687bfebbc90d18c89557af39","size":18470,"data":"","first_seen":"2023-03-12T10:44:47Z","last_seen":"2026-06-05T12:46:53.810078Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/custom.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b86a086743bb15d2d91577cc990cba47","sha1":"482b594169e40efffd81bbc07ead140bd01c60c8","sha256":"8dee14ef2cbe721e272a0549cd1ddaaf9f789d4bddecb78d8871c1010542c6c1","sha512":"9a83bbbbe31701d4ada1bd8f282bb1d5167e16453c76cd45cc36982df252d46bae08b7580601815f2eae20349967d305fb39496e98c7c8a8d905fc387fe28db3","ssdeep":"192:rEJR+RxP3hRQtu1iUHyAGq6w6V0zkAN8ct1/eP:oJRgxP3vQtu6w6V0zxwP","tlshash":"30324054a16839620477b3729f5b9a48ff25107b2202c3157e6c8b861ff185483fbede","size":11561,"data":"","first_seen":"2025-12-20T23:57:37.816063Z","last_seen":"2026-06-04T20:50:37.22221Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/select2.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88bcbafa0603bf3ed5246ed7025c1b2a","sha1":"35ee4fa97a1b1bee32b9bc79564b8907a5e19204","sha256":"5eae39006c3f71883c23a060796ba20c214803779d8dca712e1bd45ce5c75baf","sha512":"13bb67ba15d4611ae18c4fdea89e38acc2b2a32e8c1fe2e255f613230ac92eff947d7b6c55a1bf3e660857fbf4ceacbde4d8de37bcdc4091bca0ac3e785676f8","ssdeep":"1536:+hWI15KmuezekDxjDOwF8o/RWMorsJn1cREoYtsGrb9e9Ty:pI15KkY41cREoYmGrpJ","tlshash":"d60430686d56217483b773bfdb9a6c04e539526bb00589033c7c86ec5ff24209a96efc","size":181128,"data":"","first_seen":"2025-08-24T14:35:15.281551Z","last_seen":"2026-06-26T00:21:04.054306Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-27T07:07:22.384641Z","times_seen":26180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/currencyRate.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"476c7812b89bd99ecfc6b90b1907fecf","sha1":"e38d16a860bb68d41e9b8f85781a513185102217","sha256":"d71aac499632426e5883246d81276afeb11183bb134f5bb9862ffee3c3e22494","sha512":"b4f40370fe813e1ec0d5761e3c0ebce9bc6232613814bd64b1e565b6447f60792ed75e0fbdbe059a3b385379b1d1df1862c02d2ecbaafc1f7ced7d19386bf88f","ssdeep":"96:+J43qNpHGC2Rx4V/kjn3PpNX/Yhvw7PLDqi/OOXGDmUHwYY4Xab5usfvictW:+J0C52jnBNX/Yhvw7TQmUPXab5uCU","tlshash":"77e18534e47220ba84b3135a9917420ef726e27b775282a93fbcc6101f7b414d186fed","size":7352,"data":"","first_seen":"2026-05-08T11:12:26.281614Z","last_seen":"2026-06-04T20:50:37.172507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-27T06:57:23.407993Z","times_seen":182253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a284f2cbee2f20d927eb9a89c5aabd2","sha1":"9df396d69eb94bd4d5a3847ff55a903aefddae07","sha256":"1378965193fcdc497f7be9adfb64bd2b4319f6ca91b5bf7ccdbc4ed6909807fe","sha512":"97962451cb91a87d1bee6be5571140ca6503483fb3807c5b8286c122b0e7f7d32d983a187df04df668038eb5cb32c0e9d130f8abd54ac906284c943ff095c4f2","ssdeep":"","tlshash":"9bc04c2a78614255002371642ec7cd44a4648d0f9d544f2135cc0dc51f5e33c5953616","size":142,"data":"","first_seen":"2025-12-20T23:57:37.834064Z","last_seen":"2026-06-04T20:50:37.237173Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.0.1/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a785805085250550c3abbe834e47d0d1","sha1":"8680f273cf2a1bf60f51f07c7206052fcc16d6ab","sha256":"e8da407a321da9d28520d362f6202b458b1f5718240de5d47ab5dbc8911842e7","sha512":"7952f92dbf5a97d173811eb7803b353317034b6c05bb7968600823207d3e1e0dfcb424bc020eb67702b21fec330dbf906ae0e91198d76cc9f5d5b970f1c6d325","ssdeep":"768:yYLY5Dw2G3ClcYmXWy/b4GNgVJR5wnM3lJ1/:yaYBw2G8cYy/b4kgfwMlJF","tlshash":"16537688b5a1b0a187e771a5403f110bf23aa869608dc0d4f739d8f1adf89dd6563f39","size":64305,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-27T07:41:07.259024Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.0.0/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80dc553d4f0e0a48accffcb6562f9b7f","sha1":"18935e79d9fc59464b530f0b640a23da9cb28421","sha256":"105d5352773a2778b57c50852f1369ad96630049e2fb422d37e8010b51307474","sha512":"189d8b85ed23bbd6fa323febbe7e6ead38b64490ffffcaa8cc2caf72ba7df23ad1d05ed44e94406024271aad22401ff5e90575141ea5d2c6b3abac6da27e11a3","ssdeep":"3072:iv2ZK7+oP+Ae4zKY0D31HnqmbvdnevU0vvnVo7MR:iOo71P+AeIK/D31HqmbvdnevU0vvnPR","tlshash":"81e3c6517292e46203f185fa183a0402f31ab589394b856cb57cdcd73c99d9a72fefb8","size":148189,"data":"","first_seen":"2024-12-05T13:56:54.256078Z","last_seen":"2026-06-26T00:21:04.087482Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=USDCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=USDCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1098\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: fcec361b-3aca-4ca4-82dc-13fbf7e79000\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: h6ujrsYe-UEBqrdrKvKMT9xe-R0vb0TXW-aDeg0UQ3WJ0S1ULvA6RA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4136,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"67db4866802d097871dc4a9cacc98b4f","sha1":"fe7ed1ca0f19a6cf106cce91708da4b128908269","sha256":"7b41a966db36855bdccbc79d11b689f438cd571f8f768fbee7d4b80510c71c9a","sha512":"1deeb6e88ba4b970d1161fffe89250e94533aa949c109eb75b7938570e9af66563d2223dbe4d93b06adb9be4ff75062595643dce44e64fcf515d410cf6ecceaf","ssdeep":"48:h/zfbygXTuxGB7gpnGB7JBPh9PB7SZgS2B7SZ3SsqKnSZfbGSSD+SZSZB7B7PBGJ:16jyh9gtJksqTLwsBccRSQ3hWn2G","tlshash":"27818ed20694c774fb3b8e0ea3d5fa961965309edeea0fc1d5e2512b28d70725b08f12","first_seen":"2026-05-08T11:12:26.168674Z","last_seen":"2026-05-08T11:12:26.168674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 08 May 2026 11:11:55 GMT\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-07-27T07:17:40.52179Z","times_seen":5900,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":307,"dns":1,"connect":15,"send":0,"wait":32,"receive":0,"ssl":321},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/normalize.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/normalize.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-19d1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzxGa1vqiTtRkAZYNzayl762vbJyITJJRx80Tu1hSppwT%2FXFIgF6DhCGWlkrqHkjV6%2FLJSsC5yNs4AwVo%2ByzzFi9eyBkW9dx5o23iEq2NlJfjscC%2Fu5ArBhC2EkfIuY3akO4\"}]}\r\ncf-ray: 9f8806c04ea9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d8a232ca4c0d091f29189d87889a70d9","sha1":"c5a733326ecb3b776061d0cbe583757bc9ceb94f","sha256":"4dc93d6ba1454d586d9aac567a1fee2dbdac99bf3274c733ec35e0d4c740d50f","sha512":"93aa9cd14894f15651b947a495a23fef2be9122f34bb35398c664a9cca64a54e095ccba881f8bb7179948fc517a5333e720bb7999458cdf6840d5ce7b732c22d","ssdeep":"96:FCeGD84G0k7M0ZUn3PocEoSXbR6n5QABm8xtnU6Zdaazbz6Cz2ns:FiD8KnAcEo46nFBmgU6vaaaCis","tlshash":"77d10f911b413b63a2b20e34b76b6649f36011778e0434dc7ce122a49f657e9d664fcf","first_seen":"2024-10-11T08:34:40.534194Z","last_seen":"2026-07-27T04:33:18.158166Z","times_seen":80,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/Trust-Pilot.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/Trust-Pilot.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-5af7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7iTFD8I5RZ%2Boc2W%2Fe1WdugSl5RzVaRkJG8PRxTEX%2BLUov4T1%2F%2BQjzASLGq2t4JJoknStSYD%2BN6d7lhA9x6fdDq0kJnEnpY7%2FkXiryoI9O1GmL2IMH%2BQUF1cIs%2F%2FdqLq2MyM\"}]}\r\ncf-ray: 9f8806c06ebcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23287,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"429796417711adbb1f8227b00225be14","sha1":"57d57818d6c6fe8febb679ba3e879cdf006c041d","sha256":"e454d20416437df31a01d9475fb238c05165a974b390fec0aba3a775f2c18c73","sha512":"cd6268ab99b7ef030751b046ac9f5ec02ce5f82ebfd69c10ec3d9fdb626ffc85cc027c3781d1fca5b26ae79f5cb7cce5f4b9785e2fd64779375f68415782225b","ssdeep":"384:v4AIkNATIQYvhFxRDW7RNCcE6cin+eSM1GQDZfxT7t1vaYgow:5lu8QwJ07RpE6YO1DZxhzgT","tlshash":"28a274ff5be435f5e882e7e16d03856939a7b0bb3759cf1ac74cce892252418989c8c1","first_seen":"2025-12-20T23:57:37.818126Z","last_seen":"2026-06-04T20:50:37.168179Z","times_seen":9,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/everywhere.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/everywhere.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-d3c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irw5KEdp%2FxYMJV0AMNbl6ogDfyR8cmjnEQLs4DFLo%2Bp9cjKlh4on%2FqyPIdiWcdNvvHdd3ib3QLZB4MJpq%2BOmVjfNJpy0hVBRzZO5ffUxP%2Bs%2FujsWvnmSRZgiujoFdaJ%2BmYvS\"}]}\r\ncf-ray: 9f8806c05eb0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e154eb352cfaf2e5bc43fa91e3226445","sha1":"652430ee1888e4755436dc899613833e60116ac1","sha256":"dc4fc46abe525cfc5a8c7c9ab06eccb50ebd73c4ef36b27bd3866cebbc57afeb","sha512":"501ac50ca99bfaf4bc97bd86777487a4a048d12f0344afb4af64ef82d16970a9d5137370d352d538f179bdbf94eee790c53f57dddeb5c30647e5a3319cb43694","ssdeep":"","tlshash":"4461980685295049e537f7e8afa1011ae77560a3a3d7a0b47bcc224c4ff85a8625efcd","first_seen":"2025-12-20T23:57:37.764104Z","last_seen":"2026-06-04T20:50:37.159602Z","times_seen":13,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/trading.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/trading.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-163d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IK8vhmgk3POieIQlxpfhCylewqKcpXlGM2uacGqWvmZfPJhZkGkgkCowJvsZmhkCu2TnIlciwBbUL8Na1b9DkxIVZrszE%2Fj1520UvqJ%2BJnwiEVSnUjUenLJre0wjSGfXyAcV\"}]}\r\ncf-ray: 9f8806c06eb9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ed73c8c9a5ed5d362db8a2791c554295","sha1":"056b0ecc8a34d34872408fa3ee36267668897f04","sha256":"b520ecdac8864958cd43e54a7945bdba669983da9ea6d6d8649aa57e49b18bca","sha512":"820b4cc15cc2f9f5c9df720d5df91d99aa45ffe7313aa5e80ffb60e2f352857a0097a843c84ba1bbdf5b28c7ec4cfa8c56c2c07620a7de3c2ec329fd9c1fcb63","ssdeep":"96:Ml50S0JRzO52CZRsV9ZJgCZ3njsf/1Ve9s0RzOtaRzOQFbcaYCZPBx2:650SM22CZRsV90CZ3nj6Ve9PMoxcaYCI","tlshash":"82c1cf55c905b9067233b7b8bbd20359e56c10a3eb0205adbbce1684cfb6464c973eed","first_seen":"2025-12-20T23:57:37.774793Z","last_seen":"2026-06-04T20:50:37.197719Z","times_seen":13,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.0.1/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:31:34:3C:FE:6A:94:47:2E:CD:E0:26:D6:4D:DE:E6:D9:31:A7:E3","sha256":"C2:34:E7:66:CF:D6:AF:AA:30:42:B0:50:F9:74:CE:BC:8E:BA:E3:A4:6E:8D:7D:A2:7C:10:10:F5:12:12:6A:A6"}}},"request":{"raw":"GET /4.0.1/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Wed, 01 Apr 2026 03:36:35 GMT\r\netag: W/\"6fe03dc30c8f76f3121971e73729f456\"\r\nlast-modified: Tue, 31 Mar 2026 03:47:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::lf88w-1775014595288-7dae9bc29723\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d0411aee07cb02467c92636bd2065412.