{"report_id":"08808576-0d7e-4f25-bb09-ec676fb85475","version":0,"status":"done","tags":[],"date":"2026-07-26T12:53:47Z","url":{"schema":"http","addr":"h5.nmetamasks.top","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":0,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"title":"MetaMask","dom":{"size":77536,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62973)","md5":"76b75bb2e6dcfc8c37f62a4eae7f553e","sha1":"9300f42a528050789180dc8bff20942939949097","sha256":"6b20cd62ef49f25fd50c9aecb4b7e308a2bcb290cf71fe42a43d252e2cfedaaa","sha512":"1b3e37bc34867f2d273b2a810da8b4a0315e8a6356acd266733fc2a51b35f1fecd9c8f49c9d93201f68ef1dfd25674c50f1d3eabf8f154657dc83e326b2d7f79","ssdeep":"1536:xn5aAf5MSgc7JLsDfDvKVLJRw++Cb8QACb81kNE4XdISJAcY2hBESFZ5LfxuLfMp:7qUAUJ","tlshash":"1173f93831063626783785d0f0994f05b877573ac2441d6ae3be279a6fcbee0ae31765","dom_hash":"domhash5df8d62085ce0bd00af82e69f84ba2ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.nmetamasks.top","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":0,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T12:53:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws.metamaskfa.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-07-20","domain_rank":0,"first_seen":"2026-07-26T12:52:59.457599Z","last_seen":"2026-07-26T12:52:59.457599Z","alert_count":0,"request_count":9,"received_data":0,"sent_data":5667,"comment":"","tags":null,"fingerprints":null},{"fqdn":"h5.nmetamasks.top","ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-07-26T12:37:54.776099Z","last_seen":"2026-07-26T12:37:54.776099Z","alert_count":224,"request_count":56,"received_data":7813734,"sent_data":28447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5.metamaskfa.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-07-20","domain_rank":0,"first_seen":"2026-07-26T12:37:54.761474Z","last_seen":"2026-07-26T12:37:54.761474Z","alert_count":36,"request_count":12,"received_data":0,"sent_data":7246,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-24T17:44:02.835081Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.nmetamasks.top/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"45c116a8adaeb7042f2174b094fa258b","sha1":"2c92de6e0d0b9ee4ddf09bf61ca1064809f3baea","sha256":"2a69be895e03668cf614329f7af41c26aa21f1695cae14372bfcdf2055cbc3b8","sha512":"d9e76e6cc99c7113c314a7fcac58b86215ba32df37e6f75c051cd69bb897858dd9dcb2dd52d278b27187f5adb032120cd43460a04e8a41019a87f5e3fcd280a1","ssdeep":"","tlshash":"03e0688260b7294c0220c156304ac4031fb608739e864d613c8c77a58ff9b4bc569859","size":371,"data":"","first_seen":"2025-03-15T09:58:35.220029Z","last_seen":"2026-07-26T12:54:27.679797Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-26T15:03:20.152962Z","times_seen":6966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni-app.es.DryKfclR.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"39b47d91b737c4ea36792cc321fcf87d","sha1":"9ef7c05c4749651e944e023859c108b98297ee93","sha256":"f2fa8a1205df8dd9e48b1269e689d709ef3f5e59f785743a1660db20230dfb49","sha512":"0e80cbc1d107e792e21534bb94c0e3460a2096d67873e11312e4735f2ff2af90290e45b15a62e135b719caf36ff2d89438c99a1c4fe9cb299bdbc0c1a9a7fbd2","ssdeep":"","tlshash":"77a01207604130125802284000a6640b51f611f145888e3081d913245ff44ec812c90b","size":84,"data":"","first_seen":"2026-03-26T07:51:16.007695Z","last_seen":"2026-07-26T12:54:27.624716Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"92443b26c22a5cdf332d8f825ce6fda4","sha1":"9d14ea89bc8670f39ae47828ea619d04308e9aa8","sha256":"f0bcfe115786564dc4d1a9a038aa024e501357486509a63c304db82b2f971812","sha512":"a03444cf910691ad3d23603a02ebbbb0aa4965608e4ea351bf7a078ddb2c2ec3c165e42a1563273c37c445c0575ee28a1d3bbdf60a848c0519c677fd5419438c","ssdeep":"","tlshash":"bcc08cc4b0c26d001a26645010bf24e4a03440aaf04c1b038d94e8482e624b08237ed8","size":143,"data":"","first_seen":"2023-11-22T06:47:57Z","last_seen":"2026-07-26T12:54:27.659191Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"2186e9fdaf457718a74e971c2670312b","sha1":"dcf2b824ca7e52abdb06cb64a5ffbb86b75a2bcd","sha256":"3b4cbda3c526d736ee6ace8ae84003d654a1d7f1bb77ebb0f0e33b95950c2883","sha512":"be8266639624c5b2008d562dbe2b2f1e7a4d867f48135793af4f353ac98bae14b8e9a6aa791f07532ac72c91c81bd7c66e1140439f9f0310ac1c151afd49424b","ssdeep":"","tlshash":"f1c08cc4f0ea2e002a06651065bf24e890248027b4481b67dde8d8883e620f08233eac","size":154,"data":"","first_seen":"2025-07-16T11:12:21.759955Z","last_seen":"2026-07-26T12:54:27.692422Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"a7a5a4bc648fe1b2a8f1a504a3ade70c","sha1":"fb7e22a0e145ece5b02c2a0cc9d666e0761da839","sha256":"3be13dac61dfcc51183cb48d1f0f26e6c11c55fd26d767cc8a0fee57fc4ee73f","sha512":"1fbb8bffebd8528373b1da451d5130a49b9d11c71145963623fecc1cb1f95dd33b2fccda75bf4544ab26c2e8336a60b5b32d6bdc30b50dcc21dc03a672f347b9","ssdeep":"","tlshash":"3ac08cc4b0d67d101616642455bf24e4a034402670881b139dd4f8892e220f08237e98","size":148,"data":"","first_seen":"2024-05-11T18:07:41Z","last_seen":"2026-07-26T12:54:27.676934Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4c4db15d117f56c8047b03c9f25264a8","sha1":"1c693da0be2210a61550783d17f3ab5246b88ed6","sha256":"1c4a0e70324851498a0e1f357497b6ee2857a8ec40391aa19bf1fc3b209f5649","sha512":"f2d941c236c61827cdceec17e0724ce078acf6bb2dc32674157c4ae906c9a8a4503b3da64083e656666fc112eed2d867c888fdb1a2b8c5ee0d9d39432db2a6c0","ssdeep":"","tlshash":"ddc08cc8a0c22d102602aa2428af35e490244026714c1b028ce8e8582e220b08233ea8","size":143,"data":"","first_seen":"2024-08-20T08:22:25.429858Z","last_seen":"2026-07-26T12:54:27.686614Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9b0e07873b00be98df873b0e83b025fc","sha1":"8b917db3343b9cfe01f4867e6fd0507e0a67d72e","sha256":"0bbe5423df65a20061fbea437a26f70bb94425fad001ce5ba4aa47257e242d05","sha512":"b492935a2364fb316af2695af8144d3b4255fef6190767d71ecc8511e244e95aa5a6abb8a8f5505cbe2c6f2d02833f928dffdd4a262c368eb77c0de864db7f26","ssdeep":"","tlshash":"aac08cc4a0c62d002602a42010bf25e49024402670481b038c94d8492e220b09237e98","size":141,"data":"","first_seen":"2023-11-19T14:26:31Z","last_seen":"2026-07-26T12:54:27.704298Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"534f707176abd4fa5828298e08e02e84","sha1":"67b7709d0fe7b17d88e9a16be7cd1e931c358081","sha256":"f441d55158084d4bc2c9f31ebd4e3f61d2221a3d40f81d6f6f9b76a5e816e7ec","sha512":"03fac4c354ad7a137b8a1f0d4629afd3a07c5d6358e8fbe9ab455e02fa89a0323736c08265743e5cb207e21f078c8623c44dca6307f3cc3b23f75669075d2e5a","ssdeep":"","tlshash":"48c08cc8a0c22d001602681011bf35e490244026b0481b029de4d8482e230b08233ed8","size":141,"data":"","first_seen":"2024-08-20T09:58:59.107733Z","last_seen":"2026-07-26T12:54:27.700991Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"2bf04d2193419ec555649692f6ae7d8c","sha1":"8e807d31780373975c66b1395ec19efac5126b48","sha256":"4c51c68633133815484c135e169e1438e6edecde01ee8e23cc5243be3408e1eb","sha512":"4e6a955a4a9bb6f266d415abbec9942680904835103caebe2d0bbaa8fbda1bcde2bbe512731c1220fa9fa9f99ec39bdee6aadb20d32532aa9dcc309128bf5dd3","ssdeep":"","tlshash":"3ec08cc9a0c32e506642a56510ff29e4a034402e78881b028ca4d8892e220b89233e98","size":149,"data":"","first_seen":"2026-01-04T12:18:58.614511Z","last_seen":"2026-07-26T12:54:27.669549Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e411f1a9d872d771baec2b843a210369","sha1":"2af9bf51811e734df2250634396670416c44bc20","sha256":"dda6f0710d2edc4118ed2fd0828b4c8d02620fa63b06d85913304ca9a21ed1f1","sha512":"ea6199e39cd448cd99acb03f076e5fef20a9589587c667f5ec18b64d505d84550d286243f632f6dca13cb63836b41f1a0f25ca5ecf4fe20037fa6f737287ccad","ssdeep":"","tlshash":"71c080cca1d63d2029155814106f35d460344027b14c1b46dcd4ec542e130f09277e9c","size":163,"data":"","first_seen":"2026-03-26T07:51:16.093894Z","last_seen":"2026-07-26T12:54:27.700154Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni-icons.CeORqMFo.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7db9e2d261ae77acd4bfe36ff5d028","sha1":"e87642cbf71ef0651fe30658b394e81346f25977","sha256":"273cf0487684a18a13eacc4a27854c57ec48605f2ee392b95bf49572096b8aa9","sha512":"3567545c5f6b11dcb8ec88d3b6cd8db39aee1ccaf59afaa2cd36906b275ce8a651f088b750b75973069401cbbe7714c2900ee4160b8848bca94a2e27a51ea1ed","ssdeep":"192:+mrXEy1lUnUG6qkFqA8TkJcYyqn5SxK5TgeaaBVZ0O6mNj:9rX/BqQcY15T5PVZ076","tlshash":"de721349cb8c299c2fbba74d74cc7076114e0f95c90e3cec6c65e74ea5dcda6268132a","size":17426,"data":"","first_seen":"2026-03-26T07:51:16.002038Z","last_seen":"2026-07-26T12:54:27.641136Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"a39b5ff589ae67a49f0f4bbea75fa0ea","sha1":"0f45ec9451ac9f73f27f52e89128f3b2b374db12","sha256":"46a0fa78a104a1c19b1d3e1c4f6235ad61d83af59abffece54765565ca01e6f8","sha512":"d71db39910f77555c1ff7a0e7daf2feafe3c62ca6b648f37f11563e3fff8eff43736e952c083854d7287b4c91803344f5e3cedbdb039c2d44ef40142bd5c3b6d","ssdeep":"","tlshash":"03c08cc4a0c26d102612a41010af34e4a024402a70481b128c98e8492e230b08233ea8","size":136,"data":"","first_seen":"2023-07-14T08:52:04Z","last_seen":"2026-07-26T14:44:01.198649Z","times_seen":5126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3ca9bfdb272d0f99ef4ff26677b28d49","sha1":"fbb6bbdce8bf3047c34a2d8a422fc89168478ba2","sha256":"ddf5c78b107bc0c0c1dc421a47d16738a098b61347d939c03f96c99fc3b1120b","sha512":"3b43ef5646f747f249302742db13b575fd7fad0add6cba196700d32ad969dd4848c0e8f669aafae66883283c6ce8cbeb1cbd8c8f4fcab83ecbddd4b6f68d9402","ssdeep":"","tlshash":"4fc08cc4b0c27d001a06641110af25e49024402670882b429ce4d8482e620b08233e98","size":139,"data":"","first_seen":"2023-06-03T18:56:31Z","last_seen":"2026-07-26T12:54:27.705208Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"44a314d5006b40415ee8ce332795a096","sha1":"37c2fea15fa7b03c50ad8c6e45c686d060af2afe","sha256":"6990016294a3d3d7cf9a55b4ed775e0551a331e514582a81f8affa64671e6aa8","sha512":"dbae0b355d6befd1c0d00b075a63620dd8e5d54b1c240ba1fdd4241b8d0cfcc47717a3b4b80d2d27c60e0a56d74cff6a2634a6155d981277bd352ec56cd717e8","ssdeep":"","tlshash":"53c08cc4b0c26e401602692014af24e490244027b0882b428c94d85c2e220b08233eac","size":141,"data":"","first_seen":"2023-12-22T11:18:51Z","last_seen":"2026-07-26T12:54:27.681326Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"1ca81d3ea46b1319caf799768928f814","sha1":"a7eb87758ab9d548b3204450a144de0f10ab7d03","sha256":"05df158645dfe5735335c1aff217264359e89dac84e1c7fea23cd657afa3860e","sha512":"0236808446811ca8527c7101b0a110a98e6b5ee324b25ce45ceba069c52eeec95791172dfc4542fe89e81f52ff1c904d801704c3e1a227111db509ad78f824a8","ssdeep":"","tlshash":"7dc08cc4a0c32d101a52655010af25e490344026b04d1b02cd94d8882e220b09233e98","size":145,"data":"","first_seen":"2025-07-16T11:12:21.739292Z","last_seen":"2026-07-26T12:54:27.696442Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"267e4fafa58676a639ec17ea049da784","sha1":"06ad7be2448f6fd45927e988111a9dae8168c0b7","sha256":"37031d3ede968fb43c9d23fd9a1754d2c704dd4341d4fcc0e8207de95f6f6e08","sha512":"724f5d1ba3b1b5c4be43d4a5980b1de63e7b35a3c361d6cf337920c9c0718d53710937a3610decfcb4df64bb8788d86c1ca90e556ac61f6d73c01e8d13c310e6","ssdeep":"","tlshash":"31c08cc4a0c22d001602641010bf34e490244426b08c2b03dc94dc883e220b48233ea8","size":141,"data":"","first_seen":"2024-08-19T17:43:12.076157Z","last_seen":"2026-07-26T12:54:27.666192Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"2758a217c29ad9c8f4a76c2f87a3a144","sha1":"01dffe436d5cf131be719dbd3e178f30ac7eaf4e","sha256":"10ba5f20b204ab268d630abdddbd2cd924b182f6b175e441ae3b952a3fe5fc2a","sha512":"f683e765e9f986bfa0bb41e0d4749b49d6d7e9445fe36f32629b6f1c5a93cf384272e0e4a1e17ccc4dda21e4d3eedac5477370ee086fa30f9f8ef3c77afbfec5","ssdeep":"","tlshash":"84c08cc4b0d32d102a86a96010ff64e490244027714c6b07ccd4d8592e734b48233ed8","size":152,"data":"","first_seen":"2024-04-05T15:11:07Z","last_seen":"2026-07-26T12:54:27.708577Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"78f892a6cfef93f07558761073154f55","sha1":"709b139cc0edda8dd81d62e01b7d1b25e98cb681","sha256":"1c41adab46d50baf11f93365929c9bb19e5509251dc3edf77121189ee99d6617","sha512":"36ad297cf367d877ed0395bfd59422fa6fbc802d26cb41f465bcae70950fe7ae3b428d3048f8bcffbe99a6d8da08f387c8b252f91a8cc8315c3866a1c75a9df8","ssdeep":"","tlshash":"5bc08cc4a0c22d105606641010af29e49024402670889b02cca4e8492e230b08233e98","size":136,"data":"","first_seen":"2024-08-20T08:22:25.451659Z","last_seen":"2026-07-26T12:54:27.657572Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-26T12:54:27.653044Z","times_seen":1748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/currency.B1sKu_8h.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd405b81f50797fb0e3c214367c76e4","sha1":"d3f1dc6e547f27291952f307325debee87bd59c3","sha256":"a6fe24fee996bb92cec473d01a5f1965c5351835291ba52bd56c34b114829619","sha512":"1d60aa9ef0ef6eb461d054f51a772ccea649493ddcaa5e13149155481621cd4e3de29f8079d7e5c3904588895ef30e0d7ecefc45e9c25e159bd5ea9f709e473a","ssdeep":"","tlshash":"ddf096dbd4a2d4e2c1795b44752962140037bbb1341b9ae03b8d32c6f3d8187c036d7b","size":561,"data":"","first_seen":"2026-03-26T07:51:15.991452Z","last_seen":"2026-07-26T12:54:27.626556Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4158ec4cc7f502c658b395478fbc573b","sha1":"79172da18dd5a1c9d4926935197d532724f3ea90","sha256":"1792c1f3c551148a90c8923cfcb5066823f6831b33be677be5395039849e2c6c","sha512":"96d300207f30b4cf5b7dfd732440c2f69c35d35dbe8c72e9ce93bc32a817517bb84bf713c5ca7cb49872a9e77aff041f764461d8566167ba6f82be8b585458f2","ssdeep":"","tlshash":"40c022c4e5c3bc110a03b628046f34e09024c02a308c8a22dcbce9582f130bc8137e88","size":193,"data":"","first_seen":"2025-10-11T09:04:26.536733Z","last_seen":"2026-07-26T12:54:27.664428Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e828cec276073102fca63758c0221e15","sha1":"fcb79ed9f6a4102782c9a7c2e0b4e02137e942d1","sha256":"99739074202d9e056929b6edd48e5dc822d1a169b957146fe0f8a0801915ca96","sha512":"2abe8a03f0b76b8ed764a4b103af2c3eeaacf09afc4d2462234bc267838c40a8e10921de1cb172ec506b1eb7669487d4eee557168fb69c322ddb4b8db5a9df5d","ssdeep":"","tlshash":"9cc08cc4b0c23e202606651124ff39e49034402a70483b12cea4d8482e630b08233eec","size":151,"data":"","first_seen":"2025-06-19T20:06:53.572493Z","last_seen":"2026-07-26T12:54:27.703471Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4ab90d4b211783f77d1699c0121324fd","sha1":"8ed72e574f088d5c11e25d89c423a016b405fad2","sha256":"6c2de34ff88f5a6e2b3bc4e3284eb1b56c718e0713a59ba7293c37953f133fd6","sha512":"19f55df73b2cdbacba8679dd26db388e6fc4f75cda269023aff0141c053cca053314f9e9b0581bbfc83ee073512a7b252070972848393aaa939be0aa3e7d0bdd","ssdeep":"","tlshash":"56c08cd5a0d23d005602685025bf28e49034402674482b12cd94e8482e620b48233e98","size":142,"data":"","first_seen":"2023-12-27T11:05:41Z","last_seen":"2026-07-26T12:54:27.687427Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-26T12:54:27.688233Z","times_seen":1634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/pages-opening-opening.D7QEmFY1.