{"report_id":"2ddb62d3-7c29-4e81-8a35-426ed8796e4a","version":6,"status":"done","tags":[],"date":"2026-05-27T00:09:24Z","url":{"schema":"http","addr":"eth-mk3.vip","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"104.21.35.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"title":"ETH Mining","dom":{"size":35794,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (34846)","md5":"c56a15c77db65a2f32fe8f9d46af964d","sha1":"4f0c9d38024a2d160e195303a2d15971e7802ade","sha256":"dc9358634324af9ea5c6c93dbba73657de0c632a04acc7d6ee42bca7f667fe06","sha512":"d40b7645c3dcfb80db500d5ba22e44868c763c65c771562cbed4bac371818feb8908a51bf2ed9ad580c96518a1d43cf565cedeabda9d328c342c986a40860062","ssdeep":"768:jpn/ovb4HLJLmVi53p6rlja8e8+jLdlj+gl5dljexTuhn/FdljuT3svI/:jpn/oD4H1yViJ8e8+ixYAYw","tlshash":"ecf2bd34241b2e764ebbe4c0e165bf3520daf34fc219e988a6ac51584ffbdb5b920171","dom_hash":"domhash90a18c69ec90cbd6bd7d0542d961ac8f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"eth-mk3.vip","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"104.21.35.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:09:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"eth-mk3.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-04-30T10:28:01.346069Z","last_seen":"2026-05-26T17:10:52.642793Z","alert_count":31,"request_count":31,"received_data":1758702,"sent_data":13637,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_top_ex-8b586dc5.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1207b48f9c5f2777876413639c21a63a","sha1":"f039a26fa4f574d83a94bc2702e61d62371bff7d","sha256":"78208da5f9be77bf295531d028f5a0a377dcf2ed1f46f3d00f3594138c10d23e","sha512":"df8486e68a0e410f109b129c3f0410f24ab2704fba79adf02e2a1dc907aba91702f62738fc43aea2f9ecbebb16b9d331f50bcc7987191e1653de2e7459634497","ssdeep":"","tlshash":"c1a002010915a4b0436c38c88b37ca74185381347515475592548605e521540566e824","size":59,"data":"","first_seen":"2026-02-11T14:37:50.03039Z","last_seen":"2026-05-27T00:09:27.847842Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c238b73aad1726f3484a4a5a34be18b1","sha1":"9a06bb8742f98b4d8e8016297f259688636d463f","sha256":"320394c06f50343a12a79c6446f4f409306b9f84ae0c74e96fe81619d32abcc8","sha512":"df691ea2dda3f6be9d278559e80a653c3c1c5bf0cbc811f18a5cac22fecb9ce38a83734e3cb6dbfef0cd55b72d12e617aa20a4af0e2f28e5dcb191e76d9bd62d","ssdeep":"","tlshash":"d8c08cd5b0d3ae105a26759050af34e89028442678886b82ccd8e8492e220b48277ee8","size":161,"data":"","first_seen":"2026-02-11T14:37:50.091644Z","last_seen":"2026-05-27T00:09:27.852266Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3469299f24d344d222b65009619c9dc5","sha1":"819e26f1fcaa99648e128c8815dd2c9e332c6165","sha256":"06f464413439b63af71f75201d8b5e602eec2626028794a6383b504b73fa0b09","sha512":"2921d9221424d04d501e99b5e36dc60cb545a15692e48b63bbe70812d388650b655f902d1e209eb1ef1f8d1c6d36c8bf8c17078a940f9183094a76824682e6a6","ssdeep":"","tlshash":"00c08cd5a0c62d102602689110bf34e4a0244026704c2b028cd4e88a2e230b08233e98","size":145,"data":"","first_seen":"2025-06-06T16:58:32.683059Z","last_seen":"2026-05-27T00:09:27.852763Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-24392ce5.