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: dUlhskysyga2qQmTwKqTgCsvhlB9XXkHgC9xIzQrWdwNY60RPIDr5g==\r\nage: 3309842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64305,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64167)","md5":"a785805085250550c3abbe834e47d0d1","sha1":"8680f273cf2a1bf60f51f07c7206052fcc16d6ab","sha256":"e8da407a321da9d28520d362f6202b458b1f5718240de5d47ab5dbc8911842e7","sha512":"7952f92dbf5a97d173811eb7803b353317034b6c05bb7968600823207d3e1e0dfcb424bc020eb67702b21fec330dbf906ae0e91198d76cc9f5d5b970f1c6d325","ssdeep":"768:yYLY5Dw2G3ClcYmXWy/b4GNgVJR5wnM3lJ1/:yaYBw2G8cYy/b4kgfwMlJF","tlshash":"16537688b5a1b0a187e771a5403f110bf23aa869608dc0d4f739d8f1adf89dd6563f39","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-27T07:41:07.259024Z","times_seen":448,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":31,"connect":9,"send":0,"wait":11,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/crypto.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/crypto.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aV3yv88NuWFPDbCXcEEqMSF9cz5dh0DhEKM27KTSrQCIhRJoZHrnkwZWV635K%2F1Pthp0bfBA0I6qamS9GKXMUx%2FiCpz5U5uwQdpKAIrWAb7reICdKRBVgHkYvh0nqg%2FyKutK\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69f751bc-23c\"\r\ncf-ray: 9f8806c0aedbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"0871f65600e5f9daa2bf8397f02438ee","sha1":"1e8fe31a90b8142a83c75c5937459e69cabfacf4","sha256":"8488910e998bc1f8321d4adaf65e1a16e34bd71b32aa0ca7a22671377a15a16d","sha512":"4dcdd956b7c6eb22128fcf0b42650350a558a8878b06a5a9d4b8f0cccce5536e6822cc31152e5cf1970ac0205d22267a985d8264b824215c168f9c00f286fd5c","ssdeep":"","tlshash":"33f01c09865914bf25faa72b3cbd8310e186136b81c45ab77abd02d61f33109619def9","first_seen":"2025-12-20T23:57:37.799194Z","last_seen":"2026-06-04T20:50:37.176849Z","times_seen":13,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/bch.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/bch.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/bch.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynCgglULC%2FWlg%2F2KRrZBf51gK6E7e%2B1SNwTsyL%2FbIF5gInmkFCIeRlkiFdWgO82QZw1ZfEg0kPtB8i6cF0yPCUINcee4tjvOq%2B%2BYX8oLi%2FS5xLZgkxfPfMtvTacjufqH1trN\"}]}\r\ncf-ray: 9f8806c45f5ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=LTCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=LTCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1154\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 8a26ed98-13a4-4375-997e-0d3fa747c466\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cdwnktB8Z_8lIgr-wLW44I9-jErtN0azMfkTeO5rwqIS6VLO71W_gw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3929,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"42725f5df27dbb17747755cf88bd701c","sha1":"c70736f987553c0f0de08f49126fbe969753e3c6","sha256":"113aae0324ab33ba6ebfa26b7a2a555cd80934962fb96bbe51aadd27e5749c08","sha512":"0b38fbcf8722716236f5063e167241010c7f92b5a4dbe9ada31bdd6223ec6680ade5b0b2159ef9bda77867b69a729add06989a3fd56bac651cac85c33cd073ce","ssdeep":"","tlshash":"b481d67136ecc255ff36c909b3a2b86e1a66728aafcf0cd5c991e62358f14724f08311","first_seen":"2026-05-08T11:12:26.189858Z","last_seen":"2026-05-08T11:12:26.189858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/digital.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/digital.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-1709\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4XT47AL2BcYucZFxwQYF9kRu3%2FGBH3lXtSMFeWdT%2Bs1Wx3GGqkt%2BtlmBtMWV12Fsz%2FghTP6NyOf6VcveVnnBEAMAhEc7fxM1h0ThTaNBBuI5qeYSUSfmkeHBgAWTgUf4EAh\"}]}\r\ncf-ray: 9f8806c05eafc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7b828b31d7d55d20ccf760606e2d55f8","sha1":"cd27a0eb6db6e53df4de717d853a4bb42a40ee3b","sha256":"53b2eecd841025afb5af200d4c37717638b5cbf85bcecb5309da7f0f31575f13","sha512":"9fb725a95ad5c4d8c0e8220e6addfd27fca4aefb5200a6cec3d2f959b8cabeace304d3ead400df7907e6642ac636b3e4ef3b6891acc6f2c251e6d2f3028829e4","ssdeep":"96:nfAsngO3sX0hBKfOb+arFWjbdY9FHNSNvP0fP7:REXOpmXY","tlshash":"e4c1696bc506251a513ef2a69f930309e6498123d7078ca77fed5285cfbd09884b3eed","first_seen":"2025-12-20T23:57:37.817221Z","last_seen":"2026-06-04T20:50:37.151843Z","times_seen":13,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/questions.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/questions.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-cf8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUAmbs%2FqHGDto0IAFv%2FnIhfkDXgAShF4lwMQ3RJjU1rah8OxFgCwNpSszDnQpB87SmHGk7OXaS1OP7t5upVrHh6VS%2FuwGXILOMWwhqD4%2BSqf9pLG1u143PKaOX7%2FSOXkdf15\"}]}\r\ncf-ray: 9f8806c05eb3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3320,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"024a9e6460faa8e79fdbcf0b3aa86cbc","sha1":"3bded83ad032f1f68071ebd297242c76153f82f0","sha256":"d3424e19d27161ec729a99ec1cd84861aaf0d1356c38f7765d7d3c33432b941b","sha512":"2bc5f9297dd6e9a8ae05e16a0eea8bc52465ae3f6cb5fb4c55dabe18d9fadec49df0621716a4d9561aa2a4a36c93b968b1a75da24e0d5370cfad8fbf264a15df","ssdeep":"","tlshash":"9e61ce3a88051512a137f2abdfe20749d2364293f70601f87adcb6455ffa1ad8423fda","first_seen":"2025-12-20T23:57:37.771255Z","last_seen":"2026-06-04T20:50:37.162349Z","times_seen":13,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/crypto.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/crypto.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-731\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9syotKJdmfVsyU6vTpdmpPo5s5CYgFSD65qtpJnDevQCLHtGLdgD4H4gqDeJkXbqv9i5RXlZC%2FGB5Lz3rDFUDZHVABs%2F6ROwyHw1UTy7FwtQAsydwtN0EX7CjU3fpABxIda\"}]}\r\ncf-ray: 9f8806c05eb2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1841,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d8b7fe5fb37cf5c69b6faab0f1dd548d","sha1":"4390f77cc3fef87782069ad1eef7a2be62411d4a","sha256":"ac929d0b8b4db279cad51885d0753e6c4772c674c6e72aa741e2ca96cd0b3c8a","sha512":"4a247d7c86c6c94867e344177599e74eba0485bcc608f8039b619ef20d7ac1b71eb9b0d018bf73cf457e19b0e6ab2d650844c1a6470bda90f053c0d9309bb5c4","ssdeep":"","tlshash":"a931ae59ce0578076b73f7a46fb98307d1640863df2611687bcda249cffa0588172dd9","first_seen":"2025-12-20T23:57:37.793208Z","last_seen":"2026-06-04T20:50:37.196674Z","times_seen":13,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/phone.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/phone.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-71db2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zy8w5RfYFHAV1609pkJWAbEyo9m8wEbNeSQi0OqvqIToj5Tyf3mnMymEm7noG1iUdqAoIbqYa8V2l%2F4593MJpmi40Fd7agdxfdpjaSL0lTA%2FmwJB6Hfl%2Bz5GA7A2jmUdwdk1\"}]}\r\ncf-ray: 9f8806c06ec5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1240 x 1360, 8-bit/color RGBA, non-interlaced","md5":"3fc0db6db825087040291f86f93ebeda","sha1":"c3c2be7c67ace5474b794f4da34c084464b5b8f2","sha256":"0a895551bf6545d7c707f34f06922144d6431caa7d1b2cc52bb6ec21fbe877eb","sha512":"df2b953a34c7ff4016e0d467f0ab9817ba9433cabd2fe0103d8e29361bb0eeae9b09152e1cf58d37b8d07ff4873f31843a69ba6738e8199f95fa6615d7e7ae56","ssdeep":"12288:3fUThMgpncUqEW10pbc7BzYNdDoDNYOc5354LKrM6:sFMqnchz1q1NdDoCJ/M6","tlshash":"e1a412cebab9cc7afd4bc2b4c0322f6228571684e1fb4699d350722f6548fa95340c9d","first_seen":"2025-07-07T12:47:16.191977Z","last_seen":"2026-06-04T20:50:37.164319Z","times_seen":32,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/everywhere/phone-home-screen.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/everywhere/phone-home-screen.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751ba-30602\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3tr4PL9NgKKYMI0se4uGz43T24fBhlNq%2BtwDp1ZTg02pC3qL8%2BMcR5qxw5Kx7AcJplLaG0Ht59sY8F5j9fr5d1nyjgAkEyCb8CBpBPj%2FHwpXtOhw0Tm%2B1CcZYS3GzppJiOA\"}]}\r\ncf-ray: 9f8806c07ec8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1088 x 2244, 8-bit colormap, non-interlaced","md5":"be5f8801922c63f6b4c30ef7921460e3","sha1":"db2040c80f9e989a9719ebf7eb50540f4f89abae","sha256":"576b1d091633e42af499f50a6a5f4d35bec1ccde6909a90357a5525d4e6209eb","sha512":"10ff39478fad244c2e1616ebade23680ee803dbb4579b3a5b761a171eb14bf7a537353ea5497c8e555c80ff0f497b023259b0f73a79bdf9a7a79f6f41e46c1c0","ssdeep":"3072:EHTUE1Jy5weTGTs0gO8sVvkrz7+lqUnfDNHOceCYVRRlaBn1DlJ:GxZVwO8skrMqeRReZVRRlaBn9","tlshash":"fd14220b4711cbd96f2eacda8f0618548f51a072fdaf005ca5784b53563c6c6be989ec","first_seen":"2025-07-07T12:47:16.209142Z","last_seen":"2026-06-04T20:50:37.169816Z","times_seen":32,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/eth.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/eth.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/eth.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAH65aQijo2T%2FZQOJhvn4HvlDzAL%2BWFpYy%2BE%2FN%2Fl137jfRvMe8pyptfF2YD4Zue6WNx1Zs17MvDrnruvlz6bEt%2BK289uJooGmU8OyCfftmhMEaxjujrtv%2BUm7%2FFoOe%2BmK44Q\"}]}\r\ncf-ray: 9f8806c44f54c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INRk","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INRk HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYuaPs8dWVhJKNfd9mlxATkTu%2F6j1dFRt8l92FqscrDqPMpVVysibpFrAI1EgDRdSrzO1O57aMG85KifPSko%2Bu%2FdOppTtrBUpTef2M5fYxdpZ912Yy%2BLqMerocrIeEP7%2FT6I\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c4cf69c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"102333d23358cc9b47ec960185d190b5","sha1":"fbdcd9e89c2d0c9ebacc5278dde6673e18d2c316","sha256":"ebb674e53a6b2a14a45bf28e0edc7ca099aa13e5e30e7f8ddb6edd020bf0e5a6","sha512":"6dac4ed49d50f71e1f69043cd60f834ad1e5954e090371decc4d724763c20cab8fe74ed12574b9b63564a44a996bb225ddb77115f349d62311c3c1f875558373","ssdeep":"","tlshash":"e8b09b94411d97c5ea7073c431f51c450948b85e95d5449c32180444cdd5514101163b","first_seen":"2026-05-08T11:12:26.208882Z","last_seen":"2026-05-08T11:12:26.208882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/digital/phone-left.