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"501cca50df966e93d3e728cb832d292a","sha1":"712a0d0a8195abf91b23b15358549793647148da","sha256":"191fc365110c82b3580cb27a1c0536a49c8b091d80b6e13240cbf065b706f8c3","sha512":"6b04e80eae7e9c73bd4b8f7b9ca26cdb5224829675080fe83208be4127f8db920b7be31ccf6a97de866eac9a5e7a671722534f5c63429e3413754c572359be3c","ssdeep":"","tlshash":"d2f0202c0719a0b1c62400d49113b7981c242270032a8889e7b4e81ffe10dcff32dcb9","size":557,"data":"","first_seen":"2026-03-26T07:51:16.020229Z","last_seen":"2026-07-26T12:54:27.607919Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-07-26T12:54:27.647129Z","times_seen":1762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"218bcafcb2a51d736b42202177293328","sha1":"b6d686c07f64cc7bb692ddd311a92270d9812a1d","sha256":"f3d8ab04ba8796f984aeb6190aeb699c4bb8685857ac586e663533824dbed9de","sha512":"2b5ce78163a793bffd5b7866bc03d232b5272c668704d726dc33b85c3ac82071033dc59dbb5e7939be73c55e3cc32d384549738efb7244877fca901891f3a04f","ssdeep":"","tlshash":"f6c08cc4b0c22d102602641050af24e490244027744c1b028c94d8482e220b08233e98","size":135,"data":"","first_seen":"2023-05-21T18:09:44Z","last_seen":"2026-07-26T12:54:27.689097Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f1a43563c75f0f600404de94d378149a","sha1":"39ba0783d667b209a0dccacf27fa6e0a93ca3bc9","sha256":"cadb530f5b17955972c55bebc16c0c07b349df7b53877ffd64efe1c6c92fdfd1","sha512":"993ccaa6ca5d3b1b19bbc87860b25a39968a07e393cb673debf6d78f2ae992f2b6a2489240ba69143d26fd3cdfe980287989c395836f8a7231f91e7fed1d8222","ssdeep":"","tlshash":"12c08cc5a0d77d006626646064af64e8a034802b70482b438dd4d88a2e620f08233e98","size":147,"data":"","first_seen":"2025-10-11T09:04:26.520505Z","last_seen":"2026-07-26T12:54:27.654451Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"2b528b51fd1837b49a391022068397af","sha1":"8d6029af1dce3cb766abc4b4ea7e8a683645c35e","sha256":"b04ae0e6c9d83fab2f0f32a5cf51d12357d420367957b347145b325a32277c4a","sha512":"e3889ca96b2fbb48baf9e920cd469b15d920687fa367eff828717ce7166c24204d56d5271b79ab517c47ca7a4069049707499bb3720662a8ef71e571b70dfd25","ssdeep":"","tlshash":"63c08cc4a0e23d002602641120af38e490248026b0885b028cd4d8882e230f08237ea8","size":140,"data":"","first_seen":"2023-11-21T13:50:07Z","last_seen":"2026-07-26T12:54:27.655186Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b17db65a50fdf15cd7dd8fed4591ca74","sha1":"71966e6766bdac0fe3606fe65d98997f2a2915a6","sha256":"b67d2cf1cb6c96da373b7e086d939770cb87549aa83038101dffcdaccc3a56ac","sha512":"2dff00dc52ff76a37c05450d41fd2749d0800468336cc42c0baee52210382208d0ea94d21052d9ffd0bf593213b963e03fe6f375b1e216f6f661a4ed9b3fca9e","ssdeep":"","tlshash":"68c08cc4a0c3ad001602782410af24e49024802ab48e1b028dd8d88c3e220b08233e98","size":144,"data":"","first_seen":"2025-07-16T11:12:21.735894Z","last_seen":"2026-07-26T12:54:27.655905Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-07-26T12:54:27.699296Z","times_seen":1253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f876fbb26770bd14a1c24fefe42bb12","sha1":"c1f81c04c4979e8aea61aba7d9b355d4b9701d1c","sha256":"f4ba4ef1ca15075f6dca80cd463f54e3f84ad70f2d288bdbd83f4da9a9d7b267","sha512":"2efe3ea4d8d3f73a8511cb49823035c5f53859f97264f0db333105111d2c0029ca34a73eb105a1dd4333dfecdb06aeba8318d1efb32f07bbcd37d9dc90dac751","ssdeep":"","tlshash":"5ed02b86e18938601962a599147e68d98038086930544f0d4c94c80437222b5c333a88","size":248,"data":"","first_seen":"2025-10-11T09:04:26.507688Z","last_seen":"2026-07-26T12:54:27.706245Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"bbd22edd23ea34adc33d479042014033","sha1":"8df23d259a201211c72d04edcffb4552023382ca","sha256":"cfc1ffb4d1ec5802bbd6e3b52a6f2c039d9f5caa2aa8dcaa295bd1c1378ea22e","sha512":"13d8977aedf59d9dad475da341fe83e6bc2f4ce9a054f98f65e2b85ee13cfb11b02e8ce14d57028320956b3264c61f28e9d11d8ef2dbfef2f46624d22ac59d5d","ssdeep":"","tlshash":"28c08cc4a0d23d202a02b42010af35e4a028402b704c1b27ddd4d8892e23db88237e98","size":152,"data":"","first_seen":"2024-12-31T04:27:31.954862Z","last_seen":"2026-07-26T12:54:27.6821Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"73ee08be9899a159093bcfc4191a3370","sha1":"298697c66aafbb5b2711546740dc154a4a24a1bc","sha256":"6bffe0fa7da37fac1bbcef4d7dd78e823ddc850e41f2713ed598c31d096435d6","sha512":"0e08e7a07a4cc8d76bb653daed9a36cdf22ba208da71d5d24734de497584492f2d90703f55c0037f2a68ec936aaf39ff0200147007b4f8b5d903cd2632124aba","ssdeep":"","tlshash":"ace026da82e12b684a22114061fe15e88036503ab4085b49a89492952a914f492bb9ac","size":306,"data":"","first_seen":"2025-10-11T09:04:26.548733Z","last_seen":"2026-07-26T12:54:27.667848Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-26T12:54:27.680584Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"82d5441b9c0539dcd27ea88d9ea3d917","sha1":"679e08e4c20256961c134c23b002741bf3f76a83","sha256":"a1029146ad9d3aab8e0d6ca0d3017b2d02a59b0257327193a08f8fab6e97214c","sha512":"b0839627f39dbe6d9696303ecb57dd7c6851c16ea87c9c79b66f37ef317767388f89869a193ae9140e2643b500a703bed6f1e022093a32423ca891e3243c54eb","ssdeep":"","tlshash":"fee061c6f0d2aa509153112236db16ac517ac016700c6782a80dac5537568fd9133e58","size":361,"data":"","first_seen":"2025-10-11T09:04:26.519339Z","last_seen":"2026-07-26T12:54:27.701828Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3027ecbed48e2be2f50a536422ed9ffe","sha1":"6d6a03e5f30f0035ae511ceda0aa7541663adefa","sha256":"35da71a997c9e053673933a4161b1dff616a09a492a7a3e79a8442eb78f08bd4","sha512":"8b8c87d1a147d31852460743831f418d60866098a76386436c9b294813805fff664961d9df2e7054d915da09f5e0e0242a1205623875db6d91c4976a38581688","ssdeep":"","tlshash":"4dc080c8b0d72d5499175451157f35e85035442b70481b528c94dc553f730f0d133ed8","size":167,"data":"","first_seen":"2025-10-11T09:04:26.556272Z","last_seen":"2026-07-26T12:54:27.676192Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-26T12:54:27.680584Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"536c3c6b90ee834a439d489c79336cc3","sha1":"525e609e9477124df7f5cda9187c6b27ee26acee","sha256":"bf39d3c99af9e308dcc07f4b745feb8ffce05370775f35be27da1f1dd2a818de","sha512":"744a7d7420ef72b7068a5fd2a321abaa1e1d4041d3cc399668533d267a7e5f3d496ef0d343385a60dde3fd8770c9bb8e158bfe61c4859c5ead5fcfac70ccde33","ssdeep":"","tlshash":"2bc08cc4b0d62d002602682050af34e49024442670481b428c94d8482e630b08233e98","size":136,"data":"","first_seen":"2024-06-29T09:12:59Z","last_seen":"2026-07-26T12:54:27.662968Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"d91a76641e60f759d6c8c4d41b9ac625","sha1":"c1784eb12a27dd2d6537d0de2303b62f355193fe","sha256":"ef095fc3d49ede648c56556b340858a6c0ea412e09f3326a742f143cf8a099b6","sha512":"e7e0a329e752ef3c9c0b4ea1eb59a7e02f9996f5d5fd15424311aa282481f0f60f43419378664b17b4ad48039a8a6fd3bab767d676c8f39cea44a87af844788c","ssdeep":"","tlshash":"b0c08cc4a0c22d001616641411af28e89028402774481b029c94e8482e220b48233e98","size":138,"data":"","first_seen":"2025-06-19T20:06:53.559343Z","last_seen":"2026-07-26T12:54:27.653745Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-icon.CkGhA6dg.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"271fdd3f4ae2aa8f0288125ee5dc5908","sha1":"709b090535d17ae6c40c0813bece5f0ed0ab7b71","sha256":"d94c8e6535d3c8f080463255cbcef024bb3bd6d63e13ab67f756e704914a35f6","sha512":"5b10cb0ecff56343dfc59d55537f25092b54bbdc33dc03e03eba9d9733b33cce8e87aa16df7b7b3dd697ab763ac397e1414c4e21691007977e74690592591ce4","ssdeep":"","tlshash":"7981834e64f9ac2b6e8e7dca544c1203d0d19f58e9e0fc52ac9e08e5e57e954b20df2c","size":3972,"data":"","first_seen":"2026-03-26T07:51:16.025863Z","last_seen":"2026-07-26T12:54:27.638045Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/pages-home-home.Bt3x3ywD.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a8c30a8d3a562782513bdd61a0f450f","sha1":"d7e39d1bca6d008dfb2b0350e8fa4f1901b06b5e","sha256":"7e6f77775b9e66ca7ba5ac71e288430122009e1fd45d58de195ed90f8f8b5051","sha512":"155f3d579f3002fb76948f0e962eeb102a2e2d5753647ebfdf09ece5e07b2b679a94e01fcad8f1b5b2f322c2aa658ec996f8825839d7b1291d144ba0fd288a52","ssdeep":"192:yQoxZHzC5k9F/UogsLUWaT6FtAgzz0nDnvvGf4pVCjW02adjgfKhZSRihh4M9LEK:y/ZHzC5k9PRUjTGtAyaV4W0VB93fcK","tlshash":"aab24309ff1cc6786ca22118c09a8060757a98afd505385fa2f4bf3f4266d2859ddb3f","size":24357,"data":"","first_seen":"2026-06-05T02:19:33.633626Z","last_seen":"2026-07-26T12:54:27.629811Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6f5107feee82cc0eee2048842c333c84","sha1":"b9d071c4f70aa9212c9c82b4b056068139ecb446","sha256":"0ae20d5ff6b0c6264e85628633db8a1c8e163c86dbbf4ca5e5d093fbca986e8e","sha512":"cd2079ee48eb3ddbc6fd6d70550aeca453f7b6bf091d123e1c806ba0fb4946edde541654479362afb1d033f84f6f541411d55f54c0a38c04af8a4fe757cefeb5","ssdeep":"","tlshash":"71c022c6f1c26f00495150701aaf28e8a028802661888b468ca8dca93a134bc533feec","size":194,"data":"","first_seen":"2025-10-11T09:04:26.547658Z","last_seen":"2026-07-26T12:54:27.71442Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"10218488a91a2e85d0a374b16a6c7357","sha1":"e9df8703894c434b7bb91c988f95e3ee8fa9b7b9","sha256":"1aaeb005c6daaf231a66f43b1212e940e04223793c8bcfc1ab5390ba6f859048","sha512":"b76f0a874d461a0a63ef5682c7e1347885d8a35bd56f2d9e2a6feaf672dfebe2fa27d4a2ec698616d1b99006294c363a779b0ae8ac90d001b372c03e34cf1d9a","ssdeep":"","tlshash":"35c08cc4e0c62d141602a41510af25e4a028802670481b539c94d8482e220b08233e98","size":141,"data":"","first_seen":"2025-06-19T20:06:53.567497Z","last_seen":"2026-07-26T12:54:27.670312Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-07-26T12:54:27.711512Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e2afd6a6074dd2653c2423615ce736fd","sha1":"4476024c7fc2edf3efea42a4111a937f4fafa98d","sha256":"e3339d58480507c04283bf11951ae595d8ef1fcd1d22990993247dfbf6b902c2","sha512":"39f3f33c6df73180700a08253487b10d71ad904da782a348278c7949d02e8b99ec6b0dc97ea60a37243c0dee8f724beb34aa1c4f047640c8685698448838f0de","ssdeep":"","tlshash":"c0c08cc4a0c22d101602681010af25e49024402670481b028ce4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-05-21T18:09:43Z","last_seen":"2026-07-26T12:54:27.678322Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9e76c89efc0bfb7bc505e5e37bc6b997","sha1":"e527143af060ee83de67e386f5709d6ea757e768","sha256":"1e2a84a2fef3fd681fa617f3958a4f544cfcca03a676790f2328e1bda4ee7c6e","sha512":"a6c8968570142d697f1a304850477bf3cca03ed0534553eab76464b25cb704fdabd3e941d9b90158f19b851a8111180fa1a15194c1340cafa8560954f55bad74","ssdeep":"","tlshash":"d5c08ccab0c36d10560a741450af24e49034402770881b02ccb8e8483e221b08233ed8","size":145,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-26T12:54:27.662138Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c2d9f9c64c64f635fde7ba9fb77a2a8c","sha1":"35688654ceb98b5b1a1a6104467cac8f80ceed3b","sha256":"bf69d85e92852816b2c8a3eeab185bbf76cda999fb0e0a9c1a7eac0608ac5f41","sha512":"d887a59a7532da1f8831071da2d59e03a5501b3037f92706e11360c721eb05776641fb26cfdc668b60926a8e58004438f056b8d3a5c7bc249b24d72134545459","ssdeep":"","tlshash":"5dc08cc4a0d23d101602a8a225af29e8a034402774481b229c94d84c2e224b48233ea8","size":143,"data":"","first_seen":"2025-06-19T20:06:53.569386Z","last_seen":"2026-07-26T12:54:27.671828Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e27337b44baf1e764e9605f98de81496","sha1":"050e67e4313cc53aec3d708e6af0e493ba316820","sha256":"d1b393469157f4691282f0da3fdfdff8646dcf7d1b0b4dd66abd69eb0e903e87","sha512":"8e172c514ef5f2a4ba91996752a7fb78261e537cf7c3a81e2c1c0d56821dd4928750215e198a24f87c3de3254c75266980f5a960930d32f48d3f6ab96b7a15b1","ssdeep":"","tlshash":"ffe07d8ea2a139a1a651396550ff37cce9391079319c8681cc4894a97f570b4833bfdc","size":319,"data":"","first_seen":"2025-07-16T11:12:21.755323Z","last_seen":"2026-07-26T12:54:27.679029Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"870d5a341deb35b0fa70aa7678972985","sha1":"46aa41a6765dfb799fb25decd0ad14f65bef0624","sha256":"66b5c7da551cf1d24194977513ae641793570de9c2e9eaf5286a0e92b125145f","sha512":"d61ed13c30e2bcca933a6e1aa7676b8fd836cc2927f76417f629b0bb9b24e39af87caf0f65adb1641a1377caea0a6ee1e8dcbdeffadd642924aff18b6ca126b8","ssdeep":"","tlshash":"81c08ccaa0ca3e109622642854af38ec9035442a74485b53cce8e8493e270f48233efc","size":155,"data":"","first_seen":"2025-10-11T09:04:26.503504Z","last_seen":"2026-07-26T12:54:27.697299Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"84834970b0fc46f174bb763499cf9c8b","sha1":"1dc09da3f03ff649323d28011d15442c28f74388","sha256":"7a8f9dd41eb4f031536448568836d9545eb1faedd2108e074178b2fa2a837393","sha512":"d7d0eade2e7979aae808c0eb2233aa5c7e44eb45f60d54c02e59e967aefab623dda38592670066045d458ddeb45e1a30732b35b0d1b4ac64566a5591cf786844","ssdeep":"","tlshash":"5ec08ccab0d33f00569a646524af39ec9035403ab5481b02ccf8d8493ea30f4823be98","size":153,"data":"","first_seen":"2025-10-11T09:04:26.529251Z","last_seen":"2026-07-26T12:54:27.690778Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"81a06c19ee10701dc6ffc894d4f16f68","sha1":"9f4a56b1e621d73b5846cba6b3efb02f2f8c7094","sha256":"63439d946352666c9210f0ba838427a05f9d6a5b1cd54aa69384acf8091faed5","sha512":"10cf2ac835594e581b3045985dccdd12a6babf1e0347027e60cebb3ecd067218ec744d5b061cc25f1e0642e4f6522d045d5daffd31223bd7213ddecde8bd0e37","ssdeep":"","tlshash":"9dc08cc4b0e22d001a02a45060af24e8a038442674481b029e94d8492e221f08233e98","size":147,"data":"","first_seen":"2025-10-11T09:04:26.549802Z","last_seen":"2026-07-26T12:54:27.691612Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"53fadaa5f6e2e0c2e98fe9789262f1b4","sha1":"a79f37433380b7557df5eb837631ea96e5063a6d","sha256":"1f2219343f8b9ea84be24d92d635450f1319d9f2344d88a42b4695da0e096159","sha512":"a3ebb489b7ff8af205296e3d106655b4ebc7f5a5dc8390d0fbd46f28a550b0195a011033fcde0ed736684962317eb4f550756d414ca6cd24fe1f02361bff3824","ssdeep":"","tlshash":"b6c08ccda1f22e101606a41465af25e4a028446a744c1f238c94e8493f620b08233ebc","size":150,"data":"","first_seen":"2025-10-11T09:04:26.504805Z","last_seen":"2026-07-26T12:54:27.677636Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6ad056c5d1737da06613e868c8cb1474","sha1":"f1af5a75cee8e10f3368ca852ebc58a66ebecc81","sha256":"5e1abbcedfadda478cfab8528cc820279063dd64ce46e60158509c0b3c5dd461","sha512":"bc1e8552178f5814a6e1a4ce6a949b1422d5082968f18ec2cddc4781693200b256de89998a9596efe717432f5dd862f6e87f72514040f5600551b2993221c498","ssdeep":"","tlshash":"fdc08cc4a0c22d101606682011af24e49028402670481b028d94dc892e630b08233e98","size":138,"data":"","first_seen":"2023-12-01T02:41:06Z","last_seen":"2026-07-26T12:54:27.698313Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-07-26T14:44:01.217534Z","times_seen":3202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a96a0c952936bf26501b9813338e9e1c","sha1":"057a2ef7ce5c0cf6096cd66ebf8dc81a033d4e81","sha256":"944e7a5d3737d361109f9405f77d4f277cb1b9c3adbae62ea2dc299577231a1e","sha512":"5d53fb645d7ac0095fc2b88e5ec6715d861697b8c62306385960f514e0cf9e5c1c2566d612d3bd936dbe98aa3a059e533da02bea9a7a8ef5425fd6f88dc80fcc","ssdeep":"49152:JjTjU3e7gTZ4v1QdgWT+jOkKbCakYCvjTuBIYYeYHmsuNjIMdUloMkOokO4kO1k7:yqu/","tlshash":"b9a5c62c2a5bf354e959c0d7f9373c84919de18ab00714d14fb98bb30ba5782eaadd13","size":2108844,"data":"","first_seen":"2026-07-26T12:38:02.422626Z","last_seen":"2026-07-26T12:54:27.684087Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-drawer.Ble5JxOT.