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"148bb62578952aa19fcf7dc63b30ef45","sha1":"b12fed70b1db267fb4746dc705a1e287dae31eea","sha256":"e654c199376cddd6821c335418523e7e7f846098d3d01d97c39cf7bec911bd96","sha512":"7931524246f49b9e305b07ab376b80bb178275e0a8f143626f136f23bed1dbb456ff72a2c3928ab25ed2b2aeaad784e27f3e58d7052a39c08d515d3ccf10ac3d","ssdeep":"12288:azeUL0xOHOaZWtxGXa2eZKMkHHwKktKMyc4d9ZXn3I5uK1B984wmL:azeUL0x+O5txGXa2eZKMeQKkCc23I5BR","tlshash":"40f43ad53693f47547ba25e6407b0001f2391f19740e84e4f1bc9dab3e6a98992bbf38","size":772609,"data":"","first_seen":"2026-04-26T01:58:13.978566Z","last_seen":"2026-05-27T00:09:27.836335Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-07d6e181.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccecdb95f962d16e0adf02e9d459a2b9","sha1":"ffe0ad43fc548f462e11536e9a4d85f079e70556","sha256":"962d6dc9f78efcb16c68c132a842a3af9b14eca9df1b22e38bf6ab15b1179586","sha512":"97ab7b8417d16525d2f68943ce6622f94b47a5d9bf8275dcbdbe26829b50d1511e1773598ab6cd91daa687cd9a4f29317fd70448eb7068ed03f7b201716d307b","ssdeep":"","tlshash":"57f0231e6c8351f3472b049034721a94ab3c0f58063564f1b2644d2fb7238bc715fbb9","size":477,"data":"","first_seen":"2026-04-26T01:58:13.939159Z","last_seen":"2026-05-27T00:09:27.842146Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f10007f2371a0b5e0441b476377b959","sha1":"b8d3365dd0554b84bd9c28d233f1c0d6554d79e8","sha256":"5fcc6424818038cb977efbedac638cffaf1a6280506a2a79a1fa85f3bfffdf3f","sha512":"b6f68ebe712ed948804fc92d555518e1d636137582895e465419a2f699679fc79afb09fcab6e0140f3752e745538f72acc34adc8562eb5380d7e8041e5f447ff","ssdeep":"","tlshash":"40c08cc8a0c32d006612651164af24e89024402a74481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2024-12-26T23:29:40.173962Z","last_seen":"2026-07-18T21:05:42.818773Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4ac6d9fbc1462aa591c8b8019bc487eb","sha1":"c7feedad0bf6b607290a6d5a5da3c092ae6e3ba5","sha256":"e65b123715de0918a90d8b15c745da6f049f81e22bb938899aa5a858a874cb39","sha512":"e0ad11e3ac4e68392646331ec797bcbce5a03c676d93c0e379e589674b76301ea8c052a52815e2eebecad8d1f367ad298a8d463ca79381cc8695cfd448de851f","ssdeep":"","tlshash":"f3c012c6609739105645a41118af25e4702c4066f2986b029cb4e8492aa61f59133d98","size":174,"data":"","first_seen":"2026-02-11T14:37:50.105254Z","last_seen":"2026-05-27T00:09:27.854841Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e2df276651fab1c733b3a10d59d456a4","sha1":"69d8d898d0c64aa65d425c6e38516a2660dca050","sha256":"7c1a139b01fe270abb9a8a6882039e556dafed487c024d46a14e7e2319f2d7e0","sha512":"240ede9931455eae52aeae37d8d00ff601570825d246983737c5775824bb1b71667014edfd18d8a16430957ae3f8f1630aa538f3ce493d16a09a7aa0c32b1d13","ssdeep":"","tlshash":"80c08cc4a0c23d002602791010af24e490244026704c1b028c9cd8882e720b08233e98","size":140,"data":"","first_seen":"2023-08-02T11:51:56Z","last_seen":"2026-07-20T08:53:00.117075Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ccf8357c920afd1e13335483f5fc4b6d","sha1":"6487a2dbfa873c206f5cbea1be7e54ffabe6969b","sha256":"46f3a7643c587ba7812f1edefe32b3bbabb5e05328b1c4dfb753f32422d87dd9","sha512":"a05896b1c3953e1df85d169a8bc492fcb1c36daf035e11cfa6551dc845d2b6ab2309cd76183d95d95fc03b785a8390d57e8937b3d1d068fb4c74343472a130e5","ssdeep":"","tlshash":"3cc08cc5a0d36d011b52781022bf38e49025446a70489b038ca4e8492e230f49233edc","size":149,"data":"","first_seen":"2025-10-21T09:09:09.070708Z","last_seen":"2026-05-27T00:09:27.856055Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99ce6f08539e4a1252b7db14b0e90c62","sha1":"9b0863b6e1defda208df4a8ff86c86ae8e7f19e6","sha256":"1536858df7c2699f90640468084e795962e5c5ed64dbab644e8bf0563126f51c","sha512":"aaeadedfe925e172c390dedee1f91c2c8803b5384ad123b292dac4bde5aba29b1c5fcff044f2b81b35757118c95a037a8ba8dbab91eee7a61188a877e117c721","ssdeep":"","tlshash":"e1c08cc5a0c66e002602e49018bf39e4a