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/digital/phone-left.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751ba-270e8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hv%2FJXUr82gZBzGns8gBP69XeqrR7yZJsGHzKCsfNi5Telj8Eyhs69EoC7ysn696G3FZ9cYsYnFni6%2FnprsYVg%2BpJ3Zrpe7TkxkjgylgRoURKbdJWfJJ%2BauwlhpETI4mHJlX4\"}]}\r\ncf-ray: 9f8806c07ec7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 803 x 1683, 8-bit colormap, non-interlaced","md5":"5cc37d1fd177e992f155d2699c8fd50a","sha1":"28966a010210982cc850693a4b651b0c9c9871fd","sha256":"111321316850128d8c5d0ced6d5e6493b87b32de1e68a67e875490fc87ea265f","sha512":"dcfa19fff5c6147d65a9135a0a5e67b881f8186151e56d9874f31e1587f3b90f10ca42af85b04b94cb5dd27bf2f81c8ea1437bf2633a227661ce72e97ae2dd6c","ssdeep":"3072:A7oqfCYl9A7iSZBoYhyZcW8BT0sZjQ4YchhofZOfgC9D+WnyDzveIsG:PqfpL8zhyZcWUAQCc3oQZ9iWnyvv","tlshash":"52f313ff36e89bfe2b440b5df654d80c50e25442f97ced5b5caaad251f805088c26d93","first_seen":"2025-07-07T12:47:16.200022Z","last_seen":"2026-06-04T20:50:37.155595Z","times_seen":32,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/custom.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/custom.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-4ed2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1XV%2F3QhHwauGKGas%2Fq322eZF0%2F3lwP8B4t7E0KekuxojaeoDidnnuR0j15%2FITvf3%2BfAq3elav39B4VYmMYeD97f6x6XRFq%2BbZPthgsT62TFd%2FUIYtk%2FGsr4jFrdy2ILB1ef\"}]}\r\ncf-ray: 9f8806c06eb5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20178,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"69fb353c818ed77ed3a1ec2a9b8b73f8","sha1":"15a5675969475f6b6bf636e0671e62cca6e52194","sha256":"a2dd8062a5538e1633bea09d7013e202b8dd1eb346a6b5538e3e25aa870c580d","sha512":"5ffe2b978af494080836704a5b912ff87d2aa7e87f8d85f4c70caf617e202a5ff0a4224460c001c2778519d3a18806e7769a282e69c7b51392e53ee16a39287b","ssdeep":"192:RyLIDhEdCBc69g91U01YoeR9DNwBEquw6KhTpXxPJBTc3UJvnzMMGf7Hpn96pwNa:RMIDhCt5BvYGlnlxF","tlshash":"5f921467ea05308361379a78abe2576bfe7d5023870601b97bd837184ff60a94671f8c","first_seen":"2025-12-20T23:57:37.823019Z","last_seen":"2026-06-04T20:50:37.225523Z","times_seen":13,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/user-two.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/user-two.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-21d7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QUgK1Qqcb6zxG8DCupVrV4YwzZIa3zMLO4O%2BUT6hD7Nxra%2BoVRrQzmRrhB4VNJLGcyJVFkB0%2Fihs5nsfJUlnDncadrVClACUdPmp3FTXu29WG8KTqotziez80Va0HSiHUjy\"}]}\r\ncf-ray: 9f8806c06ebec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"1e15c529142b4ca2ab774aa05a9b63b8","sha1":"3db27f621dac556d0cc960dcfc3c170627608d0f","sha256":"65d430aefc20cd0b47ebfa1ac28e36b5c16c1dc474a6ccf7d1511f8ada11d6a6","sha512":"e3213fdeeecf51e4029e30818f551ecd7c338ff1727d1529a14caba5a5cea5238f3ba980efbdd3322f0c16ced3d9e593860caeb3333c62438c10ded6aa3aafe0","ssdeep":"192:gRXmOfWwnvebtoAkUpZrFz0nYjwj0P1M0m3/NSFHc+2+:nOf3n7kQnYj7m3/oFHFD","tlshash":"a602af90431edd90df68f6c8823a653cf7432a2ac96a0dd84256624d3bb2fc1a51b657","first_seen":"2025-07-07T12:47:16.21996Z","last_seen":"2026-06-04T20:50:37.202367Z","times_seen":32,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/custom.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/custom.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bc-2d87\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsJBxIQUsVBH3tFDKXshx1UK3qIe0JiaDr0B%2BIB11NrLLScvYhppL%2Be2rZE%2Bb%2FfhwfVLyrjnB9KEYGt7slNkyC96%2FCZr1i6BvmfwMULo4BORGBLtmogwE%2FGzFrrre4js%2FafX\"}]}\r\ncf-ray: 9f8806c0aedac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b86a086743bb15d2d91577cc990cba47","sha1":"482b594169e40efffd81bbc07ead140bd01c60c8","sha256":"8dee14ef2cbe721e272a0549cd1ddaaf9f789d4bddecb78d8871c1010542c6c1","sha512":"9a83bbbbe31701d4ada1bd8f282bb1d5167e16453c76cd45cc36982df252d46bae08b7580601815f2eae20349967d305fb39496e98c7c8a8d905fc387fe28db3","ssdeep":"192:rEJR+RxP3hRQtu1iUHyAGq6w6V0zkAN8ct1/eP:oJRgxP3vQtu6w6V0zxwP","tlshash":"30324054a16839620477b3729f5b9a48ff25107b2202c3157e6c8b861ff185483fbede","first_seen":"2025-12-20T23:57:37.816063Z","last_seen":"2026-06-04T20:50:37.22221Z","times_seen":13,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/btc.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/btc.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6738797b-d1e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxF2b6X7oNtlqbDUzmbtgktEA2TO8KjP3HXZCJMAoEOTx4HTZXTlKdUdJYTCEVwaEX5wpCWlXh00UashFWsnaNN6MFqjhpMlUa2zDotMqZtJxtTRslEuRKNR5yY2Q2PI\"}]}\r\ncf-ray: 9f8806c73841568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24f7bb257e0480540b8e388f129b57b8","sha1":"129fa54710ba1b12a2efa441f0de4a43f590298e","sha256":"38d6ee3e517606faabdd66624ecd383b48f2ac63546a36e71b8afa2026a5fe6d","sha512":"6ae02d398443ede47e86c1718b8ce551a39df510cdaf710771b65d07a75b28609f575e9e72867ebb9faadced46b4de8655a797aebbd3914baf39c8b3965f8d08","ssdeep":"","tlshash":"82616f818338d1f869900b2e89703ed6bff5245d7432939cc79f6be6ad13b98618cd24","first_seen":"2023-07-02T00:00:54Z","last_seen":"2026-07-27T06:26:07.346378Z","times_seen":141,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":74,"dns":2,"connect":25,"send":0,"wait":66,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"www.evofince.com/socket.io/?userId=\u0026EIO=4\u0026transport=websocket\u0026sid=IwSiZ-sgmXMWxvCCAAVk","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /socket.io/?userId=\u0026EIO=4\u0026transport=websocket\u0026sid=IwSiZ-sgmXMWxvCCAAVk HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.evofince.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Bqofu9eObx6gDEygzp8wbA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 08 May 2026 11:11:56 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: hDypEjNMX2nLMfIJ/7X8KrCOHYQ=\r\nAccess-Control-Allow-Origin: *\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FL%2F8Mb1WBI%2F8noe3GT%2BRCR7FOFcmK6fiAMlMajjmvjY7Y7ya9BMfylEYAIfBudO1dqF9NYIEiSEDVOqVnFPSkqImFNJ3V%2F9k26kwXQjuyHdnoQC5l%2BR5VOe3kjRwvLAe1WU5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f8806c7690b568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=556\u0026min_rtt=505\u0026rtt_var=187\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1277\u0026delivery_rate=6332361\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=09cf550428e81238\u0026ts=179\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":3,"dns":33,"connect":26,"send":0,"wait":162,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T11:11:54.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: SID=1a09t2b9c9bqpmn2b8skng02k8; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aM3AIolUk0WpTppDsOM48FWhKKY7itCe9VIcu8T5cP6EHUoIu1T7tyLeJA9VYBwS1EaAgKh71bJOtmZFyQujb%2BHJCbI0YAstO%2FRttJnFpKp8f1y84qWOBlt%2B8JS8PuMwcwA\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f8806bdcdd57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242886,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4785), with CRLF, LF line terminators","md5":"108847fea664741c0741a4b0b7a2d570","sha1":"3fd315980cfd1c888c6846e1bccbeb1efb5a99f4","sha256":"1d9c23645021f3f45992df4e0468e66e9c489aad2733625cb544daccb79ce721","sha512":"81d4f7cc07b6e21ed4220457b10da29f1e68ff280e20049241b05baeb9b58da68795c22f41e6ca664286abf89caf68b96cd966dc0dbb07a7180ff2b3ff7aaa0b","ssdeep":"1536:8wGAZj2fIvb8+dTjyTI2j2fIvb8+dTjyTIWwKOBFNLNOg2ksRoM3ejqsGDJyrkW1:8wGAfAWw9/XOg+ZcQLuRvEqPesA/uagN","tlshash":"da3408b883d8e1e59461c3a8de2a2265fd0b14f7df02c65873ec1f56af3185f8817899","first_seen":"2026-05-08T11:12:26.218436Z","last_seen":"2026-05-08T11:12:26.218436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":227,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/external-embedding/js/countrySelect.min.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /external-embedding/js/countrySelect.min.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:45:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7515d-4826\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksN6YA6HzBv7d3FQvJyLp7rMlwCJdSWDUZhliogFZHgXjgqvaBaBnVXdHyxBiXZDwdcQyBJ5HQZJYPhR4oTJSISRxjBVWaVHqGw81z7tUxxu3W9uBT72FxhBrbCXBO1IzPcF\"}]}\r\ncf-ray: 9f8806c07ecec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17785), with no line terminators","md5":"b266db9f5b2e862b38fff25034b2e528","sha1":"c9173ce2b9092ed9447a14060fd5ac56592095fa","sha256":"49cdf6c1b00908bdd41a936102c18c2680cac6a29bf386bcc5d9a9ed8dd23b8c","sha512":"72b8ae537e293500ce231d974922211d2be37d071e935df463d7e2bc8b593d57c7ee96990c476d00cb70671c8fabfaf6a72afd42972d8a90c57ad2e951d298e2","ssdeep":"384:lrWb7nvQdBV8d36/axYU5O/khe1jL4stzliDdwSRJ66UozXHQi5Py:AbEwivWAPzliDdzi63jc","tlshash":"8282a39ee240036bd9f3b69d30a6d25a403e0c0c480dd1687bfebbc90d18c89557af39","first_seen":"2023-03-12T10:44:47Z","last_seen":"2026-06-05T12:46:53.810078Z","times_seen":92,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/support.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/support.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bd-f8b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mv4Joo4ygEegtVcK0z8dY9%2BqKPdoXLYmB97UeE2SxdTTCjDIGEwlfBTSm6nb5unqELgUtBNMQN%2FJjuI5RUf82C22dzPUMxDqDreQk0GNMxDEwCQXadhhuiizi%2FMG34d%2F8tA\"}]}\r\ncf-ray: 9f8806c0aed9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3979,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"08c0c536f2693fe6db2d30bf52397aae","sha1":"1bd8b3e1000ba48d64f05fd3ec3e8146eac7c26a","sha256":"801a511a34b1c9a0ad56422480cd0221c3f24267f2704307eff5173ae8680c66","sha512":"ff9884aafe01e771c9f119aa506d5731afed15b60f90b3e2d79571d5c5a34f5851d587ee0eb5cff5fd98feec75675ad22f714711d6615d34d5f92531dcfbedcb","ssdeep":"","tlshash":"9281ce26b176782d1073236b79077b03ee26513b92d0e592fe6c46d02f3d4e6e112f68","first_seen":"2025-09-22T09:58:25.992389Z","last_seen":"2026-06-04T20:50:37.23603Z","times_seen":26,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/bnb.