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"958d21a3b5b0313a533b21618299873d","sha1":"c0abf61cf63cc89a8c3acd10f899e0f78225091c","sha256":"8b247b50b8cd262a67bbf8d108d1da192bccdf4ab2988b9546e9f46608269ef4","sha512":"f27a4bb5e0f932c58e024d5b57bf517f6f47e7f276b7ed4cb63bd1ce6a1b7fcc6b327845af6f41b7dc197955d9477fa07bc6f04a9d5ffe7805de7f5b1400840c","ssdeep":"","tlshash":"6f4176357008383734aac4b5707224880c7c272cefba3bbebdf1a3799e80458614e729","size":2008,"data":"","first_seen":"2026-03-26T07:51:16.055628Z","last_seen":"2026-07-26T12:54:27.64929Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9475cfd7336d78ae64ded85e4184c272","sha1":"e5d3364a97caa068ed7ccb7a2dd47df61cfd928d","sha256":"f9f26d47749d73d74ad729652077870cde85bcc6bd4e060ae1d88fe1b9cd3792","sha512":"906d05f7fee2fd2e438f9cfa9fb528187541809897d0ad6b9140b48edca10572f4de6e29466c59fe256772efe7da45e30271665bfeafa5df362b8a36d159b42b","ssdeep":"","tlshash":"7ac08cc4b0c22e201a066464a0bf34e890344436b04c9b02dca4d84c2e264f0c333ed8","size":150,"data":"","first_seen":"2025-10-11T09:04:26.509017Z","last_seen":"2026-07-26T12:54:27.684972Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cea72de87d48c2b430f36bd3133a5f2d","sha1":"4e53a13d6a4057aff49b3e5194fee7d4f17c9141","sha256":"2b149acbe391875ef6aea3b10865be92ee058ad819b48e83813c2a2c8ebb7304","sha512":"a69b9a961d6cbce11721200b8a5bc9c8e58a1e77f9225bc5cf9dfa46beacf0e080da75babdfa2ed39835fd1e84671d268efc250c95d9c8820beb3e80b1a559ec","ssdeep":"","tlshash":"5bc012c9a0c6295415116514186f25d4a024401670486b029ed4d8542aa30b84233e9c","size":161,"data":"","first_seen":"2025-10-11T09:04:26.539003Z","last_seen":"2026-07-26T12:54:27.695651Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0d43d8daff855a3cc1c62ddfb3a798ef","sha1":"9a8aeca27816ccf1cfe5f38baeb7877322fbe48b","sha256":"7bd30585e0c7d76fadb6500008c17696c0949e5e94dea8ce178d5f994d063857","sha512":"3605d8fafad1eff20a5b97546fe341ff6ff6b9fd150d2285db413c39f164b4edd1b83aee885024d26036722093a06439f07008847d3d8e065e234b5fd1f3a67a","ssdeep":"","tlshash":"2ec08cc8a0c63d20260a641021af74e4a034442ab14c1b428ce4d8582e630b08233ed8","size":146,"data":"","first_seen":"2026-07-26T12:38:02.467871Z","last_seen":"2026-07-26T12:54:27.674013Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/cblogo192.D7wYePgb.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfcb3df7096db588aa7f11017db40944","sha1":"692c7012175a8cca70241cff5ada975bf7b55208","sha256":"b26738b1e5b07204b35ed3c41d5c845df0f9131540676edf0075a929bbd438ec","sha512":"8cc004ea871e5d23f636bd395d5e74cb398b7b6263fb116d9e8335ead9d86caa2b3ecdec00a7490189ce38529243561bc321efc8acd9939ec65ad0548b216aab","ssdeep":"96:1lprlt2zyFByj9i+OcLajkqH49wVqw8IcTwq5UE:1lh3OJ9GjkCoIKxH","tlshash":"90a17dbb2752f5860a4e9404d24c0934da48ccea337cc853d78caf086de9611bbda7c8","size":4917,"data":"","first_seen":"2026-03-26T07:51:16.048064Z","last_seen":"2026-07-26T12:54:27.63565Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"784a5917a9e1594e6d9b2af55f810cbb","sha1":"e12423de2f87634c81c2c865a5be64bfe7e8b240","sha256":"71a85795de4b27364739b895b284e8809367b50ab0a9a649621a4c6516fcf2cb","sha512":"dcb2ccf1f8ff712bab5e2729b62f68e8c8d546d1a6f67aa6ed025c020da64bc1de4bade66fecff0f776ea4e8e69422903c785089dfa275a3dd4850590993f9d4","ssdeep":"","tlshash":"85c080c4b0c23e101507945164bf34d45024441770486b56cdd4d8542e320f05333d9c","size":157,"data":"","first_seen":"2025-10-11T09:04:26.517373Z","last_seen":"2026-07-26T12:54:27.67257Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f16f28a9c4872061b2b36f384e4ea78e","sha1":"cd56a42bac5ec346486cec73bf12604846d80bfb","sha256":"54fa6a20458789668b5911a657c305875a98ad1a64d1327adaad92f5ebb9df6d","sha512":"036b8267ab3b8a98839d09e030023e245f1640b78259abfde2c6303dc2f76ea608e3cf8992d3822b8bba41758359c2f3d639e927de4d3368e8a6648fbefb57c9","ssdeep":"","tlshash":"7dc08cc5a0e76d002616685015af34e4a028402678881b038c94d89c3e220b49237ea8","size":144,"data":"","first_seen":"2023-12-03T06:20:29Z","last_seen":"2026-07-26T15:03:20.125995Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"034cd464971bc756ef3bd625955fdcd8","sha1":"c4d12fd6e130bfa0f6023ad9312edf23a0f36963","sha256":"0e57f1eeed8b10e6a6cbdbdbdca79c79f182d095640336d0b4a412c2b4111006","sha512":"78169e7f15f43d3d9e7cfd0ceb951061147aed160e2d1ba6e454f4d24d06ff8bee96b579f64d898cd26f581f017ad67609a132d6ba1fff3975141665c58af74d","ssdeep":"","tlshash":"38d023c5e0d13e1017127551747f25f0d1304456744c5711ddd4d94d3f560b14333d5c","size":210,"data":"","first_seen":"2025-10-11T09:04:26.510183Z","last_seen":"2026-07-26T12:54:27.694827Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"d278965385479f78e450e857a9fd2cb9","sha1":"7da08f9827edff669ecdada652bd1e1adbc139ce","sha256":"74eb878f2a33a25aa8a39db8e316a4f14390cd53416aebfabca9e97325a0a3ff","sha512":"2a1697802e843d392cac843190bf5d970e5b76e2524cf2824a209555029413f779fd6f20b041f0c9f9c61d516daee4a78835dcee899f2d5113b2e8a50b305801","ssdeep":"","tlshash":"add0728431c32a000a820c007a6f2888a03c9402b20c1663cac8eac52a490fae23bcdd","size":290,"data":"","first_seen":"2025-10-11T09:04:26.5552Z","last_seen":"2026-07-26T12:54:27.668714Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6a12b5bd726816a39c05427174ec52fa","sha1":"6f8907c9d9cc744fbb28a407b56ffa5323e55c8a","sha256":"299d447e02f77969f919d872360078484e8630b8f62d2b513db69657b4f2f8b5","sha512":"fb3be2201495b5ad2c791eeb92b1a5edd2c01eeade687dca0b9baa981df9c6e1bc8d47fe028d25ece8dbde97abafe9219fc394b80a33831183cb77d259aaf1dd","ssdeep":"","tlshash":"36c08cc5a0c77e101656681054bf36e490648027b4481b068de4e8892e620b59233e98","size":151,"data":"","first_seen":"2025-07-16T11:12:21.761468Z","last_seen":"2026-07-26T12:54:27.707821Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"ce62003e2d2c1e25161552e3542d2c0a","sha1":"828597d713628d4087e74c274622f804814edfb2","sha256":"196cefce990968a27878cd0794355cd3dff117dc4c623c67c7f5b33eb8c0c45c","sha512":"ecc96dbb8c58e528ffd3f6235af07bcc3ade25dbb860b3cca134fa20b1dabc669e33e5adcb630d35b3b2d234e1c9e8abe4b8d5ea122b6d7568dc29012753f9e9","ssdeep":"","tlshash":"03c022d9a0c23e101601201021bf25e49020402a30888712cc94ea083a231f19133f8c","size":180,"data":"","first_seen":"2025-07-16T11:12:21.766962Z","last_seen":"2026-07-26T12:54:27.665324Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/index-Bvkv05nm.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"a96a0c952936bf26501b9813338e9e1c","sha1":"057a2ef7ce5c0cf6096cd66ebf8dc81a033d4e81","sha256":"944e7a5d3737d361109f9405f77d4f277cb1b9c3adbae62ea2dc299577231a1e","sha512":"5d53fb645d7ac0095fc2b88e5ec6715d861697b8c62306385960f514e0cf9e5c1c2566d612d3bd936dbe98aa3a059e533da02bea9a7a8ef5425fd6f88dc80fcc","ssdeep":"49152:JjTjU3e7gTZ4v1QdgWT+jOkKbCakYCvjTuBIYYeYHmsuNjIMdUloMkOokO4kO1k7:yqu/","tlshash":"b9a5c62c2a5bf354e959c0d7f9373c84919de18ab00714d14fb98bb30ba5782eaadd13","size":2108844,"data":"","first_seen":"2026-07-26T12:38:02.422626Z","last_seen":"2026-07-26T12:54:27.684087Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"617d5b8a19009ac018d52e4da473494f","sha1":"0c43d2c3d1b3b8dfcf072591f205e4b2d2c605d9","sha256":"31301f431c4ac94b7e3a838177d9608f28f641c7472b85a36f51bad84dd1187d","sha512":"b8241183d03759e84b78846bd892fd89b28bf7eb7d72c1691a70d90cdd7ee65a37982e7c34b3b63d6f129f9b02a43da779815eb6dc29a00a148651083b80ddaa","ssdeep":"","tlshash":"46c08cc5a0d62d002606685015af24e8a024402a78881b02cc94d84c3e220b49237ea8","size":140,"data":"","first_seen":"2023-04-15T19:29:40Z","last_seen":"2026-07-26T12:54:27.689956Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5c475876724a4565137e0248af5d26fe","sha1":"ddf48cc1ed4517dae9e2903438e6752c6594ab96","sha256":"34e880319f67485eb5e5edcc6b5f357104692e25cfdd9f4886d4473abd6c8af5","sha512":"1e656311e465cebbb3e380453390740708d35f83749f5389445e71ee4ef0ef943bec563a99eef8ee98d0da1123996f1baf9e71e064ed89508232d9f73f8708d6","ssdeep":"","tlshash":"02c080c561c67d505552751460bf24e89036401670486b039ed4dc492d621f48137d9c","size":157,"data":"","first_seen":"2025-10-11T09:04:26.537755Z","last_seen":"2026-07-26T12:54:27.658428Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"25a638c6f37ee5566b3c16980dbdb50d","sha1":"71e7c7e87fd6d8f81a19fc4c3661cd6b6234f596","sha256":"208d335993a3830b4960c9af1c1e831c82eaf522b1c80ec2c453b2510cb709a4","sha512":"fe21c85c4a3f5264b9cdd5d386f54fa02d2217506d0f28de40d318a29350c5c17b6b5465cb0921b89435cf5c362871c971e0cd7c8e701ee455d526b5ffa2f645","ssdeep":"","tlshash":"36c08cc9a0c32e006612685568afa4e4a034802ab14c2b129ed8e8492e620b09233eac","size":154,"data":"","first_seen":"2025-10-11T09:04:26.559029Z","last_seen":"2026-07-26T12:54:27.659958Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cc462e2cb0add6c514cde764e00b177f","sha1":"033714179af982f02ad54670cb5bf5a943dfe0e9","sha256":"0ca9bbe3b55a363bd4703f4511a034d703e90f1b4cfcfee7ae68c538afdacad1","sha512":"0d24cd1be2bd015fbeba9b6d76e351ab63c0fc2139c92874563de60cd5e2299362bb63ed76d999e017149dc2ca44e9e43e586918c9e8f0d249c5f769032247bf","ssdeep":"","tlshash":"6fe0f1e966932e40030b0590b52e14d0973c48c733446a0188bce0487fe147f733fe98","size":384,"data":"","first_seen":"2025-10-11T09:04:26.522053Z","last_seen":"2026-07-26T12:54:27.693209Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"7a2da7a82565fbb3da041e938d8a352e","sha1":"52190a672d77c6175dae06e966db86d9d0cd8685","sha256":"8511e4d0cc34df15aeaa2807f240d43f3e2bd255b4b46d4d1b336e913afe5400","sha512":"f7404fa913506f06bb8a191dd46eeb6f25ad6cdd31e3efeca28fc89398fc20c8dc1f500de75c67ee1350f82571d8f13044a1af35fcfe5f426dc6ed606c2f9ccb","ssdeep":"","tlshash":"4dc08cc5b0d76e101682682810bf3ce8a0285026794c1b039d98e8492e630f08233eac","size":151,"data":"","first_seen":"2025-10-11T09:04:26.545063Z","last_seen":"2026-07-26T12:54:27.70264Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"7618c6855ba5e41ca3b3a43b46e87bfd","sha1":"ff87734b6cacaa7e5797c59279180fdce60aa3a4","sha256":"c663788074e93b14032c003703971dc0435fbdb01cf9ccdb60b3b0d9638dd0f2","sha512":"178800611dd9698ca8e2920d944ae3371427d6d4b74506bbaa1fd04699c188db1325a68be8f7dde179d58de81baf65b305321b465bb5fa23f1c0351a66e388cd","ssdeep":"","tlshash":"f3c08ccde0d26e102a06645222af3ee4e028806bb0885b028ca4d95c3ea24b0c237fdc","size":161,"data":"","first_seen":"2025-07-16T11:12:21.757053Z","last_seen":"2026-07-26T12:54:27.715218Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"13140f2654ee4e8aa3a5254e6a15f1d4","sha1":"5dffd41ddc077cb859924fe19546cb715a6aabfa","sha256":"6605c1d114eff0a89594583a49f540851d0ca8cfc899eb673313b3c81742bab3","sha512":"c0f6140bf4a39fd58aff6948dc22f724b4fbef4758cadea91c718f83aedb1394592e3e9d791e5aff90574fd0fe5cc4ae0728551856b9fb3ae891628ca3eaf34d","ssdeep":"","tlshash":"c9c08cc4a0c33d001a03a41111af25e890248426b04c1b028ca8dc882e230b08233ea8","size":145,"data":"","first_seen":"2025-07-16T11:12:21.758382Z","last_seen":"2026-07-26T12:54:27.671102Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6c4b63197790d25a07f25a43bd99b082","sha1":"9cf651883e08001a9ec271a0c3c2d4ba8cbfda2d","sha256":"cab5094ca7bb9e74a1d0753500ab633f54ee468f574b0c71293e95e0eeb863b6","sha512":"019ba7e344e3b8e2fb0b9b422fc54931b8f5650f519c8532a13b38b604c7761110390b28f6531300602e1e130ef426834d9ce94baa0654db26da7edfbba9b19e","ssdeep":"","tlshash":"5dc08cc4a0c23d101a02641020ef24e8a024806a70881b028c94d8482e230f08233ed8","size":140,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-07-26T12:54:27.712203Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c6c2269dcff4415159deb07cabae7636","sha1":"0be016ee8921b95e9977376e0385ed593d8840e3","sha256":"71e3159b107e2cddfe3ab06f2acf91ea309186f78a56bd5a555264dde0883670","sha512":"b047ee555e8dce60ec85353f9949252e45d0a03f59625ac7c25e87e631b21741569753ce92d16f43e4f4f173725662a6bc0ce6387dfcc476c2b95ba0c6d87917","ssdeep":"","tlshash":"e7c08cc4a0d37d001602655221af24e49034402674881b22dc94d8482e220b08233e98","size":143,"data":"","first_seen":"2024-08-20T19:06:52.661817Z","last_seen":"2026-07-26T12:54:27.656685Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf22cdb5c495761f76ab9992ebf13ad3","sha1":"b57aef5b20e486cdeeaa8034cd187d3f3f9bceff","sha256":"3e05e030f3d66bfe7ae10e6b050b45cf7eb3aa94f0d51883b1a8b0110999ceb2","sha512":"f8ad839258b9999fb5f167f325e1e3f2b27e15c3a544ddc0683f28e13f0d0820b1f151de63e4a450505073c33d8b44ba009b18f2aa1b1eeee25f443f6c2e67dd","ssdeep":"","tlshash":"afc08cc4a0ca2d002a03781020af24e49024402670c81f03cc94dc982e220b48233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-26T12:54:27.716711Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5d31ff7e60917b0ed4a4b70d37f66a2b","sha1":"c50f1dcef18065974e84265a1a49bdd0ee29e449","sha256":"aa6fd728eecb263d1055ba5f0b243644492895c8b51fdf396aeb35f2026ac848","sha512":"37b9cf72e1f471ea4b8ab70e1ced41fd251b10d068879907f2f7dd3276ac5c5cd9b0c3b90a731ee5449d42ba3b181ce145207561b4e72ddb32bbf1337361fb8e","ssdeep":"","tlshash":"72c08cc8b0c22d001606641010af24e49024402670482b028dd4d8482e220b48233e98","size":138,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-26T12:54:27.674754Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6fb5cd5e0934b236b4f6db902eaf0dad","sha1":"365bc8e4aeb220ea1fba23181c22450003c7a841","sha256":"4b8472addf00a08869fd75618c890498a6b4650bcaeefda6c82db8fb08b9acbb","sha512":"9e4c038a6ddff9ee70513b1c0c503f53a4ebc84193a8f7ac021fb57cb1965be17e97d790e41d31f23ed192596968b84180e0f529ccc4aecbe5da909fbe9287c5","ssdeep":"","tlshash":"dcc080c4b1d26d002755585171ef35f450384016784957579c94d8592e735b48237fec","size":164,"data":"","first_seen":"2025-10-11T09:04:26.552125Z","last_seen":"2026-07-26T12:54:27.66706Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"91b70dd0b5864ff9a0b110bad4a1baf7","sha1":"06dcd4878d0be66465dd516507f0b60173f2e1fb","sha256":"1278f8effbd320adb3192ab0e8a3b9079b101aa52733518018684f595faa31a8","sha512":"f193108fdd8c503ad7bf17f3dd3536f3ff3af0295158a5cfae120eb4faa370bff179fd074747af0d5b947ed8c911df0ff575d3a73637e2792023d3c38bcfe44c","ssdeep":"","tlshash":"d9e07d57b2c23b24271315a199af26d4d219481572185b92ccb8f79c3b1e57083b3fcf","size":317,"data":"","first_seen":"2026-02-11T16:16:56.165665Z","last_seen":"2026-07-26T12:54:27.70708Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"37d88431326cb729186771878e6fe5a1","sha1":"b9b5aefac4bcbf9e6368d47bcc3c7fac5c579fc5","sha256":"a48bff24daf41cb9406d68d1407e0ba3b5fed0dfe38994700d00ca87e5219930","sha512":"9190cca9c8345176d209331d1ddc736e5f2cda96ba1f33726e9390a5193107fb97178d29e45af81115bc123230c7ff7f67c505b9d2fe453cae103073f86313b2","ssdeep":"","tlshash":"67c08ccab0c73d206a02a49051bf25e4a038812b704c1b07add4e8683e634f8923bf9c","size":160,"data":"","first_seen":"2025-10-11T09:04:26.500519Z","last_seen":"2026-07-26T12:54:27.660653Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"ede74e75dbb1611035cd62bfa1a0eea4","sha1":"7cfa11d8edf07d4bb08b50c42bf6f4ba231de047","sha256":"a168e5a14ce863e89bf7c1f53d38e408cac6e90cea284765b67eaf21c1f5c54c","sha512":"b655977f3dda2959b29e9cf51ca8694f25bf3368b1f0f615933c8d944dc9bc9f72b7ffb8777c264c4e09dff09d719dfcee74efd45d7b20ba02a9d671ddfc5e75","ssdeep":"","tlshash":"40c08cc9b0c33d007a06681454af35e490258427704c1b028c94ec492e331f08233ea8","size":147,"data":"","first_seen":"2023-06-07T15:49:18Z","last_seen":"2026-07-26T12:54:27.715996Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"2e297f0eb60e2221a98eb263e476d93a","sha1":"81912eec0dc29ea88b3cc92f40585b4a44753351","sha256":"e4930f19cb13f7799e4365cb0aab0a4c5a54a5276a581285f7db359379c20e52","sha512":"ac438d95843151b891983f9f498fc1c62b2ae6e10504c89ba2f8cd6a531d780af653439bb5ab0800126f0388ee3219f06fcfe8cffa53e3fb19cd977cb653cdd4","ssdeep":"","tlshash":"bfc08cc4a0c26d101602682020bf38e490348026704c1b02ac98dc582e220f08237ed8","size":141,"data":"","first_seen":"2025-03-04T05:52:13.284469Z","last_seen":"2026-07-26T12:54:27.661387Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"458c27bc2f63daf9d5d6df41b30498ec","sha1":"c91e73e6fa9ae6c8e0e77ff30660000f7af0d67a","sha256":"7380590a1bcbbb54fe8935730a9ee065d8ec748cee6b00f03bfa37be385fff6e","sha512":"a7c240dda878fa481174cc0afee2ee46ff37530e5808e9010bd8cfdd10a1fb820ac8842ba1b44e4d7448774434bdbdfea097f66dc54f39ee1c78d67d57a3e08d","ssdeep":"","tlshash":"7cc08cc5b0c62d102606691014af25e49024402670881b028c94d8483e220b48233ea8","size":137,"data":"","first_seen":"2023-11-12T11:22:23Z","last_seen":"2026-07-26T12:54:27.709283Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e5c6b39383c1f6beadfc464ff77a58ea","sha1":"24783bce7ac0a47c10b9bb418deecd3b86e7ac12","sha256":"097135a5a99eebc151675b4fedc40b64d267627f4e3276a80631886c8d5a83be","sha512":"d0cdc02cc16b70209f60d14cc95a16250e6b95894a106ddc92539ae14b7206138d123dd2efb2194c451e3da5daa8d5cd3101b4d28db84405e300978121dd3346","ssdeep":"","tlshash":"62d02bc6a0d5390585a7e00051af64d4707c8415248407879c64d8791d730708323d8d","size":252,"data":"","first_seen":"2025-10-11T09:04:26.498418Z","last_seen":"2026-07-26T12:54:27.6858Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-26T12:54:27.710033Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/drawer-icon4.DunHuFkW.