{"report_id":"ffd0bb9b-7bd6-4648-9239-ea17767e4326","version":6,"status":"done","tags":[],"date":"2026-01-24T13:54:31Z","url":{"schema":"https","addr":"ethema.fi","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethema.fi/","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"title":"ethema.fi/","dom":{"size":2761,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (435)","md5":"34485da1d6335eb52f2da772a6b5b8e4","sha1":"09d73b81642f8be19e6796194d0415a38cca8d9c","sha256":"17e3cd42bbde9a87b8ddfd9f65ee6113d4cbb7df5ee0b6f65bc326f351cce40f","sha512":"a30feb842b643f1def6e294331f70bf8eecd8c243df7541dcc57941b819be4be5c8345638b6cf46a841b7830b12f53a663cddff7c436575e6f65013973be9422","ssdeep":"","tlshash":"3e513392a5544cbc9617328726db8b4c147d6640f8a73efd76d020c9d3886fc067edad","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ethema.fi","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:54:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethema.fi","ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-02","domain_rank":0,"first_seen":"2025-09-11T13:23:38.835815Z","last_seen":"2025-09-11T13:23:38.835815Z","alert_count":12,"request_count":6,"received_data":176476,"sent_data":2593,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethema.fi/css2.css","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethema.fi/","date":"2026-01-24T13:54:11.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethema.fi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:11 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\netag: \"238c-63ddfb2ddb386-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 730\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNUAUpZaHJYZum%2BAVYAbqrAoxsErb5DJyL2MbqHWucBRN0iw%2BcMS4gGOMn%2Fa3MDYTWfziZXqE4Lb2R2PzY3iua4CzK6zlHJQ7A%3D%3D\"}]}\r\ncf-ray: 9c3005734d82b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-07-06T23:36:27.122394Z","times_seen":275,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethema.fi/sena.png","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethema.fi/","date":"2026-01-24T13:54:11.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET /sena.png HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethema.fi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:11 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\netag: \"6a01-63ddfb2ddf5ee\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 27137\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3BUGfAMkeX%2Fo3Chv1U3B8mErMjXRdtIH3D%2FF0K4WUlKlMIO8KpvhVZ7uBKDia88gpN4FXqHRkfQeoY3oVqA7ZNal8Fj13MtEg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3005734d85b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 644 x 502, 8-bit colormap, non-interlaced","md5":"7e5db3c737ec61162ea4a330a752b96a","sha1":"04eb199fa26ebf31e11a015e1c84b35567c5a56b","sha256":"30024923714f7d47c675746629ed26b02fa8bf26e06ac616f8799533376cf5d5","sha512":"9f5217e325bdc45dc86be43ecbfb2baf1409befe6a991a66fd733e5980d6f13efa1645e264d1c156b4328aaa56ca4a7143ed6b0a68517b2a39637e08a792359b","ssdeep":"384:bxEuOk1lahSY5kfVzx4qK7nSCfWztOTYTVFRCDHUobc1RUREHZBmQCGrMjg+fLZF:b5uc9/58YYDHUoiRkq9CGrMBZjdRcpk","tlshash":"92c2e1ccbad99812b43ea05f31e4065d3d75ba865efaacd308819d98387051b5ccdf63","first_seen":"2025-09-01T09:20:58.570493Z","last_seen":"2026-01-24T13:54:36.45772Z","times_seen":6,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethema.fi/ethena.svg","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethema.fi/","date":"2026-01-24T13:54:11.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET /ethena.svg HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethema.fi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:11 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQkMSveuKTg0ooMo0JsoulJ4ljdoZVhkuRBf4DUalyIEvq%2B7PERpdnUoCnnK8lpf1Gx%2BVVQ4VRU6MuArgM1bO%2FHBzhElehTZqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"7b0-63ddfb2ddc70e\"\r\ncf-ray: 9c3005734d83b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c7238e13ed8eb7df4550561f6eea711","sha1":"9163e01c0b8085690b16f8e71e20e79a4a7c9552","sha256":"660e509fc65d74690c2f1de8e894edc9959e1f16104b18df18ed658e51e56b44","sha512":"6e193b5c491ad4b32564b3330f45eb070bec054660a132782c7c109d7dd42b7825735557382ed6f463ff301ea9be8be694e707c02c39734fee71aaf59f8a8cff","ssdeep":"","tlshash":"e24101f4621494abe1a8c6ffd65b404d24b590a7dac5c38883d06f7e68587891d0d6f1","first_seen":"2024-05-10T01:23:28Z","last_seen":"2026-06-09T04:16:18.102997Z","times_seen":227,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethema.fi/","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:54:10.