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/bnb.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZVAgzh1TYhF7WFesB5%2FfSkNj%2FPTuHe%2BTx9UHVrScmeHZ5x%2FaiXT7R15pY20aP%2F9w5VnoHOm%2B3yw7uqcRTpzb6BQcTGYqCobdVBIQKOt3fpzE0c1CcNV5h9ykUeKc4BG46Tq\"}]}\r\ncf-ray: 9f8806c45f58c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INWy\u0026sid=IwSiZ-sgmXMWxvCCAAVk","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INWy\u0026sid=IwSiZ-sgmXMWxvCCAAVk HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 32\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dw25yEs9o5ERpLWv9IkfQom8d5foR9%2BMZOpps9MzvUocPjgVEmjqXVpzA2IeV2cY%2BOkAPV1y02%2BU2u5VptdigUwJQDbqMQ1Szt0UbJD2fECVAEo5wmzC4ylXwxCAhB%2B5Fa8e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c71fe4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"11939fb5f71aabfc3e0d389ca6719ebd","sha1":"fc128ba201b96618fa56f97500b96c79243c4351","sha256":"bbf93c222ba4355050d8638d455dbbe9d7d939b68c6deffefe7c29ab23855747","sha512":"6694687de3123c0c104adc5f77ae9476379e7e5b617c8641dbba00b4b5863abbe22bd6444fa887f884280cfe25770ceaa77e309df384f1a83823e3ead7da5543","ssdeep":"","tlshash":"4e8000008aaa203a2030c80222f0320282882b08e200c208e838a2ac320338220a000a","first_seen":"2026-05-08T11:12:26.223579Z","last_seen":"2026-05-08T11:12:26.223579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/digital/phone-right.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/digital/phone-right.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751ba-2dd2a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3ai3EGQ%2BkKMg0KuFaOcqAvYrsMfiTyLSGn1fYhddZTf7luGuop3pz4i6bAGlWe0qE7JWAqmfzTlh6TSoz646LS9L1OvXXkizVfxza4P0GKYtF7axf91p6rII2DmFA%2Bb2Xsi\"}]}\r\ncf-ray: 9f8806c07ec6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 802 x 1683, 8-bit colormap, non-interlaced","md5":"cf0670417874d36161115a697ba15030","sha1":"213c65db6f9d10f76645d5b8b69334ca0c2d2269","sha256":"fa6d8c56191f1e8ae17383f3e3aeefe9acde2719e9831318b0a36b887fb5c78b","sha512":"e314acd41bbbd16cd47396df6486749ac22d86f1b88c3e6de7fb95b3aa56eafc5f4a7f308012165a5a087678f151b2c5685f16e1041c349844d73b6561775ba2","ssdeep":"3072:H5jZ0cdsoThVdYafFu++RbhX0cRZ3+Ewc54ptjR8VZ0E87gYg/o:ZF0CphQafFr+RS+Z3+c54LEIUZo","tlshash":"e104225ed63009653f6be1f68214aaf922953130a3b534fcc50f62ac642156acebfcd7","first_seen":"2025-07-07T12:47:16.185885Z","last_seen":"2026-06-04T20:50:37.219687Z","times_seen":32,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/trx.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/trx.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67387978-bac\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNNWXIoAf2qVH5Lgowalb%2Bi6W8Kb0O1KWpBg2XeckuqqcRhxHFGGAAcvskzS0jF3entNrMEcUrlJRuiWjM0oH17zVk0VmYu4AhkAr5H3vyDuCU9fSqmCYWj7HljpU4bL\"}]}\r\ncf-ray: 9f8806c71802568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2988,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4d5d6c096d7485c2eaf19085e1c04d","sha1":"2cbc79af72ebdb96d8fe224680b6f3cf20d71fb0","sha256":"9003bf441558585e526ea03684a3a6b82c0829b732ebe15c36e6000ec556ad81","sha512":"f33c843cfd7eb20225ebf3c2f7ecacc674bb3a116340f62ba511972ca16a0a575de18bbc6d65aa6040bb0ddb7359baa9e854e23f4c95ca6cfaec7d3d6e974f17","ssdeep":"","tlshash":"78511d28d305c6f4de1dc3b96eb65875900d608bc1d09b59bbe884a0ff900d9b39ceca","first_seen":"2025-08-24T14:35:15.284091Z","last_seen":"2026-07-12T20:24:56.395422Z","times_seen":34,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/banner/banner-image.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/banner/banner-image.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b9-28d8f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jE4ELpY%2FK0V4esxetuzRPN%2BlUhdqjGt%2BEK%2ByCcTYMmzKkKLA2RgIXhpW23h3paNlH7mNaoMQ%2FW5JbnvNctbjZS8qwivvq%2BWpuneWN8DrSVNmWpDa067ojpFTF6gGHG4jJ7ch\"}]}\r\ncf-ray: 9f8806c07ecdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 864 x 919, 8-bit colormap, non-interlaced","md5":"869e5ea969c2afbc73da97d41fbf086e","sha1":"4af17990814e8c8aa63ded5444d033214c030e2b","sha256":"b74f0722c6097f69ef16011eb64e9fb268ca1649eb4b93800cb6e60fda3ec91e","sha512":"391ff28299346dfa1eb575a0d62924f6e7a01221dcaf508be4885bd5a12a2bcf6e6b813d6eb6c3223a2866d63313c004ebd300f867ac7c64eb362bab8f397103","ssdeep":"3072:FJ3kljbhJRdA1eN6ww5osufyMJSvnfKSAL63dhkML8y4ApI1XkeFks6OF:FJDYNt0RufyMAvfrAGEe8y4fFkeFk6","tlshash":"5bf323172a132b9c79a339e402341839d7ad8464fb14f2cc185bde7d7806ef8b9f6245","first_seen":"2025-07-07T12:47:16.173943Z","last_seen":"2026-06-04T20:50:37.192402Z","times_seen":32,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.0.0/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /lightweight-charts@4.0.0/dist/lightweight-charts.standalone.production.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f8806c0dc8c56b5-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KQ1NJVX8J3XT9KHA12EFM58D-arn\r\naccess-control-allow-origin: *\r\nage: 347677\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 08 May 2027 11:11:55 GMT\r\nlast-modified: Mon, 04 May 2026 10:37:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:EF1TUnc6J3i1fFCFLxNprZZjAEni+0ItN+gBC1EwdHQ=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148189,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65352)","md5":"80dc553d4f0e0a48accffcb6562f9b7f","sha1":"18935e79d9fc59464b530f0b640a23da9cb28421","sha256":"105d5352773a2778b57c50852f1369ad96630049e2fb422d37e8010b51307474","sha512":"189d8b85ed23bbd6fa323febbe7e6ead38b64490ffffcaa8cc2caf72ba7df23ad1d05ed44e94406024271aad22401ff5e90575141ea5d2c6b3abac6da27e11a3","ssdeep":"3072:iv2ZK7+oP+Ae4zKY0D31HnqmbvdnevU0vvnVo7MR:iOo71P+AeIK/D31HqmbvdnevU0vvnPR","tlshash":"81e3c6517292e46203f185fa183a0402f31ab589394b856cb57cdcd73c99d9a72fefb8","first_seen":"2024-12-05T13:56:54.256078Z","last_seen":"2026-06-26T00:21:04.087482Z","times_seen":38,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":4,"connect":6,"send":0,"wait":36,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/btc.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/btc.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/btc.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BLbhgU2ZjDHS%2FxxGEedGT5HtOgYrdBml11gvfjYYagW0fH7bnfaiI68gpnNuMpL41MaTJGIT4zsaL4WFQWNFgTEAYwim%2BsY9sbYSsDkeM2Aqc%2By%2FDzAwgVb8PTr661uxTim\"}]}\r\ncf-ray: 9f8806c44f53c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INWu\u0026sid=IwSiZ-sgmXMWxvCCAAVk","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"POST /socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INWu\u0026sid=IwSiZ-sgmXMWxvCCAAVk HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 2\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CL%2B05W5vEpxKhWJN%2FaGUAXoHcrRQjeMxxB0Qagd2fV459ENMgW9AzWV0yH0oTC9OU4AhZQ0h5mYyCbPU0widLh9UFE7pdKiJXXcxztpi9vJqsg97qOp8u7FXNIMiV9nk6hI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c70fe3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-27T07:05:43.371362Z","times_seen":442747,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/upload/domains/logotype-276-55959.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /upload/domains/logotype-276-55959.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 14 Jan 2026 14:06:18 GMT\r\netag: W/\"6967a2da-95ea0\"\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEp4LAo9E0x0sKYUXVBtwHI2hBNLI4TDPgkthHnTVFV1a4Yc9YrWhlzxN%2FqkNX%2BqqRZGTPidbm0lHdhbGFzYt1QvEqEAahUmwRq9A4gdBCKmHlrZqkGyyG%2FJAwzcmf9aSjWE\"}]}\r\ncf-ray: 9f8806c8a818c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"c20f4a09940f8bf4bb46f369f6affd0b","sha1":"7add5d9b9a0c4a5a8acb873ed16de3034fb201ea","sha256":"a7a2359b1a31dcd453aedf7b46f58d5e9186ced0b1e3fb0f01cf3673726e3e10","sha512":"2ce55d944a29435141fe7342a579e1eeb9bdd206372eaf71e1ca8c6206d14c7e00c0de3b96d3b42cec3a6490eee58d541d4cd6e0c945362da50bfd3e3aebc6ec","ssdeep":"12288:UqIWU8ZPkWIjXdL0oExN1hmtT4FsuhZHjABFBUkQ:HmMmXdBy1hmRHBFBUZ","tlshash":"78d4230bf7eb9596c2343dbe119e89638ad1115df7f9d9ac8e9480d4297b160f330ca2","first_seen":"2026-03-15T07:41:42.795258Z","last_seen":"2026-05-08T11:12:26.233599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1360\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 12bd2797-67ad-436c-b1ab-6915022bf45b\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: CJOknx1tIgGVuRtm12dnU1tTSQ4-LAk1jFHO231R9Vaf5d8dsz0ioQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4257,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5516b3e915b64372ec0a92f7c6a9a4f3","sha1":"167a9c590df9adceb86909f203e152c6ee27d84c","sha256":"e36ad1885f3050ca706eeccb930b4dec761c7a5dbe1510341cc3be70f8d52dc0","sha512":"e58afe5bb712212ad3b5543e27cca889fc8dfac70c0ce1c549f35fb358893accee23e77f61f7735a6b07f1fe92045c98dceeca34379b2199536cff68da6ce6a5","ssdeep":"96:kVY4hC4inMQ+NF5nxqVGhz4bXuzC/M2WrBO:kVZenMQ+ToGSrVNW4","tlshash":"9491062117c487a8fb364d09bb92b9a21c7630a7becb1dd0c6d1577b48f68be4b18351","first_seen":"2026-05-08T11:12:26.235013Z","last_seen":"2026-05-08T11:12:26.235013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/intro.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/intro.