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cda18a37ea92c29ef1e6a6363c70ab8","sha1":"8516208f971a08b9f0161c3fca4ca2d036b48b1a","sha256":"9add3ce44eb9862bc1840f3f4e152a47ed43f5526af1ed5e081a2823add47a74","sha512":"236bdea2f490fd9aeac6c3375a1ef4c6137b79e56e1279cf655f4dbf03906da56cb79debce5ab1539ff0c7dbe0ee291ff90a778ccf065683bd6ec0be95e40473","ssdeep":"384:PT9kBCayC5T/kgOnL+akiuFY6cA6rw28Sk:PRkBCay8Ig6L8bFhp28Sk","tlshash":"1d929e3a342d7db54dc5526021090202de2a2a5ec4b8317ebfbdb7ef7f49c50666a734","size":19616,"data":"","first_seen":"2026-03-26T07:51:15.99389Z","last_seen":"2026-07-26T12:54:27.60968Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"fd36096a936b69fbe1eca8358ce0d045","sha1":"55f96747a71eeb9fd0902dca8b5042d06c6fefab","sha256":"95c202405b8f1e893e9f61c9981602622f285691cfb689114483ee81ff96616d","sha512":"9eb450becfa9a713a0b4f995cb4feadfa2f004a694e4fa3cc6fb7c44695e0220e28fc4620eb27e5d3213bfff8f2e638294d7a694692b854ffffa93f911513dea","ssdeep":"","tlshash":"dac08cc8b0c33e003606a46064af38e4a034402b70881b128ca4ec4b2e320f49233eac","size":153,"data":"","first_seen":"2023-12-01T02:41:06Z","last_seen":"2026-07-26T12:54:27.675479Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"1a631df88455b512f2d35298fb83939b","sha1":"025fce9b214dc30870f4a29d0a32f739736a76b6","sha256":"4a98b756aee61229356e5092f162eab7b7486153453ea6442080a94f676c6db5","sha512":"4df3e702ffdb857f83c39d4be07573b4de7feb1aa08c3b771e7420d7b18cfc846cfe4aadc7e236f6a5f3efdb3b6e0255bdee0b511dde1ce019c9554e8560f6f2","ssdeep":"","tlshash":"44c08cc4a0c22d502603a49014af24e49034402670481b129c94e8882e224b0d233e98","size":139,"data":"","first_seen":"2025-10-11T09:04:26.553235Z","last_seen":"2026-07-26T12:54:27.673255Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/#/pages/home/home","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"41137752ac0b825a45e44c9fe4b67c70","sha1":"01deb523066cb61f258c13aad644990bac67be85","sha256":"1b6974ad606c66ecbf7299ed7f12da476f93edae5c7b2a1b1043594a7ced10c2","sha512":"5556b2b0d6a83fd928dca2ed4b3147ef8d0530271814f5c7a0a9eecdcd86101da750bb41d34d06f49c0b691e66fc3e225867a9853fc78c07a8593904aa52e330","ssdeep":"","tlshash":"aac08cc4a0c26d101602681010af25e490244026b0481b028c94e8482e220b08233ea8","size":139,"data":"","first_seen":"2024-08-19T21:05:17.632297Z","last_seen":"2026-07-26T12:54:27.712966Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"WebSocket getNetworkTypeunknown","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20327},{"level":"log","text":"WebSocket getNetworkTypeunknown","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22520},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 0 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"当前的主题是:dark","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":60,"column_number":790059},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":15475},{"level":"log","text":"WebSocket getNetworkTypeunknown","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20327},{"level":"log","text":"WebSocket getNetworkTypeunknown","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22520},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 0 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"当前的主题是:dark","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":60,"column_number":790059},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj52 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj53 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj55 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj182 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj183 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj184 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj185 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[errMsg:map[configurable:true enumerable:true value:request:fail writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":15475},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20923},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 1 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"unisocketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21233},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj393 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj394 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"uni unisocketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21140},{"level":"log","text":"socketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23386},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj395 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj396 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"socketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23303},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 2 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20923},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 1 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"unisocketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":21233},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj397 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj398 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"uni unisocketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":21140},{"level":"log","text":"socketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23386},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj399 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj400 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"socketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23303},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 2 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20923},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 3 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"unisocketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21233},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj401 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj402 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj403 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"uni unisocketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21140},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 4 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20923},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 3 3000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 4 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"socketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23386},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj404 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj405 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj406 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj407 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"socketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23303},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 5 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20923},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 6 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 7 20000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 5 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"unisocketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":21233},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj408 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj409 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj410 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj411 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"uni unisocketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":21140},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 6 10000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"socketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23386},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj412 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj413 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj414 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj415 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22795},{"level":"log","text":"socketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23303},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 7 20000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 8 20000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20539},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20824},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":20923},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 8 20000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 9 50000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 9 50000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588},{"level":"log","text":"unisocketTask 错误了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21233},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj416 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj417 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj418 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj419 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj420 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":20602},{"level":"log","text":"WebSocket 连接错误！0 map[actor:server1.conn0.watcher17.process7//obj421 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":22795},{"level":"log","text":"uni unisocketTask 关闭了","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":21140},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 10 50000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"正准备建立websocket...wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22732},{"level":"log","text":"websocket 建立中...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":22999},{"level":"log","text":"websocket 建立完成...","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23098},{"level":"log","text":"执行重新链接 3","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接3 11 50000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js","line_number":27,"column_number":23588},{"level":"log","text":"重新打开链接","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23802},{"level":"log","text":"执行重新链接 0","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23501},{"level":"log","text":"uniWebsocket 重新连接0 10 50000","filename":"https://h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","line_number":27,"column_number":23588}]},"http":[{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:30.602Z","timestamp":1785070410602,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$trade\u0026sub=trade HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TliJBjE5wjSvoU39WgXJjA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/index-Bvkv05nm.js?v=202605061","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:18.580Z","timestamp":1785070398580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/index-Bvkv05nm.js?v=202605061 HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:20:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6109ef-202dac\"\r\nexpires: Mon, 27 Jul 2026 00:53:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2108844,"size_decoded":521090,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26503)","md5":"2c68943ce07dd867d09ec4f36223c06a","sha1":"1e252d0ea0633d49a684477a0c8a69646ce37062","sha256":"13e97f7eaca7d2167508e6422daa2bf08e9923b3928f816bfa516a51032a0f96","sha512":"66a2208b3d14ddee60b4582e8f4f93953d07fcc4e8f4631ca6516535473ecb38ed17bdedc035f993ab75f78ef011fe7acbebc070356e0dd48ff8d39b53b4d4bd","ssdeep":"24576:JjTjU3e7gTZ4v1Qdl5/kWT+jOvMRhybCakYCvjTuBIYYeYHZYsuNjIMr5UloMkOR:JjTjU3e7gTZ4v1QdgWT+jOkKbCakYCvL","tlshash":"7e356c1d768bab3297f202f0a05b4a4470795e42f1178098eefcdca815ec649e1d7f7a","first_seen":"2026-07-26T12:38:02.361584Z","last_seen":"2026-07-26T12:54:27.606738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/three_protection_dark-ygan8kmI.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.123Z","timestamp":1785070401123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/three_protection_dark-ygan8kmI.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-5f3e\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24382,"size_decoded":24553,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"f875d8e78c503cb805d00b1eb4107a10","sha1":"37a46c3532904e73f3fe565b5f73c4a58701f5c0","sha256":"7d6a2e9298ad7f14092421a69fd7cb46d201009511d745cbc7459cb1e7616884","sha512":"a26ffd7802b5811f51386625fd73fb5fcfa0906c3befa0b1a75938dadd44cb7e9512be09748e1806e2c0edc18ef564d8749e80ed88b7cd21082f7dd5773a492a","ssdeep":"384:LCA67wi2FTMDvcxuYWUBYzhfjV5b71C9xhZsA1bhfwXGRwgkxbw/NUb4fQINQwtu:LCASH2FYvD8Yz5P1C9xhNGAkx8/UIHk","tlshash":"4fb2e1aab64366b84fddec577c2133f52fa61e40a601d4f088a7b54a2b94f174d173c4","first_seen":"2025-03-06T21:41:52.771604Z","last_seen":"2026-07-26T12:54:27.618671Z","times_seen":30,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.737Z","timestamp":1785070399737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-5b\"\r\nexpires: Mon, 27 Jul 2026 00:53:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":440,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-07-26T12:54:27.647129Z","times_seen":1762,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/position/detail?code=index_notice","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.808Z","timestamp":1785070400808,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/position/detail?code=index_notice HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:22.731Z","timestamp":1785070402731,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$trade\u0026sub=trade HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZdY43AeBsTIiZjW7ZUFIpw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:53:17.883Z","timestamp":1785070397883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 856\r\nlast-modified: Sat, 13 Jun 2026 20:17:33 GMT\r\netag: \"6a2dbadd-358\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":1124,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fb42c3d38e4992e89623fa7386c6efcb","sha1":"1d002294558cba7e56087ba5139fab4abd09ddc0","sha256":"32fc26219591387588470d3b61d4bddccf094d21b708b199461bd012deff3827","sha512":"788483fde246ec5a4e57d431f26267329dc2c6848e4e43089c77bd04733240ad0285d3d67dab5521a05f19a0bb2aa873e1da90a082cb2b14a81d506fa8df59ff","ssdeep":"","tlshash":"c111128150f1590c2320464538d5e82b6ff29e378e09dd6034dd72b88fe578bc89fc64","first_seen":"2026-06-05T02:19:33.626169Z","last_seen":"2026-07-26T12:54:27.644194Z","times_seen":5,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":2,"connect":154,"send":0,"wait":154,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/product3.