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzQs3XCt59PbNFTETB%2ByKDE%2F8tbgxVYK0b7NPObQnFqqkKq3J%2BpOQk2FYVOZJdjX0ptwDT5Dr9oVveLUzHMkXnaC%2BYOFfcsLSQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c30056f4e731525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54093,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (717)","md5":"d3227b22e94597d8ecd212435cfa958c","sha1":"21584c7510be4dcecfe187d2ecfff7f27a43a118","sha256":"462365f0c1d69db324c1dbbe3424688a6d6937915884a42c05c9b6755af25107","sha512":"58b173d00622782a502ff9f5de0f4be8cbb1567730dd62592569875ce95685c801cedbced2a221c9f94e054c5925afaf18264198b4c1d9faaedd1c3b7629961b","ssdeep":"768:7++y707dXaHK6N/sd9xLxIDMVI2DDamAFfKmXHHIwDCXmCJXYltwJSDVD8l1J+NB:z6Krx29jvoqXsO8+mG","tlshash":"36336246fda28dba391791ff6bd6dd4e656070038801fe483afc40c18f899b799b7918","first_seen":"2025-09-11T13:23:43.743459Z","last_seen":"2026-01-24T13:54:36.455288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":38,"dns":17,"connect":1,"send":0,"wait":216,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethema.fi/b003aab2b9b96223.css","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethema.fi/","date":"2026-01-24T13:54:11.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET /b003aab2b9b96223.css HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethema.fi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:11 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\netag: \"108a9-63ddfb2dd9446-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 13292\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7o8QDPYhZriXxGk1Za1rzyQ11pbl0vQgrdQMaHc2xA5apzZqtOx2aWoLJbpiuWPvxE342niXck4k%2B9m%2Fqhgqv6EN7L98R5r%2FA%3D%3D\"}]}\r\ncf-ray: 9c3005733d7fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67753,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eab2e6165cac7fc41f9fbd5f6f88f5e8","sha1":"c22c6905fd078df804e33ca4642cee5cad4c1b5a","sha256":"8c85440517be7979ba9edb768570c1606fae3d6be87708d71ea2626cc08e9ef4","sha512":"b5e67b6904aaa0d1fbe59d6781075246f975e89bfdf974c71a13e291dcaeace7161b7db8a957efd98a0ad273f0db9334fd6d68f6f4365ec5c83e977782e0b6f2","ssdeep":"1536:LQUd3tytjaS7xEmQjGBVL0+jsMq+WDhGID7b67g:kUd3tytjaYsjGBt0+YMq+WDhvDPug","tlshash":"f86384a0a262e47fbc23f0f9a35cf81ca119a1d9ee3617d9ff02611563d26f10d26b14","first_seen":"2025-09-11T13:23:43.725485Z","last_seen":"2026-01-24T13:54:36.456893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethema.fi/badd7a2a537020c6.css","fqdn":"ethema.fi","domain":"ethema.fi","tld":"fi"},"ip":{"addr":"104.21.11.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethema.fi/","date":"2026-01-24T13:54:11.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethema.fi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:51:34 GMT","end":"Sun, 29 Mar 2026 18:49:20 GMT"},"fingerprint":{"sha1":"3B:70:C6:50:E0:64:F0:1D:C0:FE:43:21:BF:83:02:96:93:D8:6B:0B","sha256":"38:B7:B2:9A:B6:ED:60:C1:60:91:C8:B6:DB:6A:16:8C:53:D3:3E:89:83:10:55:D0:47:5C:83:88:7E:4D:9E:00"}}},"request":{"raw":"GET /badd7a2a537020c6.css HTTP/1.1\r\nHost: ethema.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethema.fi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:11 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 03 Sep 2025 06:27:28 GMT\r\netag: \"2f10-63ddfb2dd982e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1011\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OchBKleO%2BgjYWmAj8n%2BnD4V7SIU5By7xBAqA8Ps5O0YPKY7hxf%2FrBeKJQoovvTw5Vxw6fUeXQ0Nss7EBEW1ynZSUm0MlMNiuKQ%3D%3D\"}]}\r\ncf-ray: 9c3005733d81b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12000)","md5":"d7b9233c1e4455f5125bbaaa08582d2f","sha1":"12ec28a1d8f0ffd5c978ce43c106ac2dc0ef784e","sha256":"f362f81b958fa34523b65c29783c3d11586416a60839cf8cb1727e61b49ab0e5","sha512":"a57e22e19774e732f1639f373b888c59752cf2da831b5debdf819ecbcf77ae999031b0762f665b2778f4fad0dee1a6e831d35fb27070165c7fa9bff5e50c3d4f","ssdeep":"96:p8Rxcf8pN9H4FRxpsfpy9H4eRx2J2pT9H47Rxr+hpQ9H4MRxg7opB9H4BRx9YLpe:pAxT9YrxB9YOxH9YVxB9YQxT9Ynxx9YG","tlshash":"97423724502e854ec572fca33bcd7f13386d202555d44a22ea2e45addeebc7773a1b28","first_seen":"2025-09-11T13:23:43.728799Z","last_seen":"2026-01-24T13:54:36.45612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"ethema.fi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethema.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}