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-120e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uF1w%2F%2Fy1lVU7Z554Wf0X0zW%2BVcswlKksbHl%2BOkKiauFQNGOnhE1rQKT6R0kX7PmJxP1%2FB56p4%2BonpUzcckVEH9oLz%2B%2FfjWiegK3V7dHR0%2FWnHb03UfpWyhYfSOio1iB4rh6j\"}]}\r\ncf-ray: 9f8806c05eadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"249a5995e6ced7d67fcb4256bdd94638","sha1":"b1ce28cf11204f0ad1cd505cef5c3c63401a99da","sha256":"9936f626d47adf81d0649e9826f1c3400ed12ac0a56c35949ac2ee631da84633","sha512":"d6adc94e32e5b05a768ad290ac2703ff7b93b3c4fba7163ef74b0c78fbe66d9ec6c29383e05fe7639a035ff8bd1a2c6447e2070acff08505f8bf5a848d4f7b55","ssdeep":"48:hl1RNtZEJJCqWHfhzk9LzOLkPVSeWO6tfqhJRJNoz0jN8uTqVNgJPqVWTqhVNa11:hl13EKoRzOQFi4nP1xjehI5ahK","tlshash":"fa91de4a5d825315da3bf6a03fa20215e7856473dbd390d47ecc128c8ff912886a1fcd","first_seen":"2025-12-20T23:57:37.803314Z","last_seen":"2026-06-04T20:50:37.201185Z","times_seen":13,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.0.13/dist/css/select2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/select2@4.0.13/dist/css/select2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.0.13\r\nx-jsd-version-type: version\r\netag: W/\"3a76-rlc1Vi+qvRotmAO7179MUCteT1E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\nage: 879123\r\nx-served-by: cache-fra-eddf8230092-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14966,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14965)","md5":"9f54e6414f87e0d14b9e966f19a174f9","sha1":"ae5735562faabd1a2d9803bbd7bf4c502b5e4f51","sha256":"15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81","sha512":"9cc365a6e6833ebaa5125b37217fd0e7a1f7eaabc1012c1bde2a6ea373317966ec401d7cf35a31d1c46fed43d380196b8aaa329eddf92a313080651e51720f9f","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF","tlshash":"3f62b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T09:15:52Z","last_seen":"2026-07-27T06:39:54.791871Z","times_seen":21967,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":25,"dns":0,"connect":26,"send":0,"wait":14,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/footer.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/footer.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-cae\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVdPHE22NhcYkiLsuGQvf9Uy%2BVyZebuRQXZNLgvwnLbDnWThgukwRbd9cGBz2SXYzPZleQ%2BodLTTt%2FUnGOlGbGvnp%2BaavIW3%2Fw305bE3KDfoFiL8k%2FwAShbUBYkRq65omDZV\"}]}\r\ncf-ray: 9f8806c06eb8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e6051506f746dd57504daf9971ce567c","sha1":"fd3912d4efc7c560c7bb10c68391a1a57b23e600","sha256":"cbb3d770de680b4e3d4569d82951abee391f18ef163186c7e7c93dcb433e5dff","sha512":"90c394af2d30e4bf998533a8330e5ff8e8dcf45620efc1c7ffbbb27dbda94eb0224cba901cc7730cf45bff47c90bfee08dd221108161f6b8a90d80e4c05703e4","ssdeep":"","tlshash":"8961e31e6603110aa533dd64fbf34354eaa88457970a51b43d9d23588fff29189b1fcc","first_seen":"2025-12-20T23:57:37.795399Z","last_seen":"2026-06-04T20:50:37.174468Z","times_seen":13,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/usdc.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/usdc.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67387978-6a0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBuzvzA%2BbjfuC8hVba9SPDa322005VtolYyxI8r0SOZYu32KtOQ6c%2BaSmkxpeu18456iVmwOLlWphZmPx%2B%2Fho%2FYcpFdxwUAm3PJlDYBpO5xXP0M4e15lGR%2Fjkhf0ICtZ\"}]}\r\ncf-ray: 9f8806c72825568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-07-27T06:35:46.481958Z","times_seen":757,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":70,"dns":7,"connect":9,"send":0,"wait":72,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/assets/no-data-B8vTrjpj.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/assets/no-data-B8vTrjpj.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b5-26e3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfFHxI1A4k%2BcHG06ERjY%2BL0wSCskf5NZJN6WNrG8obeilE%2Fbqe9VeJnao0mB3sxvggGH8LT9IubeqgE4d2Bzpj1%2BJd9Jeeyd9gQf1JUk5LtcTkQzS%2B%2BqCx88KkPdaf9EwJtC\"}]}\r\ncf-ray: 9f8806c70fe2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae3136fbaa0c47b25dc06b11e6aeb8a0","sha1":"e1b44544ddad57a0ba5b7fc850f6c729572c120c","sha256":"9332e8da91998e43e6c8c0e4fcdab5376a58ae4248b12749663effd96ebff2f4","sha512":"5c8d9c579f8083ac5b85f297632270d88d14a9feee9c098add9bf85481ba339e45660c7ab22521d6056e97dabf6fe75004f052ca6982de448050a00ce1fcfe49","ssdeep":"192:5klNzC/0bLgi2k/I3RMvTaFipCddQjxQnxeff:mCsbLgi23hMvTzOQ1QnUff","tlshash":"642242ec57289ce4699582fdff5916e870220aae61544748c16c3a3e385273ebd2ffc1","first_seen":"2025-12-20T23:57:37.788553Z","last_seen":"2026-06-04T20:50:37.203407Z","times_seen":9,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1156\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 92075251-a99f-4d7d-bca3-2a27fcb0675c\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: p2j3uNIw2Oqanj4hXOKYNJ-kzN2ggW37pbBebEVT9Utj4uTEOTz8TA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3980,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"18bcb9cea5f14550ebd3d998bca8932b","sha1":"0592df79e7b641ce865c08b9aa7c98e1787afe19","sha256":"69a3d0d32dcfa5d2e4d82041e70cf17242f92cd094411ee00d62a708819e7dfe","sha512":"d676f01d3e3eb22036ab62801743a0dc0742ccdd07848878180448e5a330f385ac9d45588d7425b86a6ee0dcffc1303b97d8007fff5a709b1c79b4af14178d4e","ssdeep":"","tlshash":"4b81c151069dc664fb365929b3a2f5b159ba30aabedb2fd5c4d5e4270ca20730b0cf01","first_seen":"2026-05-08T11:12:26.242081Z","last_seen":"2026-05-08T11:12:26.242081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 11:11:54 GMT\r\nage: 38241\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-07-27T07:00:52.793906Z","times_seen":25237,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":14,"receive":4,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/phone-bg.jpg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/phone-bg.jpg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-b03f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAafo6VqW8OmhnM2a7i4ARBng0Ypp87wFaslPxZxE9yAGgQNCmXMtCQvqdmwcGSOzknVfVLlzCHgMpwbR9fHzEAYOnb1sh56HB%2Brko0fYiSrqsVz1gAR0YYbbtqCrN9Kwp1B\"}]}\r\ncf-ray: 9f8806c06ec0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1700x1856, components 3","md5":"1fe8f0179d58b262e079f6936c8da5e4","sha1":"72b1ff382ad50d40a3fec43b397c0c14ceb65b97","sha256":"2ce5e82177d52864e3477465d667ce4e394d86181d0a7ae99cfb0f0b95e33e70","sha512":"8e3d8ab07273d9484595f385bc31985f15465f68f7b07ab93428010cdbdb9260bea93e1cc2f515c23467a79dafc4aafeabaf7bece46a773e2c9478e3114ec6b2","ssdeep":"768:V5YTenl1nMN166adoJ5oVdcXQr5w+5OBNofnnVqAtah0nlofk2kVm:VEenlC16PSASQr5wFYnVPFnlo82kM","tlshash":"4713cf22ef2094a6c83d03ba90d723303f76067d63e29653d68512317eeab87bd99750","first_seen":"2025-07-07T12:47:16.198813Z","last_seen":"2026-06-04T20:50:37.175574Z","times_seen":32,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\nage: 2340661\r\nx-served-by: cache-lga21978-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 25099\r\nx-timer: S1778238715.021883,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-27T06:57:23.407993Z","times_seen":182253,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":15,"receive":6,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/header.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/header.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx4g%2FyXd6ryJ7Wihm84mHn27rPooaGrWl0tn3tPQQyVYggerKsUXHg0Ql8MLyFSQkCQPn4NhjKb8mBllA0mh3pGX417Niz7XiwYS6UkIR5eTSvuy2SRTUaU4G2voE7IMMQSn\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69f751bc-296\"\r\ncf-ray: 9f8806c09ed4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":662,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"96bf30627b45e28dc689f59687faa875","sha1":"613daf052f975ac48ef2929923ade7552096fbe9","sha256":"17047b2750f13423652d6cc992c987f4e2a919d8c1bddc672990434275c8da6d","sha512":"f345b6ff8b56af18e6fcee5544fac932eadef6add1ad5794ff51b3a8f0329b65967075da9e948880f1f940b97ccf890721b9da8d9cf73678a814b66ddd31ea24","ssdeep":"","tlshash":"1901f227a2147e7944bb0baaa7e10e94f62510d76461403730ad8e8f1fe25c1a6aadf4","first_seen":"2025-12-20T23:57:37.814436Z","last_seen":"2026-06-04T20:50:37.227917Z","times_seen":13,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/ltc.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/ltc.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/ltc.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKEvvW0ttjeI0DRUnfeD3n8e4dJxDMjrfiQkBoCR7uB0nTru44lMncAZiahUbYKM3CCNtIqlzIW5UGmfiHmGZJqjqUl4EP4OkRfxSnexIP2HfJ6mtBKqn9m152yQHGvqMrCZ\"}]}\r\ncf-ray: 9f8806c45f56c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/assets/Inter-Medium-D5YUpoRx.woff2","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/assets/Inter-Medium-D5YUpoRx.woff2 HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/themes/8/css/index.css\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106108\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:28 GMT\r\netag: \"69f751b4-19e7c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IL%2FGurHD95U46tTn9Wz%2F%2BSc6MrE5lkESxCQbrSGzwkSP9L5K9sDAhutHoJ8ltgBwqtG%2BMx7%2FN7g2bb5Gw9OMlWjy%2Bp5iRgfww04MyEMssQg1V5JfoJ%2FsdQURQdKnOvluXEQA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c45f5bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106108, version 1.0","md5":"eea97ded621cd8a18067c7243b19ceea","sha1":"d88b0b7a77cbb6ea033f692c05d5855a7be7d0ea","sha256":"d6e2531976fa618cede5863027366e4011760b0610d7136a8f7d7ed149c26348","sha512":"3ae400bb27c8db14d060ff83506d70b90de06612bf40ede0c7fbe1d4b302fabeeecee8d85c886b37b7aca06d4b7daeae473c8b542faa98083036de7fd3506c72","ssdeep":"3072:goH303tZuta/VoRorlduZwOLYGhLDSCWTXUP:gcAnsCVoRGlGwwPxx","tlshash":"8fa3123cb10d4bb3cdd99b3aba1735b5a0891a04774f24f6c14ca73662ad9e0b40bd5e","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-07-27T05:59:18.053545Z","times_seen":441,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/header.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/header.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-1fb5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfDZCJ%2BSPdKopGn0KnnqdsmdhZcKyjbgVb0ST%2Bb1xOGLGAVdJFWHgdUIZBlWYY1EQxSwC2p1dDCRuunnCTOOaPA%2B2gjK%2BmD%2B1oGKJkco6HfBGuNZGXxVtg23774zVABiuzTE\"}]}\r\ncf-ray: 9f8806c05eacc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8117,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"18a01b3824f300bc987642f6b6201380","sha1":"57880fe356fdd521c08a127d06c6fcfe822a76de","sha256":"f448057ed5e83ca8d86aabc3c5014a0847e64b231f8cff01a54110527397546c","sha512":"9e71e4079b074d365b9bfc38a5437c8a2aaf7c44b3db9ac80a123c36e1651151cbaca170e6d3e7559e754505526a23dd1b20e6cd74af38005f0be994048a5e40","ssdeep":"192:7iW7sKhz+gRbS9G+9iwhnpmAskATE9tOraMIb8SR9Y9BK3j9AN1SNutPPr3yhRH:MUwhnppsHwFM0","tlshash":"caf10c08db0621066533a7a9ebe30a0cf76960139b02517d7bce515e4ffa128c766fdd","first_seen":"2025-12-20T23:57:37.792033Z","last_seen":"2026-06-04T20:50:37.231496Z","times_seen":13,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/banner.