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.128Z","timestamp":1785070401128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/product3.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-159e\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5534,"size_decoded":5874,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"11d1826403771fd3d738830276edee5c","sha1":"04aa6042ecd61df5101d284dbcf53afb46e055b3","sha256":"03dc76b84ab2ca5ed142e01fe645688cd235eef9eb15bbc9680b66f69d17c5e0","sha512":"6c789697b9bb0d556d7eb93dc8cef50ed9cf80530b0a0b962cf3896d1390d95e7bfe224e9790dfa597cc8cf57c5b1cdf97f0f0223f5b564ef8ac58e6fe4bf059","ssdeep":"96:HJI7Peu4sZpzQyr8EOYI6bZLhSP20YpC9h2Byyp2wqFCErqJgue6DJncf:puPeu4sZpzQygApbZE20YKfyp2wIrqJk","tlshash":"7eb17fe8b90cfaf4fc3278f7d43cc11a663c412aeff94d454a9767e65450059a3809b9","first_seen":"2024-08-19T21:19:37.63372Z","last_seen":"2026-07-26T12:54:27.647846Z","times_seen":31,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/medias-icon4-DtrZS0v_.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.147Z","timestamp":1785070401147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/medias-icon4-DtrZS0v_.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-1d07\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7431,"size_decoded":7806,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"7a9ed45bfce4b817447206f5d8feb093","sha1":"5a7fcc537b7f1078491430a6ea2dd97c6006a548","sha256":"1508659386d593ee5cc39c8fac35e5bd1e3b24581972da52861eeb9c48fe6b36","sha512":"a1c4255cc5825e29afd1a1e3dd9e3b6112f449af6441c23450c8de9bd932724483d2095236296901527865205742e2613cb73cfb7ecc0438aa438c97be3957f7","ssdeep":"192:+p7qqt1qp3bKxtdaivdeCt5pvbPpSVXqbItG9mg2aO0:+p7qk1S3bKxaExutX0","tlshash":"f8e1afb3c37760d46f02d8cc7b8629d89b6d2e258c1e9d3b21e12a9a4517741f2c527b","first_seen":"2025-03-06T21:41:52.765826Z","last_seen":"2026-07-26T12:54:27.646351Z","times_seen":25,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/config","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.583Z","timestamp":1785070400583,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/config HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,client-device,content-type,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/cblogo192.D7wYePgb.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.634Z","timestamp":1785070400634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/cblogo192.D7wYePgb.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-1335\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4917,"size_decoded":4162,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4916)","md5":"dfcb3df7096db588aa7f11017db40944","sha1":"692c7012175a8cca70241cff5ada975bf7b55208","sha256":"b26738b1e5b07204b35ed3c41d5c845df0f9131540676edf0075a929bbd438ec","sha512":"8cc004ea871e5d23f636bd395d5e74cb398b7b6263fb116d9e8335ead9d86caa2b3ecdec00a7490189ce38529243561bc321efc8acd9939ec65ad0548b216aab","ssdeep":"96:1lprlt2zyFByj9i+OcLajkqH49wVqw8IcTwq5UE:1lh3OJ9GjkCoIKxH","tlshash":"90a17dbb2752f5860a4e9404d24c0934da48ccea337cc853d78caf086de9611bbda7c8","first_seen":"2026-03-26T07:51:16.048064Z","last_seen":"2026-07-26T12:54:27.63565Z","times_seen":10,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/iOS-light.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.142Z","timestamp":1785070401142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/iOS-light.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-17ae\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6062,"size_decoded":6437,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2280ae8968e73da038502db1a8027c7f","sha1":"9375ced1739eefc85da75f324926c566029d3d17","sha256":"9bdce4b2eb7ef3c8d4540b74bcfc1cdb641d752688947e91bfd496e36df7a7a4","sha512":"8060853d6dcdb5619a37751b7a2825abf77f254f699ce5a8f0b43daad792fad49264bf11835f87b1456589391192d582c44d85626532ae054a4f8a49fc0f2746","ssdeep":"96:WJnOo+HngvIzq8m+oOL3RJZe/GfBjMGT1rtJ1K8DktpA9Km8K3G7sg7Kp52XHMVT:CnORqh+ZL3fuGfBIItzK8DupA/3G7sgS","tlshash":"59c19eca7ea3d973743362b7040800b58996b9cd0bec81862b5df485a7700bece7d85b","first_seen":"2025-07-16T11:12:21.733329Z","last_seen":"2026-07-26T12:54:27.64344Z","times_seen":9,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni.04da5e72.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:18.578Z","timestamp":1785070398578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/uni.04da5e72.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-95fd\"\r\nexpires: Mon, 27 Jul 2026 00:53:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38397,"size_decoded":12351,"mime_type":"text/css","magic":"ASCII text, with very long lines (38396)","md5":"87c54b7f7505fdcca56d38aebb77ec89","sha1":"934fea9680b78b6b545bd901472e1562bc17bcb9","sha256":"04da5e7295e594018c6b88d9e4f692b36dba5485dd3ac5c09199096ef819d3f9","sha512":"69b674b38b5363b19b5f6e9935750182d1e0150363b93b1af41433268afdc6b887c7222b6ee56ede5ea2a3d9aa95442b1c81cebd7d49da8692e1dbcc1740862d","ssdeep":"384:UXpmLWLAHc8aux2iei+XHyVcy/iatZrBFckh+lOR0o1cD0OEBq290:U8Suzei+XHfatZPThSORHcD0V82m","tlshash":"0d03d735aa002929f967ca1659c1db8f2e34c573d9a31b1cfb7570288b9e5c91a3f3c4","first_seen":"2026-02-13T02:55:07.036904Z","last_seen":"2026-07-26T12:54:27.622274Z","times_seen":11,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni-icons-CpF7sPM7.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.625Z","timestamp":1785070400625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/uni-icons-CpF7sPM7.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-247a\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9338,"size_decoded":1793,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9005)","md5":"037f038a138a83b5bfaef8b5628f0b6b","sha1":"f93ae0504f69203a3696d1689cb2d4768bde3ab9","sha256":"d493e6fbb6cf08628c99d2787fe99d17369b84566f3f6c68c8b6a2d51e471834","sha512":"224bf198c20d6458a7665d6fcd531bd4a81ac1249d19047f9dc42508cafa757058bce29e0b3e0183ca938d8c7f3fb56e231324687385330905fad62f4a0fca73","ssdeep":"192:KoubjWrpg4Sj6gMmIz/uX8b+31qn6g90RL00DxxTiwdlJGaIo2VXqem8d5yo7xny:KoubjWrpg4Sj6gMmIz/uMb+31qn6g90X","tlshash":"741259e4529d4ac2bbbed44b536ceb1f0a03b36284418955ff8f408d4fdb7112b8c6a9","first_seen":"2025-06-19T20:06:53.525894Z","last_seen":"2026-07-26T12:54:27.625565Z","times_seen":33,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-drawer.Ble5JxOT.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.629Z","timestamp":1785070400629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/fui-drawer.Ble5JxOT.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-7d8\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2008,"size_decoded":1318,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2007)","md5":"958d21a3b5b0313a533b21618299873d","sha1":"c0abf61cf63cc89a8c3acd10f899e0f78225091c","sha256":"8b247b50b8cd262a67bbf8d108d1da192bccdf4ab2988b9546e9f46608269ef4","sha512":"f27a4bb5e0f932c58e024d5b57bf517f6f47e7f276b7ed4cb63bd1ce6a1b7fcc6b327845af6f41b7dc197955d9477fa07bc6f04a9d5ffe7805de7f5b1400840c","ssdeep":"","tlshash":"6f4176357008383734aac4b5707224880c7c272cefba3bbebdf1a3799e80458614e729","first_seen":"2026-03-26T07:51:16.055628Z","last_seen":"2026-07-26T12:54:27.64929Z","times_seen":10,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-drawer-CsPd1XUM.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.631Z","timestamp":1785070400631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/fui-drawer-CsPd1XUM.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 627\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-273\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":964,"mime_type":"text/css","magic":"ASCII text, with very long lines (626)","md5":"6b045bb9b3f14aec0dcade8d7ad50130","sha1":"f18660e8dd3117bacae4ad4e18dec6d3f844f92f","sha256":"f8085a7cc1371358cccb6809fa8bee76f876408c1fc9630f67e1bc2c7b626951","sha512":"5d93d8171f264d318b451459fc74334be1a52527c279e84e8a6ab9f26213ee883b65a3a762a2bf85d100a18f646cf67a1b61c231df8fbef8402a5c55c07658c4","ssdeep":"","tlshash":"82f0fe351e983908107ff39ee4d09f594d39d651dd733cce320a160a0e87e5939155ad","first_seen":"2025-06-19T20:06:53.494134Z","last_seen":"2026-07-26T12:54:27.610512Z","times_seen":16,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/invite-banner-Bb_tatbk.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.146Z","timestamp":1785070401146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/invite-banner-Bb_tatbk.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-7d07\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32007,"size_decoded":32271,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit colormap, non-interlaced","md5":"53641687aa2e1d8fa67bb00978984fbe","sha1":"4a87c6025969601522e2231ca0283b539a147a20","sha256":"5c1c6585175d674cb72579e8188007a5621334a981a78cd867d0bc968b1ac612","sha512":"8f80878b902d8dc44e35703e57662a1b27a7fc12b4c3e3cc0e2139b9ac295204d02a1f02f56b56711de8c83432dc4a0343f3ce33c7b70a94f34338a70548d70a","ssdeep":"768:uAOgn0DQS+KGYsfDIevdmnRp8h08XArg1URNKDIKW0ho7ooPjXC2bu:uVgnMGNbJvq8XagiRNaW0q7oKjyYu","tlshash":"a8e2e1b088d591c9d34c78b78cf478f55e64c6907234c1eeeae92a6688823e63755e0b","first_seen":"2024-08-19T21:19:37.597823Z","last_seen":"2026-07-26T12:54:27.629009Z","times_seen":28,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:23.684Z","timestamp":1785070403684,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$trade\u0026sub=trade HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qxDk/LhuaItPskrOg16wbQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:41.389Z","timestamp":1785070421389,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$trade\u0026sub=trade HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 50m/WR6LmoG6mWf//aKwxQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-icon-D7orQT4U.ttf","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.075Z","timestamp":1785070401075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/fui-icon-D7orQT4U.ttf HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/assets/fui-icon-CBHgIZkq.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 39852\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-9bac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39852,"size_decoded":40138,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfonticonfontRegulariconfonticonfontVersion 1.0iconfontGenerated by svg2ttf from F","md5":"3125fb3a4c418d00fb97f84596c60955","sha1":"2595714be10a8fb085a4f928ef68cb9601bb2ce0","sha256":"2783439a7bb3351d5482ffe589cc96e956ed8479818074bcd3eb627496422763","sha512":"e2f72f6679476da886a2f90a1a3cc548d8abe6e7fb0ce1a3800e2cc329b4a517e6e417c650c49b4b4a253d7749ee34deaa6887028e5e8e07d7d2bc302af95198","ssdeep":"768:1NNFsXekphznzGbXQNwRWD9Axlo9bhaSNnB9tqpDs5ej0RAlxbrEM1jRlpl5VQPU:hmXecznzGbXQ2kD9Axu9bhaSNnB9tqpD","tlshash":"bc035d78535d5ffaf6b843bf44638581d4bfb70098c8dfab6505912a080bcb51264afb","first_seen":"2023-11-15T21:35:22Z","last_seen":"2026-07-26T12:54:27.63472Z","times_seen":76,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/ecology-float-3lRzjK28.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.140Z","timestamp":1785070401140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/ecology-float-3lRzjK28.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-26b91\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158609,"size_decoded":157709,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced","md5":"8ffc1f1ac55c93eb5330618f801d32e5","sha1":"f6fae97a47e0d2c8c36a6401ba9c56713905e7e9","sha256":"d153f08fa6db8970e265661d45d885b9b9034a7eb2ea9a2dfd06f107dbd0d46b","sha512":"be0613b1ed42e49ad6046606ecb0280de6b2f64a0d0ecb794bb053e0c06fd71aedd2a9af9cd17cadb06158cba10bb4ceea9972715e6ba4cbf4544ea7175d9e90","ssdeep":"3072:a9C9TTeLuOWpplmZVNw1oi+bcqJc/atFHvikQ6+TN4:a92TTauhlmZVNw6icvyuQ6+TN4","tlshash":"23f3127daceec02ddf562ab0d7687f94de0ba094cbdcc116e245e6eccd9ce141860982","first_seen":"2025-06-19T20:06:53.541886Z","last_seen":"2026-07-26T12:54:27.627414Z","times_seen":15,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:24.536Z","timestamp":1785070404536,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$contract\u0026sub=contract HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: RSsOli7HNtujI8TOjqaDvg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/drawer-icon4-DiX-_fWT.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.626Z","timestamp":1785070400626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/drawer-icon4-DiX-_fWT.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-835\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2101,"size_decoded":1006,"mime_type":"text/css","magic":"ASCII text, with very long lines (2100)","md5":"c20a5f8b4b3cc9199f8f5726cff48603","sha1":"edcb0342193dc2cb1bbe7c8e66a0d12a6dc24fb5","sha256":"2d4e9a3f9634bd7b117e65377d013d2ad18a0c0695ed220e6247bba6764abc08","sha512":"cee6f9e018e38adcc2ff84e479a3547f180414bb7f519c7816a0db2ecac4bdca7db16e16bae2d209b2ade8c53bfb1eaff3a80a7d5a713c4a0dcda7da7686aa8a","ssdeep":"","tlshash":"4041803b72042b285af3f11461d18f49a13a9691d36115edf3223b0f8fe778626b5fa4","first_seen":"2025-06-19T20:06:53.514424Z","last_seen":"2026-07-26T12:54:27.64859Z","times_seen":16,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/currency.B1sKu_8h.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.632Z","timestamp":1785070400632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/currency.B1sKu_8h.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 561\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-231\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":561,"size_decoded":912,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (560)","md5":"6cd405b81f50797fb0e3c214367c76e4","sha1":"d3f1dc6e547f27291952f307325debee87bd59c3","sha256":"a6fe24fee996bb92cec473d01a5f1965c5351835291ba52bd56c34b114829619","sha512":"1d60aa9ef0ef6eb461d054f51a772ccea649493ddcaa5e13149155481621cd4e3de29f8079d7e5c3904588895ef30e0d7ecefc45e9c25e159bd5ea9f709e473a","ssdeep":"","tlshash":"ddf096dbd4a2d4e2c1795b44752962140037bbb1341b9ae03b8d32c6f3d8187c036d7b","first_seen":"2026-03-26T07:51:15.991452Z","last_seen":"2026-07-26T12:54:27.626556Z","times_seen":10,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/ecology3.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.135Z","timestamp":1785070401135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/ecology3.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-2d22\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11554,"size_decoded":11868,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3edff7abcc68ff5361b22092bdfad1d6","sha1":"5b445383b1fdab3e6ea09fa445913ab42e67a53b","sha256":"431d3f81f5856bc874f290e00119368d7073fe1dbc3f2e2a113291020afc9947","sha512":"10f9741e3420c7de3c64a7dce32342ff028e2d4bd1e6052bb5b03c9f3a390cebda502d334174083c6c7a270ff59497253b31bea6ef63df680f08df2e6ba03928","ssdeep":"192:eiUezmxd0NoKUtc4vwZzum8EaQC+JqmcX03GnxyrryZwNdvEmjqHGjH+epEB6B:QMmxd0NoD+4vwZzlgQCDEWxy3yGdpjqW","tlshash":"7532bf4ff68ed5ddd2005228265a1212a2480ec5cf0323897556efa7ef30b4b0b49fb6","first_seen":"2025-03-06T21:41:52.701129Z","last_seen":"2026-07-26T12:54:27.650793Z","times_seen":28,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/statbar/new/asset_p.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.730Z","timestamp":1785070399730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/statbar/new/asset_p.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Jan 2024 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65aac880-132a\"\r\nexpires: Tue, 25 Aug 2026 12:53:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4906,"size_decoded":3803,"mime_type":"image/png","magic":"PNG image data, 801 x 801, 8-bit colormap, non-interlaced","md5":"f9caefa295316c467f5510e3335d5fad","sha1":"f37d9374be4e3390cbe93fa1cade136ed7d80035","sha256":"ada14ff758ac1aa8798e2c3c2bc3b1a0f93e469f9a7342a64b135e64d63f004a","sha512":"c31570b74de346ccda02bfc6f775a93c34077b7d33598e9c4edf8e116c87fa2813d4fa8baf22b51970bfd7c8e8164136e0f1b62d55535b0dcb78821b1ca019b7","ssdeep":"96:Gayea6t+8gZiAQ+qwrE2fm3o8Hg7wjC8S0dpkFPBT9fqukZkBBupgh3b:GNmgZBhverHgKA0dpWBT9quYkBBu+hr","tlshash":"e9a124efa71b0c98f3e0447959dba81020b30b98fd00e69197de76554c8ee5e58ece0b","first_seen":"2025-06-19T20:06:53.535547Z","last_seen":"2026-07-26T12:54:27.608799Z","times_seen":27,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/opening-DBUzduvJ.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.007Z","timestamp":1785070400007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/opening-DBUzduvJ.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 100\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-64\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":436,"mime_type":"text/css","magic":"ASCII text","md5":"b88bdc2162ddd55422beac36682be32b","sha1":"7f904f6b93d3c73537566a6d0d78f28cefc05abd","sha256":"e35cfa072424200feb359a9f10fdc8d908c1a2c1a5a62f23a7426e8d03766654","sha512":"794d98fbb65ea669529ee6fb9f38d69d202d5472037a0188636e28f333951c362593b895c544ed36df722eeb25cce8502041b9c1d23268a8496ee174d96deddc","ssdeep":"","tlshash":"8db01258313c540604239324fd0bfe1e0b342a07633b8303287348232443d9bf234050","first_seen":"2025-06-19T20:06:53.543761Z","last_seen":"2026-07-26T12:54:27.632956Z","times_seen":15,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/getServerTime","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.041Z","timestamp":1785070400041,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/getServerTime HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/getServerTime","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.591Z","timestamp":1785070400591,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/getServerTime HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/account/userinfo","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.590Z","timestamp":1785070400590,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/account/userinfo HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,client-device,content-type,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/pages-home-home.Bt3x3ywD.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.612Z","timestamp":1785070400612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/pages-home-home.Bt3x3ywD.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 May 2026 16:28:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fa1a92-5f25\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24357,"size_decoded":8130,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24323)","md5":"0a8c30a8d3a562782513bdd61a0f450f","sha1":"d7e39d1bca6d008dfb2b0350e8fa4f1901b06b5e","sha256":"7e6f77775b9e66ca7ba5ac71e288430122009e1fd45d58de195ed90f8f8b5051","sha512":"155f3d579f3002fb76948f0e962eeb102a2e2d5753647ebfdf09ece5e07b2b679a94e01fcad8f1b5b2f322c2aa658ec996f8825839d7b1291d144ba0fd288a52","ssdeep":"192:yQoxZHzC5k9F/UogsLUWaT6FtAgzz0nDnvvGf4pVCjW02adjgfKhZSRihh4M9LEK:y/ZHzC5k9PRUjTGtAyaV4W0VB93fcK","tlshash":"aab24309ff1cc6786ca22118c09a8060757a98afd505385fa2f4bf3f4266d2859ddb3f","first_seen":"2026-06-05T02:19:33.633626Z","last_seen":"2026-07-26T12:54:27.629811Z","times_seen":5,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/ecology1.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.133Z","timestamp":1785070401133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/ecology1.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-26a2\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9890,"size_decoded":10248,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"e0e78bb5c21199c87147b181eec1242d","sha1":"1d587ead36ddae444ba32aa741b4bffe4f507457","sha256":"40375f2c1ea86f4d58944561dd3f472b720626da71d45d83e0ab6225f5f9f5cf","sha512":"c81cecf876d30f7125f957beee6b9089b70e3accfdb7bb7e9c07c8544fe86e0e2433cb3e62a29f9083fda1063b30b219d8199e9a845ff6db760d0d367d90953e","ssdeep":"192:EasaCyLCss/l5ZHJUbplYV/b9wYOFi6aqCNBu0GWbEZ2ieP3PtnIIgP8kf:EHRt/vZpUdcD9wxFiKN0GWbMePpIIg02","tlshash":"1e129da6e147883ee9eea47864a195857b4830f952d0197a69ed6c3116e33c0db1fc01","first_seen":"2025-03-06T21:41:52.698813Z","last_seen":"2026-07-26T12:54:27.615453Z","times_seen":29,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/one_proof_dark-CDimu7_7.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.121Z","timestamp":1785070401121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/one_proof_dark-CDimu7_7.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-9ae7\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39655,"size_decoded":39884,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"c78191d308dba11b78fba359ae8c5393","sha1":"af032d8f9df1ee5ccca5644f0f89a1498eb9e958","sha256":"62d49cf892b5cd542efd43d29ba463e47ab79556f1944c9547bfeba69c2c46bc","sha512":"55c23ac4c1fbaa5120369c1cb76615cb2b5d2c5535d31a72f1faa29009f7df581289e1c0f86c8865fe07529049d7bf76859527b6f4b7d87bca3558b8b93a2763","ssdeep":"768:MPyu5jWElS+zLlIuwikOqR4huZtQLUiPBWV+viaH4buA:MP+EIKLyuwpqU8giPBKyjYp","tlshash":"350301972d40778fe7a3e1312d0772bb94b4c611ad2b804d921635f166820dedb1a9cb","first_seen":"2025-03-06T21:41:52.710129Z","last_seen":"2026-07-26T12:54:27.613748Z","times_seen":32,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:22.453Z","timestamp":1785070402453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 26 Jul 2026 15:53:24 GMT\r\ncache-control: max-age=10800\r\nset-cookie: __uni__uid=rBEQUmpmA0REHGOSA6ioAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-26T16:20:08.954229Z","times_seen":17483,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":0,"dns":3,"connect":231,"send":0,"wait":231,"receive":0,"ssl":1401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:34.955Z","timestamp":1785070414955,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$contract\u0026sub=contract HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oQteypD+B4TbRZDjzojYeA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/getCountry","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.049Z","timestamp":1785070400049,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/getCountry HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/index-USC-PQWk.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:18.581Z","timestamp":1785070398581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/index-USC-PQWk.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-3678a\"\r\nexpires: Mon, 27 Jul 2026 00:53:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223114,"size_decoded":67724,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"4805d77a162618e91738a4e483b7fb1a","sha1":"a1f2d5e8ab7bae5a9903b9a3f44ed53fac4dd23a","sha256":"36ee945949f85ab43cbe2ebca5b008c13559f9ca8a92a8cc4a6d872e6a28eef8","sha512":"a07fb9ec56d45c480f36e456d95b9c413bb0ba77a7bbdd115bea6808c40e3d49d6eda410dd3cc3f56e45de9e3c338781a573accf9630f5b6663d4079c15284d4","ssdeep":"1536:u0K7HlA41IyNBi3MFYaQj7FCwsBlDOFIxuVoxJPIKkca1Al5aIzKMVTVlIe:g7H5vNIClDsIxuVS9VYTe","tlshash":"ab24b5a5e69091bcbf2bf275ab8b96dcf23cf560dd01caa4f10151580ec7bf5062361a","first_seen":"2025-07-16T11:12:21.718735Z","last_seen":"2026-07-26T12:54:27.612134Z","times_seen":12,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/config","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.114Z","timestamp":1785070401114,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/config HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,client-device,content-type,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/menu-light.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.118Z","timestamp":1785070401118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/menu-light.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-641\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1601,"size_decoded":1179,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"00113921d3d6098daf6ea0a692ba9028","sha1":"fda2a2aff4c84d7ecfeb46a430a1ca6331f4cbdf","sha256":"3f16db30d7bb3c37987ddd9ce6aa51557e44a3816b9bf2fe531fdeeae2d2a2e6","sha512":"979eafed5616e90b890356cc237ecd0e7de85acf68bc40151c570bd90cec4c4701a1c00dfd6a6bbadb8d65f192c460c0ebfcf7671eb80f746a28f0567b0113f0","ssdeep":"","tlshash":"d431007e2698432b62f53ca68abb14f817d212810bf0654dfe9800977a799a109f9727","first_seen":"2025-07-16T11:12:21.722278Z","last_seen":"2026-07-26T12:54:27.637206Z","times_seen":12,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/banner_rewards_light.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.119Z","timestamp":1785070401119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/banner_rewards_light.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-437\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1079,"size_decoded":1334,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b238eeb0abe9a51639991ec2f312c6ef","sha1":"dfce3c3faed7b2fcf9818127c9a7d5e7164c2b13","sha256":"5c0fccbbbaea2a0064e290d91d572241fc75376a805c00cfa239e7c9e82d1225","sha512":"a40a39634fa71b8205b0f172f9b0d93c065f8117d097eebe2a9fa4712acf1f3598dc529c930ebc880a7995620d16eccac45f8f777f6146b349771b428597d76d","ssdeep":"","tlshash":"06113260c99b37f8d2981b661c4a48458612dc29c683248d6967bdb4d64ce032af0b37","first_seen":"2025-06-13T12:22:20.880618Z","last_seen":"2026-07-26T12:54:27.639591Z","times_seen":28,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/ecology2.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.134Z","timestamp":1785070401134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/ecology2.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-251c\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9500,"size_decoded":9856,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"05e551d53821d0ebdeba63ceb303f9c7","sha1":"882a0a5ab80f8a05a2ed28448217dbcfaa27e68c","sha256":"8b2f368f7679da0ff66f3fd1319dab14bad9cebd1d81a37c379f3c1f4f6fcfab","sha512":"97159d3f2c23cd97c95c06ee227f83ad93ca0271477845b78d5e1d5c41f364a5e1a491b24baeba8a020e66f1bd402c7cd01fae296c4144a8914bd5853746b27c","ssdeep":"192:qb/IVFPMylpuA61EQu2oQFs8YfbG5GJt/bi2ugX/SQ/Qrx44/:qDVSpuA8Jc8aMGDbic5Qr64/","tlshash":"b212d0f96654e504d851c869a00f2383f31ecfbac5fe26804127be0cf48ec84d9e2431","first_seen":"2025-03-06T21:41:52.75441Z","last_seen":"2026-07-26T12:54:27.642692Z","times_seen":28,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/drawer-icon4.DunHuFkW.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.622Z","timestamp":1785070400622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/drawer-icon4.DunHuFkW.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-4ca0\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19616,"size_decoded":13071,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19577)","md5":"2cda18a37ea92c29ef1e6a6363c70ab8","sha1":"8516208f971a08b9f0161c3fca4ca2d036b48b1a","sha256":"9add3ce44eb9862bc1840f3f4e152a47ed43f5526af1ed5e081a2823add47a74","sha512":"236bdea2f490fd9aeac6c3375a1ef4c6137b79e56e1279cf655f4dbf03906da56cb79debce5ab1539ff0c7dbe0ee291ff90a778ccf065683bd6ec0be95e40473","ssdeep":"384:PT9kBCayC5T/kgOnL+akiuFY6cA6rw28Sk:PRkBCay8Ig6L8bFhp28Sk","tlshash":"1d929e3a342d7db54dc5526021090202de2a2a5ec4b8317ebfbdb7ef7f49c50666a734","first_seen":"2026-03-26T07:51:15.99389Z","last_seen":"2026-07-26T12:54:27.60968Z","times_seen":10,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/currency/getTradeCurrencyList?n=1","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.112Z","timestamp":1785070401112,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/currency/getTradeCurrencyList?n=1 HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/android-light.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.143Z","timestamp":1785070401143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/android-light.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-130c\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4876,"size_decoded":4783,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"721a898e7d013d90c41fcb8358f0f091","sha1":"c1551c41a3baa9f66a399f83d29a137e67f74f5b","sha256":"1adeba4d234a819243d1d189722492ce172505a80e27abd00136cc4cf3951b5a","sha512":"4c749e0715e12ec773ef581ab5b0c837fcf1fab8bc7adf49303b7f023ac626b2d9919c25980af70b1df8cb0e1e733c5160cdca449ec23259bc3408cbcfe0f530","ssdeep":"96:yDvXmHomtNzvZBJO3h5QxuXoEgZnypppX:yDvXmHoovtYE/EXX","tlshash":"fba17de8a6251bb72fce96c2c000f0753f7a04e3b5e11766edcf94404b06b1f5d26168","first_seen":"2025-07-16T11:12:21.688929Z","last_seen":"2026-07-26T12:54:27.63643Z","times_seen":9,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/video.mp4","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.163Z","timestamp":1785070401163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/video.mp4 HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 788493\r\nlast-modified: Tue, 05 May 2026 16:27:44 GMT\r\netag: \"69fa1a80-c080d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-788492/788493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":788493,"size_decoded":788782,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"198918f40ecc7cab0fc4231adaf67c96","sha1":"438ad3bf24fed937085ffa101ed06cdb23e30007","sha256":"3bb938fb70049e3e45f533b37ccae995ae96516e04c2f35b0c1142e47b2a39c1","sha512":"a0888600ff0c307029d57d12a45e6b0615989059ee2b7cabcd7505aa1bd8e35d15d8052c73eb7bc5402b552b289215e7380108ae4468f40248ab1b72f176c56b","ssdeep":"24576:IC7We7KsnK3rICWtbw6xTAUk5bn6nb5SCd:I/e7K6skbBxEU6bn6bt","tlshash":"59f423d36be0e93ac0a91c744e9f93535bf2dc3a9d38e20944da0c9a5e096b56d1cfd0","first_seen":"2023-04-16T09:55:46Z","last_seen":"2026-07-26T12:54:27.652266Z","times_seen":40,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:27.741Z","timestamp":1785070407741,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$contract\u0026sub=contract HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /2iHJC/+qEMOOEDtSjy5Mw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/statbar/new/trade_p.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.723Z","timestamp":1785070399723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/statbar/new/trade_p.