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/banner.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-a9d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zry8WRBuVWiXNKFwwjxK8%2Bw19iIczOAbLgisUpewVXg6SGA8SzCGsbV4ULFkySSiMoUTyh%2BoRZd6YrM0jY6kHMISFzN5wGe7%2BY7yO9tGRGxTusP0fo2az0tE59v%2BQmRipoe\"}]}\r\ncf-ray: 9f8806c06eb6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"76b45efcb91ad32e78505e36c43f2b37","sha1":"893f9db05255694317a3d30d3baa64ae7b5b87d4","sha256":"ccd1e35a25c9b8ebf87fa91bdc38117057796d1bd9ffc708bb4c48c845fcfa23","sha512":"bd28877ea110ee687137a0b6f44aab9a2ae185b98dd7b4aa641b86c8b4b6653d0eb91ea6b65234b39d8e1a203997d972972628118429f120ad763faebdd86350","ssdeep":"","tlshash":"a8515b09de822a5950b3a2bc8ff20a45ebdd2463db1681e4bb9c21544f7e0b19179fcc","first_seen":"2025-12-20T23:57:37.785416Z","last_seen":"2026-06-04T20:50:37.218496Z","times_seen":13,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/external-embedding/js/socket.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /external-embedding/js/socket.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFSiKFUQ%2FQk8fUB6iEN3dEZEY1xd21krMnaiSyJCXx9cMWSIMpxNreZ7uRl%2FnbH6svHeMwRocCzJYTxNSr8NzFyJLz%2FgPTbYIF0Mk5pkhg4Vnv8nwH6S6qpO4CvB5FixIyde\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:45:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69f7515d-171\"\r\ncf-ray: 9f8806c08ed0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3cbfaf430d4d21ec537c799ce730a16f","sha1":"2f96e23343d18b4df17f13bb83c1f501112b8918","sha256":"3163eca9cafd8f8d8022f73cd33f6d3098ff6519afb71839c9fea62c906e6387","sha512":"b8a9f18ca2fcb176d400119591628718f2ab6f058f0269370f5ff63c396b61b47447329221b6e1e67890d8129af765a24c59cca36b81bc9f53418b807d04120b","ssdeep":"","tlshash":"94e0c0c09d10aa52bb33411000123804fd31ba131b00412e32b70eb88e33f8172d27eb","first_seen":"2025-08-24T14:35:15.29788Z","last_seen":"2026-06-26T00:21:04.071311Z","times_seen":33,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 11:11:54 GMT\r\nage: 34332\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-27T07:07:22.384641Z","times_seen":26180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/sounds/sound.mp3","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /sounds/sound.mp3 HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 117447\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:45:01 GMT\r\netag: \"69f7515d-1cac7\"\r\ncontent-range: bytes 0-117446/117447\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUNNTChaRORQA9pyUOeAKsy6HkOvI5X81FkAR6wk9cE%2Fd%2BDFUWU4sTlMSKvse6dB9zixvwU2sTaTtlZcIRuPEVHUtZkHZCDz7RPYfgCd4nAQ90%2B%2FO0%2BWi1oTs9IutMhALnCk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c1ff00c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117447,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo","md5":"1cc673461b35c28775a41bc4622f7a90","sha1":"ec8adb02f3a62fd5b617f56cd1be67411f1ec099","sha256":"3a42ac91417a65c37e71c1789b702e85a5c7413d21abb3562ea4323cc476f6d8","sha512":"2d71f3695081dc5e73b2c2d15e8e2797043ca5f3e6f0909f9d7b063fe10cd0b5c63528fa145de50b760d7ca1615a46ea9ded1f9ae17bfe90952190f96e80f9e9","ssdeep":"3072:L/7IuCojWPmr4UIBrRQCSV3vwfWOXtBTSHr08Kuwafd0gW:b7CjxpBrRQCe/8N7SLxXw4d0/","tlshash":"e7b312f17a06fc0dc90b9ffd93828d16712e175870ad9ee5622b2639ec3724294f0da1","first_seen":"2024-01-03T04:46:08Z","last_seen":"2026-06-26T00:21:04.080786Z","times_seen":35,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/bnb.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6738797b-72d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdHpWiX3lcpubNRPliK6zb%2BGk7tZZAccNYn5kCO3EF3HkoHnZX3zd75QGdyxarAMEiP3OQwSHhExMZ600wQ5AcopxZIpw%2FT9o3%2FQ%2BjmpZiKRzRav7DrPTS0FUUjLi0al\"}]}\r\ncf-ray: 9f8806c7180f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeb5ec93dd1529be3fb2f556b0265de6","sha1":"aec5847aee628bb7782c84c77e1284d7cdd9c856","sha256":"4a856c235bd68c22594174bb5417210e1444b4af01fce74507da85337f28d095","sha512":"8fa4a8187e22609fad1910b5a69321043a48d3eff157537e0efa41948b9f57824be9e8295f20d6daa85480b584386f1afe2f82abb304fd688a8b54a28c9e7bb5","ssdeep":"","tlshash":"913132a841badcbdf13983f40af151c415e9acbbf104346c94e4de01bd08a953685eda","first_seen":"2023-07-02T00:00:54Z","last_seen":"2026-07-12T20:24:56.394808Z","times_seen":133,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":72,"dns":8,"connect":1,"send":0,"wait":66,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/user-three.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/user-three.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-20d0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYMK%2BcZeTIjaSBKRxm6xgw16EVwwgxspqhcLBcJy1qJ8mONfe1w4fLGoyNkrHbUpTvv99caPSNXfV1dstR5prl6gItfmjCR2jiuHymtr3DhXpYiVevwJGkm3BJEBgKP6mxx7\"}]}\r\ncf-ray: 9f8806c06ebfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4aa127f9f5854da9efa3c99080edb50f","sha1":"abcac3e7220a830c0c7c703bed3fe24b52ef4b41","sha256":"c64c7fb42f35d94f92b47bc4a8e6e813da580690b6ca61182827bcf1fd3e69d5","sha512":"88ee644e9e3b110165ccf7040bed92cd010fc98d83b79076ac6c0323cd164340c403d7587ac9aec72738d336a8ee33962c7c882f32928885c3a1b44f1d4e7287","ssdeep":"192:kwI3rFzo+F/lWTNN9/DfxtCsGjHGViRMnuuZpJu2RAb9cG3WMCu:kwIO+1qN9D3CsjcRMnFZpJWbuMCu","tlshash":"b402ae97a2cecd3a8a935418ef01844cffd9bd4b96634f37898c515ae86c60650cf785","first_seen":"2025-07-07T12:47:16.184348Z","last_seen":"2026-06-04T20:50:37.191139Z","times_seen":32,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/global.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/global.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b7-1169\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHvcPuyxDZYbEf4B%2FPTUwnF1GQ%2FuWPrN1P3%2BgJHDJK2%2BJ391RlwHTvz52sXJ96AzcTbelQmrPyULmfm9OA%2FHHCtE4ii0wsq3wYdY7LdV%2Faq9CWRL3QUQivrqwoZUcRpclpdu\"}]}\r\ncf-ray: 9f8806c05eaac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4457,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ba55e24c21d1afab826fe7e91c2d8215","sha1":"5635cf67efd84b5c23d744871f565ff55946b0ab","sha256":"e44c167d53a6bcd0876864e89f63e60d508a1c007d7a8c371149c036a1f4ea70","sha512":"4e79cafaf2d611bc29713e0e0547e0f3cb6633c50b17e2fcf2bdf21a2f16f6d0f08cb3d9fedf8e9a86a36bb64265b27827d90cf79c98bc625972cb7e5fc6d5d7","ssdeep":"96:rLzFjq4ep3sgRzOc7+L4v/5/9/y0RzOt1H+FFr/6:rLRjeZ/JKLY3lMlOO","tlshash":"9091ec2ee602608271338eb8aba7572aff68046387054578bfcc77598fb56744660fcd","first_seen":"2025-12-20T23:57:37.790885Z","last_seen":"2026-06-04T20:50:37.217011Z","times_seen":13,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/tools.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/tools.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-b95\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zz%2BeSc8u0Nl%2BF7d%2FCrJBRIASvnZ8ImvizjQIiwob0UPJ56zV%2BdGrvh%2BOlYFYpnapywMNLIKEvmnizZoOv4zg4fIUJpPDcCh8VQwU0H56Kp%2BEgjqh%2BPzo8nRtMXc3YIYH0RSa\"}]}\r\ncf-ray: 9f8806c05eb1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7ae4efbf397eb27c2429c3f2703fa9b2","sha1":"068417ca352a5b607f516e570b35c3f68984c8f8","sha256":"798465dcd74f5c9edb93c64fc734a92785e9333312e7702296ba6badb7f2c177","sha512":"7f1de93ce17a80cb975c8a04bdf0bdc5c26cf275b3f3d7fcc0eba6f074ef461710bac8e345a60ef0c621dfb55d4d98f2b0608bf063ec0155472ad476ce3b0a33","ssdeep":"","tlshash":"f651797ac4157546a933b668eff28209e6d90413d30d51e07acc63488fbc568c9b2fce","first_seen":"2025-12-20T23:57:37.81122Z","last_seen":"2026-06-04T20:50:37.161592Z","times_seen":13,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/index.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/index.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751b8-ab32b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEhWcutWSaiMcdnRups571tzji3rsSTQ0mL8qrNXb7Bzi3Liq26KjBtc8qC%2FfkdWD2rH%2F61k3E8PI37o4x4SBn98JqRs7e7ekQwpi%2FyYMsfSnccDAWdcLj1uzrul9kl84T3S\"}]}\r\ncf-ray: 9f8806c06eb7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4068), with CRLF line terminators","md5":"ab822bb14ffdcc5057c4c3238e7315b5","sha1":"225601379b4c207da0560f045051f9587eb6fcbb","sha256":"c2ec190c6ccd9071fe418e32b556f31d71178831d8d91a5f1e3f870c2d476f6f","sha512":"6e2e684a0f5de1b4ed311fadc667340aab780b25261975bd4da84e9228ecf7b0cb3cca50cba0131aa923f188bd31b1d72ca43f0ca716dedcc50027c67780efd5","ssdeep":"6144:3VTuKbIbZdhbIbZdaqAnLErz5G5FG2IBV0va:3VTmqAnLaz5c+/0va","tlshash":"02e4c729861a6447a237bf387bf25745fe6404938a0141b97fd8714c8ff91a88a72fdc","first_seen":"2026-05-08T11:12:26.275295Z","last_seen":"2026-06-04T20:50:37.189501Z","times_seen":4,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/tools/transactions.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/tools/transactions.