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Jan 2024 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65aac880-1f97\"\r\nexpires: Tue, 25 Aug 2026 12:53:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8087,"size_decoded":7991,"mime_type":"image/png","magic":"PNG image data, 801 x 801, 8-bit colormap, non-interlaced","md5":"12edb8fd3f025d01c9e066ab51158c10","sha1":"c1c64dda47889834f5afd7f125d727f56a3b0515","sha256":"95bdf22bef3842df575565f039cce92296327c5c5a23a94c93a337273c14a8b8","sha512":"ebff2021c820f04e242109b27fc5fad9321ed68aa1bba74bf916eb0457f908c49aa13ec517a55f8dda4f314e3945509ed72ef1a1513679cb1395fa628407b531","ssdeep":"192:ngjFSusVgY9AUDszgaaryUyBpjU4ytCqXAFQLDs6cGvcguWsHK:QIujYfo8fQe4RYAFQrcE9u9q","tlshash":"aef16bb10288965bc76e893c973fedb602a3d83c3e5255839fe0a4c2e5614e5c036fc5","first_seen":"2025-06-19T20:06:53.430635Z","last_seen":"2026-07-26T12:54:27.620661Z","times_seen":26,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-icon.CkGhA6dg.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.614Z","timestamp":1785070400614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/fui-icon.CkGhA6dg.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-f84\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3972,"size_decoded":2236,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3645)","md5":"271fdd3f4ae2aa8f0288125ee5dc5908","sha1":"709b090535d17ae6c40c0813bece5f0ed0ab7b71","sha256":"d94c8e6535d3c8f080463255cbcef024bb3bd6d63e13ab67f756e704914a35f6","sha512":"5b10cb0ecff56343dfc59d55537f25092b54bbdc33dc03e03eba9d9733b33cce8e87aa16df7b7b3dd697ab763ac397e1414c4e21691007977e74690592591ce4","ssdeep":"","tlshash":"7981834e64f9ac2b6e8e7dca544c1203d0d19f58e9e0fc52ac9e08e5e57e954b20df2c","first_seen":"2026-03-26T07:51:16.025863Z","last_seen":"2026-07-26T12:54:27.638045Z","times_seen":10,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/product2.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.126Z","timestamp":1785070401126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/product2.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-10c5\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4293,"size_decoded":4558,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"6bfadd8452da4bfc1dd858629fed0bb4","sha1":"7608934dff2fc1fdb39f36ad3d084830a927f81d","sha256":"30367461da0187d98cf012a5396fde57aa1e179a72d3b0c34aa4b7943815a805","sha512":"0b747a2131f090ee5455d9a5bc50e32bb3c81c8df3fddd1d37d716c9f1629cfd9921ac36c572004c7372d7f2f3a41790cd8ca6887cfa54ff5257273a4d8b42c9","ssdeep":"96:Ib3bZTL0wX5yPUuGN3r1UK7Jt/rj1kLMXnfLtLSzS:Ib3bZTL0wX5yUug3xd71bfLtLSzS","tlshash":"89914c87b905529cd45505fbe2046bdde2e8f6553f3022d7f2af81026aa30c9a978363","first_seen":"2024-08-19T21:19:37.592834Z","last_seen":"2026-07-26T12:54:27.614584Z","times_seen":31,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$contract\u0026sub=contract","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:23.113Z","timestamp":1785070403113,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$contract\u0026sub=contract HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6cBIOX9OkADxzHqY9NGYNg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/index-Bvkv05nm.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.055Z","timestamp":1785070400055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/index-Bvkv05nm.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/assets/pages-opening-opening.D7QEmFY1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:20:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6109ef-202dac\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2108844,"size_decoded":521090,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26503)","md5":"2c68943ce07dd867d09ec4f36223c06a","sha1":"1e252d0ea0633d49a684477a0c8a69646ce37062","sha256":"13e97f7eaca7d2167508e6422daa2bf08e9923b3928f816bfa516a51032a0f96","sha512":"66a2208b3d14ddee60b4582e8f4f93953d07fcc4e8f4631ca6516535473ecb38ed17bdedc035f993ab75f78ef011fe7acbebc070356e0dd48ff8d39b53b4d4bd","ssdeep":"24576:JjTjU3e7gTZ4v1Qdl5/kWT+jOvMRhybCakYCvjTuBIYYeYHZYsuNjIMr5UloMkOR:JjTjU3e7gTZ4v1QdgWT+jOkKbCakYCvL","tlshash":"7e356c1d768bab3297f202f0a05b4a4470795e42f1178098eefcdca815ec649e1d7f7a","first_seen":"2026-07-26T12:38:02.361584Z","last_seen":"2026-07-26T12:54:27.606738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni-app.es.DryKfclR.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.620Z","timestamp":1785070400620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/uni-app.es.DryKfclR.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-54\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":433,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"39b47d91b737c4ea36792cc321fcf87d","sha1":"9ef7c05c4749651e944e023859c108b98297ee93","sha256":"f2fa8a1205df8dd9e48b1269e689d709ef3f5e59f785743a1660db20230dfb49","sha512":"0e80cbc1d107e792e21534bb94c0e3460a2096d67873e11312e4735f2ff2af90290e45b15a62e135b719caf36ff2d89438c99a1c4fe9cb299bdbc0c1a9a7fbd2","ssdeep":"","tlshash":"77a01207604130125802284000a6640b51f611f145888e3081d913245ff44ec812c90b","first_seen":"2026-03-26T07:51:16.007695Z","last_seen":"2026-07-26T12:54:27.624716Z","times_seen":10,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/position/detail?code=h5banner","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.813Z","timestamp":1785070400813,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/position/detail?code=h5banner HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/HarmonyOS_Sans_SC_Bold-DFJwAIlE.ttf","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.073Z","timestamp":1785070401073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/HarmonyOS_Sans_SC_Bold-DFJwAIlE.ttf HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/assets/index-USC-PQWk.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 835288\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-cbed8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":835288,"size_decoded":835576,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 14 names, Macintosh, Copyright 2021 Huawei Device Co., Ltd. All Rights Reserved.HarmonyOS Sans SCBoldHarmonyOS Sans S","md5":"62c227ccf2e7e57401426115ca7ee5d6","sha1":"df0ab55659ed881e109dd960766617e1f4e12b05","sha256":"18336ddf23933121cd620103c9cd4da44585113d3ff54d07060fed9d94f96b0f","sha512":"03cfa9f18643e57047dbbd5973c3bbbbeef9e5c466e17a26f2e120a0106235d4bc08c2d13b39bf52a5c60cf6b0166190cd4acaf175da40c298af3070db03b5c3","ssdeep":"24576:IoZSwLDJCvRmUT3VFK1Nvkb+OKM5euMmj8BR46G8wQlX00KLq7c/wk:vvJCV1s/bXKhD","tlshash":"57057c929bc96a1ddd71febd1d04719af08ac0394b16f2f2aeab2d3904339c54858df1","first_seen":"2025-03-06T21:41:52.711418Z","last_seen":"2026-07-26T12:54:27.617864Z","times_seen":31,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/mobile-download-Cm2GnD8V.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.141Z","timestamp":1785070401141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/mobile-download-Cm2GnD8V.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-2ea08\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190984,"size_decoded":191232,"mime_type":"image/png","magic":"PNG image data, 686 x 620, 8-bit/color RGBA, non-interlaced","md5":"1fa7539ac849c81908ed9e857dafc5b7","sha1":"9533314be892f526224aa1056c45a1549a96ce9e","sha256":"6bd6b69bc6a9b74d83685c84103a89c9ae64b901beaa1760e86706212212dd8e","sha512":"b9c71bd5970131ffae8676ff304e3b62a76be3462f42974ecbe49fe7c0aa4fd9c4bcc2de1cc7635ff89fd284fd3a9b3e0576df5bc3fe82ac1f57bc872017c362","ssdeep":"3072:fifNBliOY1eJffWi4RcQAfk51dTrX0nTXs3HVoY8eTqwAtUhw6Kb7M1mtQSYLB0c:wvlnRJf7tlkrGaUeTZhtBS4eiKgb2k","tlshash":"8b1423bbe1de88cde7b4095cfc6bc4cc5b09d8a653768b0075bac01212ad282d749e79","first_seen":"2025-06-19T20:06:53.523411Z","last_seen":"2026-07-26T12:54:27.611268Z","times_seen":12,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/statbar/new/market_p.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.721Z","timestamp":1785070399721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/statbar/new/market_p.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Jan 2024 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65aac880-19aa\"\r\nexpires: Tue, 25 Aug 2026 12:53:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6570,"size_decoded":4474,"mime_type":"image/png","magic":"PNG image data, 801 x 801, 8-bit colormap, non-interlaced","md5":"0a68aec62b8d36459ec3f349871489bf","sha1":"0907a8afe59bc2569867ec69097659feb15a7134","sha256":"3902a9c68e5c263206dbcddbcdbb6e7ddd4ecfc6171f93ad49729a6b231269d5","sha512":"a760f19a668d06db1b728211a64b4e3c951d46f4f4dd4bd6533b76bc08f4ec037c3122623f8df3244cad1eaf9a97bfd3d9faf18634c4a697bedcae0e2a048ce8","ssdeep":"96:dGUB7KZYTOthtljrlvaUBsh+gFKVHAOB6jaqLrbfvjITie:kUB7KZ1hjjxPBsh+v2O4Owrj7Qie","tlshash":"97d1444915fb6f42d48286f9bf733a2966083b1fd9eaf629153c63c03417782e41d98e","first_seen":"2025-06-19T20:06:53.501615Z","last_seen":"2026-07-26T12:54:27.621477Z","times_seen":26,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/statbar/new/contract_p.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.726Z","timestamp":1785070399726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/statbar/new/contract_p.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Jan 2024 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65aac880-2697\"\r\nexpires: Tue, 25 Aug 2026 12:53:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9879,"size_decoded":9696,"mime_type":"image/png","magic":"PNG image data, 801 x 801, 8-bit colormap, non-interlaced","md5":"178462d7a56561dbcbb571898f85b767","sha1":"90d0ee467d32862c616278c291acdf123f4ef9c3","sha256":"635031bcb0604c5f3401e4d44864392dbbb151fb16a7ffcf5104fc58bb387f52","sha512":"0219cc448410c8130e8370654b136755f34fff424d313625bda290c5c7ee3726844c83e3f9ce5c4b94756dcc97d8760275adb9e59037341ece85af6020f25b11","ssdeep":"192:GT9nPAxKd1JZaySy+xNJBgJ2awmZ2APX6WlIobPjAbw6dPLBX5giRvKniSp3DOGm:GTNPAxC12TLNaIAPXzPjAb7LR5oniSl4","tlshash":"dc12af5ac3a07c5df074e132c34b787187b0abb66693f2442f29d63b81de5e40466937","first_seen":"2025-06-19T20:06:53.527965Z","last_seen":"2026-07-26T12:54:27.612959Z","times_seen":25,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/home-BrE72ISy.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.635Z","timestamp":1785070400635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/home-BrE72ISy.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-5699\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22169,"size_decoded":4213,"mime_type":"text/css","magic":"ASCII text, with very long lines (22168)","md5":"c8e9495ff37bd256df365cd8cd38e59e","sha1":"f8aa84cd6bd5d8fe99817152bfa07d842409ede5","sha256":"455c9924d6b9d0decd7679cfaf90953eb0b472a35cdfc0505ee739fdc204783e","sha512":"aefbed3407bf949dc33250a4990db0308c88302e783db1ccb240dd50bf16b4fab37b103191d398484ddfc20c8ce2bc33c719d182272b1e918bc03d870f96dcdf","ssdeep":"96:tjFQrOXmpCK6zqeYG362G0GKfGQGx1LHwZoe9JtgSpSvSgPV3gd6GWz0Ja2gk9Ao:tjnX6F4YcntdQ1LHrdK3D+bd59ozT","tlshash":"43a2367c231c7738ad73d903699816cc0925b7a8d242058fb6ab795549cf7c32a71fca","first_seen":"2026-02-13T02:55:07.059355Z","last_seen":"2026-07-26T12:54:27.63063Z","times_seen":11,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/ecology4.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.137Z","timestamp":1785070401137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/ecology4.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-2a8d\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10893,"size_decoded":11230,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cf690c51e91c9436da900c93dfbe4af0","sha1":"a88dca10f1c50a06ee2baf747ab2ba919ba76596","sha256":"6cc9944ac9c201a242d2ef17d17951b4aa3b444a203868b53b7420ee69843d40","sha512":"e62c4ae762d202723d5a942eed6c83a87cc1d5ff65ede6952d9aa514e90b909d4bc7e62472e4bfd91efd8ea97f8dae3e8953c326f9d3b70adb4799e2bf78fd41","ssdeep":"192:UCcKfbxtEp2fIV+16ZcEm8LApA63egxLJsgX1mF8tqvwOWH/:UCbXGcI1clA6vqglmStawOg/","tlshash":"db22bfce7b68fbb021fdba06894e5b403a2235f3b3184f8f189414bca09d357d25da11","first_seen":"2025-03-06T21:41:52.738759Z","last_seen":"2026-07-26T12:54:27.631428Z","times_seen":28,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/config","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.036Z","timestamp":1785070400036,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/config HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,client-device,content-type,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/favicon.ico","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.325Z","timestamp":1785070400325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Mon, 15 Sep 2025 15:44:44 GMT\r\netag: \"68c8346c-3aee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":15360,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3390e889d3441bfe915d400de808d66f","sha1":"8b966861a2446c4177c79622bfee8f748479cdda","sha256":"1f48f496b1608ddd9cba8129afce9feacd5d6a54e16934b075ba3505a38586a5","sha512":"0ff65294c1d50dd934814a9890bd83285534fde0a77160487431f165c5e2b59e8237dacc9cad5f7909d07680dafd6fc01f13111659fb3536fda7a68068358d20","ssdeep":"96:jpYsiqZb7/230JfZ8j1ySQUSqBy/bf9T7QzLX9kf:jCsiqfUSq2Qg","tlshash":"af62c3366154194dc44c0c7b4016de3e8043fcad9f829b7a621a3cabf26ae2e5d2c57f","first_seen":"2025-04-26T21:55:15.120483Z","last_seen":"2026-07-26T12:54:27.623896Z","times_seen":35,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.metamaskfa.top/?token=17850703996875786539$trade\u0026sub=trade","fqdn":"ws.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:25.812Z","timestamp":1785070405812,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?token=17850703996875786539$trade\u0026sub=trade HTTP/1.1\r\nHost: ws.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.nmetamasks.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vW6eoNxX/HT9Gc22SMY6HQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/statbar/new/home_b.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.715Z","timestamp":1785070399715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/statbar/new/home_b.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Jan 2024 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65aac880-1c2b\"\r\nexpires: Tue, 25 Aug 2026 12:53:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7211,"size_decoded":6583,"mime_type":"image/png","magic":"PNG image data, 801 x 801, 8-bit colormap, non-interlaced","md5":"a66613bf20a9c499c1df6651d7ebd57f","sha1":"297ea18081fb8ff11ecbcb6e627608f68d6f536d","sha256":"b0dcee1ceab8c3b03611ed8e2fe3b1a974abde3f1396e6bcb5e775e92fe908c0","sha512":"71ee25249955fb3826cff4b80813a6a6728f987919759894481457d3443b5788d7f77b7ae9522be4e56c448ba6a52a303027df1fee42f6e418e9c8a7d61da214","ssdeep":"96:ELfDTNwbw2bd0kvO4GekhDQfzKdGUr+6Qhc5rAVr41Q+wDKwRgfd:ubJOR6sKtQLKAUr+5hc5rAVreZwDNgV","tlshash":"57e12bedea358d25c305683b9addbdc1755bab437d5f50826e8f032a80607e332b3249","first_seen":"2025-06-19T20:06:53.471184Z","last_seen":"2026-07-26T12:54:27.644936Z","times_seen":27,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/account/userinfo","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.038Z","timestamp":1785070400038,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/account/userinfo HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,client-device,content-type,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.metamaskfa.top/api/common/getCountry","fqdn":"h5.metamaskfa.top","domain":"metamaskfa.