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bc-4355f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI%2BIRR74sVrHOCG1m5JPDQnojj99o%2FrxmTs9r6cB7%2FRvgH2b6hRhYYZoIkBHexShUjYVn27lyZSV2XpNSskmyJTkzQWUJHBpZ1CfLlI5jz2kn1rRErId9lhwX6kfNgr%2FqGv1\"}]}\r\ncf-ray: 9f8806c07ecac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":275807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 662 x 391, 8-bit/color RGBA, non-interlaced","md5":"f17742e290dd2bca61dc10ae4d933958","sha1":"97494f3ce06b56a94fd801047ace746288072e72","sha256":"fcd70fe383a34621f75494d06f4a152072ffbbf2329e51e1fa49987a9698fb8b","sha512":"90946cb67fe8880aa9684fa200d34d9caa63d605eaaeaa4b90a906a970749078ac5362bdb7fe94a0724a6b1d81fc5e7cf7f2fb536b2cb09d5ca0a616b84e12bd","ssdeep":"6144:XrfoRxWA4m6Rmd1mXLHWDYJBFC0QMgJOkBKifZC+hhr4I:XzipL6YdKHWDsQPsuKiBXhh8I","tlshash":"cb4423f008417ae47a63caadfe2f2dd0a127929d47676ac411bf40d4656b122b013bff","first_seen":"2025-07-07T12:47:16.206418Z","last_seen":"2026-06-04T20:50:37.226793Z","times_seen":32,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INbL\u0026sid=IwSiZ-sgmXMWxvCCAAVk","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /socket.io/?userId=\u0026EIO=4\u0026transport=polling\u0026t=Pu7INbL\u0026sid=IwSiZ-sgmXMWxvCCAAVk HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8; tz=UTC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 1\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=loObEnGi%2Frii6rEbaFhopC97ZygA6aUk98D%2BzQJh%2FfZlzBNrdHJkuLBQ6QsUW0FeaXu%2F9%2FiLzx%2F6xJbhMfEza9GsDuwcD4WpqyskaYH%2B%2FlRoogp4yGfAMiup0s2M6DtHXIZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8806c8b819c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-07-27T04:17:28.457696Z","times_seen":11987,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1435\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: da92bd63-74c4-410f-b35a-0c3ba51e02cf\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: Sx2QSdFb5BKDiLCneoTCHq5gTNbCtm1k2VEU7lEr5IinAyh-SPA9Vg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4288,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9160a79c2a24a8bf19fdc904d28c4b9e","sha1":"9f7f8079c7e3fb2c5b5330fc68c61a32ce4ce22c","sha256":"01a77b0f78293f50a2813c3927c71d7dfc16ecc1da80d96d861175814080dee1","sha512":"0ca37be22a8edcb1eea49b2cb6b021ed32cbc063905f457d6b562830c1ad2a8c13211a826afc955a60147ce3ac6b4a3a53c6a9101b624573d0805c46df2e50c5","ssdeep":"96:Bf3J6q7N21HfKDlldo67SWP7TLMg1O7p5mn8pN/aKNwMT:130q7ASDll97SILH1OXmnwN/jT","tlshash":"7391455117c48664fb368dc9bfc2f8e5496bb09baeca0cd1ced2263718e51b36748720","first_seen":"2026-05-08T11:12:26.278525Z","last_seen":"2026-05-08T11:12:26.278525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/everywhere/bg-planet.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/everywhere/bg-planet.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751ba-65f0a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QD8TFEGtPUZG9Xlo5%2FY8JCCl0W8dqjviySsqQ2PN41lSQh1qns0Ck6nDeBnH5fMfrLK0McUw2uRJni2zdVg1v0R3b3fHmmqiO1LO2z5LErnPocdOAyaKRUvds9tBuXGt0XP7\"}]}\r\ncf-ray: 9f8806c07ec9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2240 x 1180, 8-bit colormap, non-interlaced","md5":"27a4f7e7d8acf3859f8600dfe830a75d","sha1":"5d7f438665f4558820d415a5285e3cf578269f6e","sha256":"7b78ea5f526d6ffcbefc8e65781fd2e0298763d32f233acac58f48f9adcdf7b8","sha512":"839d0e466a8ddd154fe0bc3cd86e8c6c29ea6945f660ae1d5559beee1db38929bbfe6fc91fa095436258a160a9d489dcba0a7ce03f0278f63aad633a609b016c","ssdeep":"12288:ZCzltVKKTbegJUBMQmRVvjMvBQpMLJH7/Y+7za:ZC5uWbegSBMBVvjyVHPK","tlshash":"b7942378b605883cf45763dd4abafb85e56cd1bbe55185f3244ecceb42820792d3ba08","first_seen":"2025-07-07T12:47:16.187699Z","last_seen":"2026-06-04T20:50:37.163065Z","times_seen":32,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/currencyRate.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/currencyRate.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bc-1cb8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B3TPs5130OW685GEjclXuBQddou47ohWViUCawKsb9bNxKJgzxGrs0%2FauWjhnrJ0%2FrBeR4jJi%2FX6DeX8ZuHBB7dd0LpASgdhtM9qdrY0aLsZQyZcDGpoCbNo6kswUKvgbPU\"}]}\r\ncf-ray: 9f8806c09ed6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7352,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"476c7812b89bd99ecfc6b90b1907fecf","sha1":"e38d16a860bb68d41e9b8f85781a513185102217","sha256":"d71aac499632426e5883246d81276afeb11183bb134f5bb9862ffee3c3e22494","sha512":"b4f40370fe813e1ec0d5761e3c0ebce9bc6232613814bd64b1e565b6447f60792ed75e0fbdbe059a3b385379b1d1df1862c02d2ecbaafc1f7ced7d19386bf88f","ssdeep":"96:+J43qNpHGC2Rx4V/kjn3PpNX/Yhvw7PLDqi/OOXGDmUHwYY4Xab5usfvictW:+J0C52jnBNX/Yhvw7TQmUPXab5uCU","tlshash":"77e18534e47220ba84b3135a9917420ef726e27b775282a93fbcc6101f7b414d186fed","first_seen":"2026-05-08T11:12:26.281614Z","last_seen":"2026-06-04T20:50:37.172507Z","times_seen":4,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/js/select2.js","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/js/select2.js HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bd-2c388\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZaP3mS3J%2BGxwgYj5%2By3C7NQHhn9ox%2FD%2FYwmJRlcyHhG%2BwWUU6%2BrESiWvsatlCIER0KoJkWZqzTV%2FAZLfoUSoXpDYEHELgIuTT%2Fk58VR4SX3Pd22EbXHWZqJmZw6xfTfPLrI\"}]}\r\ncf-ray: 9f8806c09ed5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181128,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"88bcbafa0603bf3ed5246ed7025c1b2a","sha1":"35ee4fa97a1b1bee32b9bc79564b8907a5e19204","sha256":"5eae39006c3f71883c23a060796ba20c214803779d8dca712e1bd45ce5c75baf","sha512":"13bb67ba15d4611ae18c4fdea89e38acc2b2a32e8c1fe2e255f613230ac92eff947d7b6c55a1bf3e660857fbf4ceacbde4d8de37bcdc4091bca0ac3e785676f8","ssdeep":"1536:+hWI15KmuezekDxjDOwF8o/RWMorsJn1cREoYtsGrb9e9Ty:pI15KkY41cREoYmGrpJ","tlshash":"d60430686d56217483b773bfdb9a6c04e539526bb00589033c7c86ec5ff24209a96efc","first_seen":"2025-08-24T14:35:15.281551Z","last_seen":"2026-06-26T00:21:04.054306Z","times_seen":34,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BCHUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BCHUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1068\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4458e4c7-0e05-47c5-92df-be2e588b5835\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: wdJ6xslS0gQbK09fJVxRnDTpD8-MrV5PR0Sxho4gdMQaLGQSHPlKfw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3950,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"31f1ce1a1181467614516b929fe75874","sha1":"b5562b0a0177e73f827d4f50aa20a584f17a596d","sha256":"70bbd3ad8459fb0a2a281e6ba8acfa34ae81364c9e34a25a01db2467187b2109","sha512":"cb4ca8366272f026dbd99a925f394145427005b24d72301b46662b2ec819520ab600f214300e5f35fdc5176172dec3e2b6f793db7778faae89481eec994938e8","ssdeep":"","tlshash":"c18151771790c265fb36895db3d2b9a1196e305f9ecf1cc2ca91652b4ce14b68f38311","first_seen":"2026-05-08T11:12:26.283955Z","last_seen":"2026-05-08T11:12:26.283955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/css/companies.css","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/css/companies.css HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpBCADwRauP%2BwQ35F7HMeEcCEGja8gaSSFpwPlSc2s%2FT7rT3HsnVrYjWbpFI0vVuenNoQc0o4ci5mHeEdhztqnLqIT9mIpugV9zJAQQxVZgECrMTGejTouU4IbWIbK2DuuV%2F\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69f751b7-367\"\r\ncf-ray: 9f8806c05eaec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6082df5ef7351d8bc32ad635ee1aa4ca","sha1":"3bf2d0842de7e7c6097c08ea4aac4287148f88dd","sha256":"01e1089e8485ae76e3c7923854b8829d7fa72ba7be94d2cdfe7fe0cbf9c0c226","sha512":"52e64c55a218705765c9bd3d24b48675054a02b8f4be099e0d2457ac029410be23be2c94db39bad020dc59818eb3098d539784061c05e70812ad4043cc0ae56f","ssdeep":"","tlshash":"8d11cea6a402200a9333fb249bfa0108e5dd5533e70aa2f1b98d7885cfbda5c5165fc8","first_seen":"2025-12-20T23:57:37.83059Z","last_seen":"2026-06-04T20:50:37.235364Z","times_seen":13,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/tools/blockchain.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/tools/blockchain.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bc-45ed1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6Lx3oxCY0SEQ9eBypA3kvv8j17O5FcIRvD9MBDZD2FNh9Pk7sIY5jxoaEXBH2W2aQ0YZZW5G6zOTWlf0EYVh7Ar8rijLEverdtzL%2FmfBQaQywOYicMV%2FnZn7mb2TG2lJ%2BoB\"}]}\r\ncf-ray: 9f8806c07eccc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 663 x 391, 8-bit/color RGBA, non-interlaced","md5":"99ea9c60540e500a7bca8b1a7762e171","sha1":"503e16923eccf89b7f74d6910ec491e650862b3f","sha256":"4eeec74fcddff42e5cc7a662ba34e6199dd42c5ee7ecde45759204ec0d80619c","sha512":"95b678c11773b20b64bbceb813d4b35159e87cab02867b1c6021c73c64468da60888a5d2db0a9629f8304522bcb486fb3f14d422f1fc2f6fe2975216826f9e6c","ssdeep":"3072:7OyRfNxm0jq6kXKnojKSkNGXOZllYfHDfKChgOe4/vGMh8H2ePusgc58C/Yu+P6Y:LpfDfkX5mxZQvDAdk81Qc8C/BO64QSO8","tlshash":"935423ea835dfc0388b6949ac27dd7a506f0d4a238ec6c982df88567e35fde63652044","first_seen":"2025-07-07T12:47:16.200826Z","last_seen":"2026-06-04T20:50:37.185235Z","times_seen":32,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/bch.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/bch.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6738797b-4be\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KlOD5Az%2BRDghOKShWoms%2BN%2BUp5EpKMTT%2BylyUaK%2F3mreEv9MitC8IN%2BbO6AmpCEJHL3o62JKYx6%2FX7lrzUrKtxgOveYOsM2QjxSXcW%2F4yDD%2FCXGq6dSX7neU4CGrJU1\"}]}\r\ncf-ray: 9f8806c72824568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-07-22T23:55:56.040061Z","times_seen":849,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":72,"dns":5,"connect":9,"send":0,"wait":73,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/24hr?symbols=[%22BTCUSDT%22,%22ETHUSDT%22,%22LTCUSDT%22,%22TRXUSDT%22,%22BNBUSDT%22,%22USDCUSDT%22,%22BCHUSDT%22]","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/24hr?symbols=[%22BTCUSDT%22,%22ETHUSDT%22,%22LTCUSDT%22,%22TRXUSDT%22,%22BNBUSDT%22,%22USDCUSDT%22,%22BCHUSDT%22] HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1049\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 12bd2797-67ad-436c-b1ab-6915022bf45b\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: kOi3FQXDCKc5JAZmNpJ-wh-0tgpIMcIcWBmaUi3hln4_ihpzfwdWMw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3795,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a14be9c1eaa55c61f0479c345c57d01b","sha1":"abac69d2bdbcd497a0afe93e1e7a7a39a6c3b23a","sha256":"c28666472ac3e9bdb0b4d3d69de45d5879c2afc159a3b75e119fb6a706676357","sha512":"161a2d06e3bddbe4dcd5c50018d4a00438eb43be5da61a3ed30e95e72e40e82cb863b6cdd583cb834152325dd47cc6cb8ad4d0587b0ef6adb48d76272283b11a","ssdeep":"","tlshash":"5171c4f3e32c5c58c27dae8ca782b62411c9719ac3e18f1257ee8aa506f5b3f2508740","first_seen":"2026-05-08T11:12:26.289155Z","last_seen":"2026-05-08T11:12:26.289155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":57,"dns":41,"connect":8,"send":0,"wait":266,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/tools/eth.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/tools/eth.