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.597Z","timestamp":1785070400597,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/common/getCountry HTTP/1.1\r\nHost: h5.metamaskfa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,client-device,timetamp\r\nReferer: https://h5.nmetamasks.top/\r\nOrigin: https://h5.nmetamasks.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.metamaskfa.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.metamaskfa.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/pages-opening-opening.D7QEmFY1.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:19.735Z","timestamp":1785070399735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/pages-opening-opening.D7QEmFY1.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 557\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-22d\"\r\nexpires: Mon, 27 Jul 2026 00:53:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":557,"size_decoded":908,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (556)","md5":"501cca50df966e93d3e728cb832d292a","sha1":"712a0d0a8195abf91b23b15358549793647148da","sha256":"191fc365110c82b3580cb27a1c0536a49c8b091d80b6e13240cbf065b706f8c3","sha512":"6b04e80eae7e9c73bd4b8f7b9ca26cdb5224829675080fe83208be4127f8db920b7be31ccf6a97de866eac9a5e7a671722534f5c63429e3413754c572359be3c","ssdeep":"","tlshash":"d2f0202c0719a0b1c62400d49113b7981c242270032a8889e7b4e81ffe10dcff32dcb9","first_seen":"2026-03-26T07:51:16.020229Z","last_seen":"2026-07-26T12:54:27.607919Z","times_seen":10,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/product5.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.131Z","timestamp":1785070401131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/product5.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-1601\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5633,"size_decoded":5961,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"136efa6947c1d1362eb5cdc9d6944f89","sha1":"0e3d3e59bebc91a58bd74333c2ded63041638a49","sha256":"db9fbb16222f8efab37d6c1f7927fb91d0ca7b89e9f62b529234361565e49248","sha512":"402a4002732e1243e4944dd48dc5321870e0a6fdd82446a2e92a172242afdafdf3552961257a8c30319858ccd82996ac3b32e01404389bbc3b310c33b672d6a8","ssdeep":"96:u9JuNLP1RsOcOc0L3L87PG9QZhR+kMwb9eLaaExkIJT5iDVNCZiR4D:u416OcOZA7PIkMOHaExkC5iDVkZuK","tlshash":"d0c17c8ba2de0d89d187c03dfa44d654a3c1b5f53d7214d3a48849f32e6448688c9bdf","first_seen":"2024-08-19T21:19:37.595237Z","last_seen":"2026-07-26T12:54:27.645658Z","times_seen":31,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/cvlogo-UqATCrg4.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.116Z","timestamp":1785070401116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/cvlogo-UqATCrg4.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-22cc\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8908,"size_decoded":9283,"mime_type":"image/png","magic":"PNG image data, 230 x 60, 8-bit/color RGBA, non-interlaced","md5":"7172a6b1a420fcce07b1d50e217dc43b","sha1":"e3e5a3e494e1849d8d5fb111d88392cb693642f7","sha256":"934b4289ee060a0ab8beaad4476183b2440f756f0a88af65db6b4a5e88793160","sha512":"cd4ccddf9033e9a52ebfd7016f50095b40f2ce928ba6de9b1b11af410bc2751877bac11395703920214a94cbdace57013f787440903ec2e07669476373e71d85","ssdeep":"192:SPTSugI+YIkkp97qre2sKYCCAUHHyyJ6v1W6K9HezDtvzjvm:qwI+YI/tqKDzC2HHyyIv1W6yeDtLjvm","tlshash":"7a02af4dd6ab60e065360bb7aa61f81ed3c535285b8e3147125ed16c7c29ebca0a0d23","first_seen":"2026-02-13T02:55:07.185746Z","last_seen":"2026-07-26T12:54:27.628204Z","times_seen":11,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/home-1-CxeO4E-0.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.115Z","timestamp":1785070401115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/home-1-CxeO4E-0.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-b10cc\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":725196,"size_decoded":712938,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"d899e73fa12edc7b67ea049e710b7074","sha1":"35f12fcd3964aa3438494937456e5b445c0a0558","sha256":"f2993adb9e9a5b4cca65c02d9343bf29bf979a75de7b8dd1ac7fc553427e4efe","sha512":"1c87aaa6dc2b3592764b57bcd9cf616e8cff9577e0974c82a5eb35f468b293da2deb6d1b43d651f147a32f74dd81d66087d948bff9ddbf000b69e2d76fb4bfba","ssdeep":"12288:TMk/t0WvFDpopFgFV88cRX8SC6zbL/G/q1yEG61dmZegpBtyB5z7rQHKTpSHcGzb:TRrzGgFVncJC6PLvUaMZXTtsRiQS8kb","tlshash":"28f423fe648a6d2e9b170f31b1f27c142169860ccffa90184039f917add7588d53fa5a","first_seen":"2026-02-13T02:55:07.133002Z","last_seen":"2026-07-26T12:54:27.638783Z","times_seen":11,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/two_storage_dark-BCltGeYc.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.122Z","timestamp":1785070401122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/two_storage_dark-BCltGeYc.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-5958\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22872,"size_decoded":22879,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"72e7a96e6d3e7070e77f99c63c4c5ece","sha1":"6a3adc33d07e989fdbdc19eb5eefa825d9c1b620","sha256":"ff0831be0eb2dc412fa21266b2e53ffd992e8ea4114045a95ecf3e4948a6f355","sha512":"98b2c30884df5221da4b4366838d2fe38f5756d2c242526fa9077bb1d40ce28ac1828db51613c7aa9393f58565074281e2ddbccbfecf55b89ca62b36872f825c","ssdeep":"384:mQuqX2WK5W/UZdhK1KBUQ+2guAsLCj4JbdbUWHoDJtXjan0Ei3R8y0TJR:Pcddh4QhhLHbBUWyLMTJR","tlshash":"d4a2e0c4fb32be48d9aef439a3c5c2470c7e8f5761b12aa1be7a43b50e147117961a60","first_seen":"2025-03-06T21:41:52.716854Z","last_seen":"2026-07-26T12:54:27.650065Z","times_seen":32,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/product4.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.130Z","timestamp":1785070401130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/product4.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-1384\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4996,"size_decoded":5331,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"eb6806f9c80be386bb96a81319e3e6fd","sha1":"566cbb95a0099b6f89edb491e6f4b3b20ac399f9","sha256":"6ce0120e81d8ea3c4ad5efa0a3746ac67cec861665626d0af2953bbe1169c9e5","sha512":"0910dcbd2164b86495c49a9233ee64b34960bda5227264cb92097c7edfae089bd6a2c677d4daaddfcba3874d98b081c66b6254072c5ce7e6196d5a5eef73b3e4","ssdeep":"96:/6nPLe8Gig4Sf4eBAVrdFfje+2C9lP6hzfyKr0741TV3AFhxSk+frWGKy:/EDeG8hK5ljGilPujyD7cTVUB8+y","tlshash":"ffa16d892ef4e46ce5ea103b149081c906a645d5f872a459fb64c2d0d99f2f1cd750b1","first_seen":"2024-08-19T21:19:37.620082Z","last_seen":"2026-07-26T12:54:27.617085Z","times_seen":31,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/googleplay-light.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.145Z","timestamp":1785070401145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/googleplay-light.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-2074\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8308,"size_decoded":8649,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0d5d4a8566f54ed1710720226120d6fb","sha1":"0756935382ec65d1ca23b328711ac07e40128c55","sha256":"6d74afeb43ec3852c299d891fdf8dcf330ae1a36309dab99419e5ff567c048c8","sha512":"36000d22788db7f112478b81655de32e073988ae449292ac0b4e00c22bffb7ae5cf2f555ba629c9667e9d1dbac409b5f62885f9d9db31c78426e63a25568d840","ssdeep":"192:GKpBByDSAJxuONXalbnF06Lkbuf/shhOMWYDR9bCIBbK:GKpSDRFNXa59Lka/ahzDLCIc","tlshash":"6602bf643b96cc2887c354fff8a0c2bdb961932ec730e6bc125ef5ae1955503a923122","first_seen":"2025-07-16T11:12:21.710436Z","last_seen":"2026-07-26T12:54:27.63218Z","times_seen":9,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/fui-icon-CBHgIZkq.css","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.616Z","timestamp":1785070400616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/fui-icon-CBHgIZkq.css HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 435\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-1b3\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435,"size_decoded":772,"mime_type":"text/css","magic":"ASCII text, with very long lines (434)","md5":"60500b1b39ef844e56b69cc350db8b77","sha1":"80e1754b48c7f2169d52b1fe4ffb48df4bd207e3","sha256":"3d1030bc12acba02a2d6a6be4e80db308904f20659434caa2e71d027a4034e7d","sha512":"c93d7bb4f74d079e19e081fd786cbb1c1f25eccabce59ee4573c80dbbf0327043300c41da36d87b8f8d0ef6f1153a768b5d2405a7b8b901c2c269828f7b94c28","ssdeep":"","tlshash":"dfe05c4ab18d3412249b983b25e1d93f3821e721dc22ef2820728d201fb28f36022631","first_seen":"2025-06-19T20:06:53.458865Z","last_seen":"2026-07-26T12:54:27.651482Z","times_seen":24,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uni-icons.CeORqMFo.js","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.623Z","timestamp":1785070400623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/uni-icons.CeORqMFo.js HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2178a-4418\"\r\nexpires: Mon, 27 Jul 2026 00:53:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17432,"size_decoded":4254,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17419)","md5":"0a7db9e2d261ae77acd4bfe36ff5d028","sha1":"e87642cbf71ef0651fe30658b394e81346f25977","sha256":"273cf0487684a18a13eacc4a27854c57ec48605f2ee392b95bf49572096b8aa9","sha512":"3567545c5f6b11dcb8ec88d3b6cd8db39aee1ccaf59afaa2cd36906b275ce8a651f088b750b75973069401cbbe7714c2900ee4160b8848bca94a2e27a51ea1ed","ssdeep":"192:+mrXEy1lUnUG6qkFqA8TkJcYyqn5SxK5TgeaaBVZ0O6mNj:9rX/BqQcY15T5PVZ076","tlshash":"de721349cb8c299c2fbba74d74cc7076114e0f95c90e3cec6c65e74ea5dcda6268132a","first_seen":"2026-03-26T07:51:16.002038Z","last_seen":"2026-07-26T12:54:27.641136Z","times_seen":10,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/uniicons-ClHF27D8.ttf","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.077Z","timestamp":1785070401077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/uniicons-ClHF27D8.ttf HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/assets/uni-icons-CpF7sPM7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35760\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-8bb0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35760,"size_decoded":36046,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontuniiconsRegularuniiconsuniiconsVersion 1.0uniiconsGenerated by svg2ttf from F","md5":"b6d3756ee0e3dd7ecb155b751a233247","sha1":"4e61eda60483fc01548f76ca5741ee838486cc96","sha256":"89ed7d6d732e893a473c6d6b443f854f4dcdf57360a11016306335a2048895ff","sha512":"0dca69f143ce0b6428348a23a9030ae49ae1936d940e28c75b766f89ec3fff44df111e435c300ffab7dac14d3f6b39fef8d8babb490b755c2ed5ec1b3f602cd4","ssdeep":"768:66TDym6KsVBqac6riFK/d8PWenmP7p7+A9cbWL2eRaXNPs:JTDym6nqB6WsdenmP97dqb4lss","tlshash":"2ef28e65176d4e6ad97e59ba188761130f7eff30a0b1ed16ee8ebc5e84080f405e0b1e","first_seen":"2023-04-13T07:38:27Z","last_seen":"2026-07-26T14:59:18.266309Z","times_seen":559,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/product1.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.125Z","timestamp":1785070401125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/product1.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-172e\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5934,"size_decoded":6244,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"9c73b24048a20001221066c92881f5db","sha1":"4b7f4a9eb5c5e67e7e70f57e13c110a07c2da56a","sha256":"1c30b16895c9ce7d0ed4f83792082a283932b288285b8a2386cccbdf8fdafaa7","sha512":"ccd509034add1f8d41813056744bc26d7c699c27bc1cdd2f8de36d08d5268542b456b85d723441d3791979347fb1725bc9e4e8156b9cd171f0c539449ebbc49e","ssdeep":"96:E16sj0m/4eNWZJd2E0zAaGDdB/tNpgMQUn2wiDWwOHVGJOFTDf:E8sj0mhN6mAXJ7TkUn2wiDW3HV4Ot7","tlshash":"d1c19f327dcccca0eae746379c1f8a729a85afd91817c5a3591e4010525d1e647b8c2b","first_seen":"2024-08-19T21:19:37.592055Z","last_seen":"2026-07-26T12:54:27.619664Z","times_seen":31,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/assets/HarmonyOS_Sans_Regular-BHHgWLDZ.ttf","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:20.043Z","timestamp":1785070400043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /assets/HarmonyOS_Sans_Regular-BHHgWLDZ.ttf HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/assets/index-USC-PQWk.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 146616\r\nlast-modified: Sun, 17 Aug 2025 17:55:22 GMT\r\netag: \"68a2178a-23cb8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146616,"size_decoded":146904,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 14 tables, 1st \"DSIG\", 21 names, Macintosh, Copyright 2021 Huawei Device Co., Ltd. All Rights Reserved.HarmonyOS SansRegularHarmonyOS Sans V","md5":"48d656ed53e13d664de5cfdc7d3c438a","sha1":"8bea06ce4d7b4196f5e5f60b5580bdb1519ff560","sha256":"4f00c7e80329238d0b6fc58e5c829c4086432ba9fa1a8c5ca3da9a0442ce0452","sha512":"4d3189ddd412c1018a1c102c7067b5983ed2ea46d26a0e7f5f8a0829b77557c35a6cdd41c3573c3fd0592e240f1dbf51133a73ad246f0f44dfbe37f5b1c1feff","ssdeep":"3072:2waXVb3/LizgXbAsJzu82vIm3r6yoj8Gf9g4I3ZgDl6iquMX3js2O0:GVb/Liz2Jzu8IIm3rE9g4I3ZgDlnJO3T","tlshash":"7ce34a07f3a3db5fea16adb9a632e22283cef434793e874ef5041567d49b8e1c884541","first_seen":"2023-04-07T05:22:56Z","last_seen":"2026-07-26T12:54:27.633751Z","times_seen":654,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.nmetamasks.top/static/home/ecology5.png","fqdn":"h5.nmetamasks.top","domain":"nmetamasks.top","tld":"top"},"ip":{"addr":"103.30.76.121","port":443,"asn":932,"as":"XNNET","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.nmetamasks.top/","date":"2026-07-26T12:53:21.138Z","timestamp":1785070401138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.fufuwdtkjd.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 06:03:04 GMT","end":"Fri, 23 Oct 2026 06:03:03 GMT"},"fingerprint":{"sha1":"7E:15:A5:21:DD:7F:B3:F0:08:71:D5:27:42:54:95:B2:89:0F:B0:B8","sha256":"13:8F:3A:BD:7C:0D:48:F0:B0:87:BA:C6:0C:20:07:66:E9:0D:1D:A8:7A:C5:A0:C5:8B:A0:A4:15:B3:28:AB:8A"}}},"request":{"raw":"GET /static/home/ecology5.png HTTP/1.1\r\nHost: h5.nmetamasks.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.nmetamasks.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 26 Jul 2026 12:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jan 2024 06:51:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a0e17a-208a\"\r\nexpires: Tue, 25 Aug 2026 12:53:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8330,"size_decoded":8677,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3b9d21f4ae33d703779fc70db9ce63d7","sha1":"a8fc80eb488213c63cda2a97c104efc41001ebb2","sha256":"a5250e640140b9ab3fe02199e2e075c5f047c30273e0b199a7699d8dd60aef14","sha512":"6f8e48460543dcd5ca5fa4a687d0f11b02b174455ace283aac04738053dc2f590fc3052901ca4ba78025fd91e8645b04d497261a486ee6ed504d983eeeb9dfb7","ssdeep":"192:LpjULC4xu830hQvPb9ES7aQfdpYpF2+PWB1Mvv5sSvZBi6gs:LpYLCCu4+SREyfKrnD5gs","tlshash":"6e02b0efec6c41a7cf4e37f7509348b574eaa9cfac142680cba89b10b4078874e98147","first_seen":"2025-03-06T21:41:52.710726Z","last_seen":"2026-07-26T12:54:27.62307Z","times_seen":28,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"h5.nmetamasks.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"h5.nmetamasks.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}