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bc-1273b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMNUDmbwSv%2FOCNxzfMQvsWtX9lzQJjMlj9ig1PsDbV7pMQO47GmZNRJpFO45LAlBt6AP23ixcf7ulPCPc%2FzVBSCV3XVCuqCKjhyW7ci5ACAUSkHVd3wB6cdi4wk5cS5bdaBr\"}]}\r\ncf-ray: 9f8806c07ecbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 662 x 391, 8-bit/color RGBA, non-interlaced","md5":"631ebd19eb78501a9ee080d975017cf4","sha1":"12d59652e45a592e86bbf34d48378f288caecdb0","sha256":"d95bd946d7953b6caae9e8927a8665a31f27f8858cf512a50beabef66891956c","sha512":"005f50188ec0cf9d2818ce06b203fc2666ac9455ed876c0a9e757487b6369eedf42f92a2c1cb63bca0e7e706e8961dd5c3a4866b64d364114b23bec250add8f7","ssdeep":"1536:1j3PKu9DWmk3rPgupTEw1bv6PMcCbSKN/4VvGiXR7ID0+m8rPww9jRr0:1B9DWV3rew1bvi0bnSVvpXR7a0+m8zw1","tlshash":"93730299e76896febf3d8637ea544003736f648c33785117ba8f0a9c61ca305d86ba44","first_seen":"2025-07-07T12:47:16.214833Z","last_seen":"2026-06-04T20:50:37.164928Z","times_seen":32,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/trx.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/trx.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/trx.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxiczmRpVIx3qZs2VDkO7nCzT%2B681I%2BiNZUBf1lfDI66NSVthtfgnr4AfaA%2BRsSu0LlGGYDVgShzgAUVaCtYEnYyoQVY4r%2FTgEvoxybkED67aCNCk7Nubmz9R3b9Ge4FnrRb\"}]}\r\ncf-ray: 9f8806c45f57c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2988,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/images/coins/usdc.svg","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /images/coins/usdc.svg HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://furypanel.com/images/coins/usdc.svg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkCU0bE9mUyHbSSsUM%2BfQ0QvISOIoVbwoTyqEKsF3wdJRnF46oK9wFctBwltaodcNWuajMVIqukBsES9eK8qLY860zp3u57klS32QUHOKIM3F8i%2FfzHO3T5kVk25es1ubeZ%2F\"}]}\r\ncf-ray: 9f8806c45f59c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:52.530819Z","times_seen":17558191,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/ltc.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/ltc.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ji6mXa9bloQGC0%2F3RSEKI6UfVqg3CWnpCBk%2FTcOgTKLkb0cVq%2F03dTs5dTHc1z0%2FIQaieFz02fXHaxJ%2FVQEmtsHX3dLzEgK7CG6sAkYFyuuFNgwFEIUwU9V%2BE9f5TezP\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67387979-2e4\"\r\ncontent-encoding: br\r\ncf-ray: 9f8806c71fff568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f692d5ead1c5ffe9a8f080898c809d1","sha1":"5beb59134c37b7a92139b0d711b63b86f2831b56","sha256":"0b59b69332bc195537e8917d16b3f0b8084f4e95564aecfac05ceeca625c65b3","sha512":"8a134baa37c0cb63560ce1d74b42f980347d597c84e750b84a207507d04a043b4e9e13bb5c9fd62fa35b912169ddab39fa8837a53e4e69089f59083eb11b3602","ssdeep":"","tlshash":"7c01dc194344dc7ea491860403f5a1d16371b08b97c049f8dceb2a69e2158e05218bec","first_seen":"2023-07-02T00:00:54Z","last_seen":"2026-07-27T06:26:07.225622Z","times_seen":127,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":70,"dns":10,"connect":1,"send":0,"wait":82,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"108.157.231.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:56.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026startTime=1778152316242\u0026endTime=1778238716242 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nOrigin: https://www.evofince.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1246\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: da92bd63-74c4-410f-b35a-0c3ba51e02cf\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: z0GlA9d0QQ5QKjNNIGw-5RNzoQ0XHeHx7lI7OA3WLd4l1wwFzLsLdQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4072,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c7713da0b1f0d7193263796e4e2a8b7f","sha1":"40585987ec65edd8742cb4d3d3815314ca3df058","sha256":"26ec16eebcf58196b01b61e88efb6016b0b7fd3c10c7a8c530c198d4dfc1267d","sha512":"eddfa6aabf0d1016dce1849a5d07bb3d54c08e3c64133529aa256317478e5d9e697eed316abb6e0c010b9ea9624025a27b8b1982df6584627c87309c5732cd6a","ssdeep":"","tlshash":"4481e61527b482b4fb36886db7a2fca5093e3a97eecf1dc08dd169274ce10b21708b15","first_seen":"2026-05-08T11:12:26.29244Z","last_seen":"2026-05-08T11:12:26.29244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/upload/domains/logotype-276-55959.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /upload/domains/logotype-276-55959.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 14 Jan 2026 14:06:18 GMT\r\netag: W/\"6967a2da-95ea0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzkpabqtE86Kpj6PKxofTBWlr62PVlBHj7bW%2FAzxI6Mj8yl99hOs1pryj20DKOjUiASHpnqig%2BTdrrcP%2F8xLDbb8EexD4%2BzAIKuHmFsxwHy%2FCUa%2F1JmvwOBaLO5pgAk5uz25\"}]}\r\ncf-ray: 9f8806c06ebbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"c20f4a09940f8bf4bb46f369f6affd0b","sha1":"7add5d9b9a0c4a5a8acb873ed16de3034fb201ea","sha256":"a7a2359b1a31dcd453aedf7b46f58d5e9186ced0b1e3fb0f01cf3673726e3e10","sha512":"2ce55d944a29435141fe7342a579e1eeb9bdd206372eaf71e1ca8c6206d14c7e00c0de3b96d3b42cec3a6490eee58d541d4cd6e0c945362da50bfd3e3aebc6ec","ssdeep":"12288:UqIWU8ZPkWIjXdL0oExN1hmtT4FsuhZHjABFBUkQ:HmMmXdBy1hmRHBFBUZ","tlshash":"78d4230bf7eb9596c2343dbe119e89638ad1115df7f9d9ac8e9480d4297b160f330ca2","first_seen":"2026-03-15T07:41:42.795258Z","last_seen":"2026-05-08T11:12:26.233599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/global/fire.gif","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:54.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/global/fire.gif HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-3c0d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxYCvOpdeJ6fzyPUHli%2BAshjsJDLYNtMvYxTa8Kw7UtaELWWTBuY47vVbBPWO4rOz%2FFuh%2FxKmizcktBJEMOAj62pJnlUwvzdubzDAHhtHFcEBwa0SXT02VkBj4rQCK74i6cE\"}]}\r\ncf-ray: 9f8806c06ebac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15373,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 40 x 40","md5":"12a456771927215baeb6726b208351ef","sha1":"84ebe87d370e9bc1773eff6f2568254c78585880","sha256":"873c5c112c766343d8ce91da982cdc63fb04c24cfdd4287a55972f5501a7d49e","sha512":"9e6b2d40b218dd5352ff89a2a8722082b1cec4d41745acaa686bb352e0d2089af10f735016d2b404d471debe2fce4ededd9b8561b048e64e510b715ce490ed14","ssdeep":"192:C+7X9S0U8LU2MCOuv9t/ys1mPEpISm1Ln0AQk+VJCLvvw0s5/fyeFkw+g3UZ:lNlHowL/noLx1Ln0E+nCzw0sF7Mcw","tlshash":"24629d2be51c4996e0173df9186be34f193988d248b6d2f13da6fae5a80017dc19cbc7","first_seen":"2025-07-04T16:55:57.166292Z","last_seen":"2026-06-04T20:50:37.15345Z","times_seen":39,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evofince.com/themes/8/images/intro/user-one.png","fqdn":"www.evofince.com","domain":"evofince.com","tld":"com"},"ip":{"addr":"104.21.62.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evofince.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 15:49:29 GMT","end":"Fri, 12 Jun 2026 16:46:49 GMT"},"fingerprint":{"sha1":"61:CF:C9:02:AD:68:0F:81:EA:F5:41:9B:08:1F:BC:AE:27:79:FB:C6","sha256":"71:6E:A3:4D:CA:C2:43:F5:C7:50:C7:26:8C:DA:EA:0E:92:90:B7:6F:71:32:80:DA:7B:A6:51:CB:CA:9D:C3:0E"}}},"request":{"raw":"GET /themes/8/images/intro/user-one.png HTTP/1.1\r\nHost: www.evofince.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.evofince.com/\r\nCookie: SID=1a09t2b9c9bqpmn2b8skng02k8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 11:11:55 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 03 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f751bb-2097\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Sfhcyr%2FLBKoErctYXggO6tvbvV7BZboxT7VVzTRIQzlAWhwnUIrukHAGTYyiALlzpgcqyJDp29%2FzNVTqosGZzLQHiPDAWeOrfwkgUQ3r5ekLHiaFuLMljuW%2BtnLcx3Of6h8\"}]}\r\ncf-ray: 9f8806c06ebdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8343,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 80, 8-bit/color RGBA, non-interlaced","md5":"8777f92546ec32ae4ed8c4499b5fa36d","sha1":"aa55c360520ca0c31a0b939288e0e55a7e81a158","sha256":"5d790225690dff1f9f02ac517960e12074a7bb791eb6ae60c4f21459bfaee5b5","sha512":"4031926f19fe01ceb7a691f9d24ef6145c4462f26f6a4bc307f6345604ad1c5d282d184a903e50a86520654dd5eebdb39522bd87e2d6fc826a1f5959a8d2aee9","ssdeep":"192:YZxcGWzEC1m688oCjSdSpWiPE9uKjlarIWBNMgU8H8f3jkxDlgaYW:UcJEC1m6/oCyeWiPCuKsrIWLMgXO6lpv","tlshash":"d002af429529ae67593d94124e965a47686a78b4ecc27fb0208ef04bf07edc03096fe7","first_seen":"2025-07-07T12:47:16.179165Z","last_seen":"2026-06-04T20:50:37.154996Z","times_seen":32,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"www.evofince.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"furypanel.com/images/coins/eth.svg","fqdn":"furypanel.com","domain":"furypanel.com","tld":"com"},"ip":{"addr":"104.21.28.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.evofince.com/","date":"2026-05-08T11:11:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"furypanel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:00:27 GMT","end":"Tue, 23 Jun 2026 10:57:50 GMT"},"fingerprint":{"sha1":"5D:7D:3A:11:63:61:07:38:E7:22:2B:BA:53:8E:C5:31:D6:9E:BD:86","sha256":"D6:63:90:DC:A2:A5:E5:1E:D9:72:51:47:A0:E3:75:25:A5:19:27:25:8D:C2:86:5E:19:61:65:34:39:7F:D0:45"}}},"request":{"raw":"GET /images/coins/eth.svg HTTP/1.1\r\nHost: furypanel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.evofince.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 11:11:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 16 Nov 2024 10:52:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC2CVLmI26XZBTOGZXkyIHHl%2FUN9z%2F%2Bl27LJ0SUx4CtgBREjeQaM3KXc%2BZHJE5DFd33Rx63qyTJIRYRnH2AIthdHgzar%2F5KUYga1UoEt5RRdMPjiN7MefRGs6%2BaqXL9p\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6738797a-355\"\r\ncontent-encoding: br\r\ncf-ray: 9f8806c7180b568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87de24fe5274859b5aa0e281e96bee17","sha1":"a77e95278747f103ea9853d008fbcd11ed51b05b","sha256":"f0bb742214daa0806c6bf3079362fde012da9ebf92be6acc82d9f3f77442b1c1","sha512":"b2900963d82a71212cf76cf1959203b6e69ee363b013cb18406e2f09d3c61aa9ee52466355c25e53dd21eaf7f8a2d1e51868b59d46c7a792bdb45949b4badf3d","ssdeep":"","tlshash":"500116c00ec04dba4763d570377cfd8323bb90d1d5c5148a74c539675893a9dd36158c","first_seen":"2023-07-02T00:00:54Z","last_seen":"2026-07-27T04:01:40.136939Z","times_seen":135,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":68,"dns":3,"connect":9,"send":0,"wait":78,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}