034982770481b429cd4d8582e220f88233edc","size":146,"data":"","first_seen":"2026-02-11T14:37:50.098496Z","last_seen":"2026-05-27T00:09:27.856637Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2aade35d82869856f521cb1e19304120","sha1":"c064618430aba941971ea67f66bad56ac6a55a3b","sha256":"b2bedcde5da8c4387efe6f4c70d8cb5c226173815f1d682e9b8c4a752b9b2675","sha512":"9c740df5bdd26987079d584583a8800a2b9b929087e305f5119b8b463e13fe0a604e1b0f5bbe4ae9887dffa00f61b23987124929450f60d5449afecb1e8df7e0","ssdeep":"","tlshash":"6ac08cc5a0e33e105616a41020bf24e4e038847a748c2b438c94e9492e620f09237ea8","size":151,"data":"","first_seen":"2026-02-11T14:37:50.085048Z","last_seen":"2026-05-27T00:09:27.857233Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"871dc7082dc3a87608f3b2a5d7997c84","sha1":"07456d615d3e2d8c8f33c7a8dd9c877c65d89d6d","sha256":"f049ab25853361b7cc14ffa4b3b4e1e9c35e564b541e8f58307e5102de18eb42","sha512":"497ee9d5d76bc6105e61d2f0aedf4b84e2baebe06caaf1548c2aae718a7eaf1352065143077d7be527280b383e7c42f272f514852881bc75714fc8a0a78f5357","ssdeep":"","tlshash":"d3c08cc9e0cb2d106a066c141aff24e89025406ab54c5b029cd8ec482eab0b09333ee8","size":157,"data":"","first_seen":"2026-02-11T14:37:50.088941Z","last_seen":"2026-05-27T00:09:27.857712Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/NavBar-53dee0da.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1c9165e7d7ab617369e35e1f333044b9","sha1":"21259dac572773868fad86012c8feeaaecf69de3","sha256":"6f0a92a8776c9d270efdfe1a4efd2165483ead13f336e5adb38e8126141b3886","sha512":"f2e8f6aa5c246ea13e89dc93130b479bf117a26509b74ddc1342a8145913f612c64052205d503ef1861b8b0bdde13f83b4d336e5b69c41273d5bc6859884a298","ssdeep":"96:aN/X4TWoUAtL/02VfPZy/zywbcHeEFkq/ppcbNZj0nC6:aN/4TWB8zHhPwmwbye6kq/pS1t6","tlshash":"49a1642cfc19ea7de2779064648b2460611e3bdca528485573bf55323adbdb8b70eb30","size":4821,"data":"","first_seen":"2026-04-26T01:58:13.94147Z","last_seen":"2026-05-27T00:09:27.831536Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bef081f524ddb508c7a6a01c843e746e","sha1":"644824ced55dc625424020717891cb8be4ecf675","sha256":"c1c5881e29cb85c2d3bfd01f806caa106720c1781722c2c88d5004990db93a66","sha512":"383ff94781c7e71ecf31835a74049722ca8056327ef0cfb83780d9ab3661a6c82cfb0947f1ceca5828ba5d019100811b250d1374a0de774405259f4f6582e5f3","ssdeep":"","tlshash":"25c08cc4a0c22e205612a45010af24e890284066b0481f128e98dc882e228b48237e98","size":141,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-17T15:27:27.886959Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"12d4f3914cf3d32c30c0003a2fe2a271","sha1":"243ebfc1cb2a9dc132250aba6e5bd28e0962e43b","sha256":"c55ae4ba52fedb84ff8277c112750f3c325e14aa25b0f10a71a542b7e719f6af","sha512":"1f6624c58c01dc06435807f1583eea33d75a6f459951e8b5339a135ea73f016b82fbf8229ae601852d3677ecaee9ea4b1958daf82876131346b017a13bd0637a","ssdeep":"","tlshash":"44c08cc8a0c32d102616681018ff25e8a024402ab0481b428ce4d8482e630b09233e98","size":143,"data":"","first_seen":"2026-02-11T14:37:50.093448Z","last_seen":"2026-05-27T00:09:27.860584Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad571cf38abeb4d8ce13e81ad1afedba","sha1":"bac9b64cde5def213697a68b9c906517bbda3a96","sha256":"bf9054e06434bf6ee37218255a2d780159dbcac22b3a883e9d852a316e2d2c55","sha512":"7be499db0ea493135888d08a3e88175acf5965a38202ca8344578b59a124957e8afa9ac4ce7ca4820ada74c02592c63aeca9366c0678c797fb9023c1e7f2c5f8","ssdeep":"","tlshash":"2ae0268d75935e401b1037a431db3af6a118012ba2045746ccb4d91d5dbb3b2a03bf89","size":329,"data":"","first_seen":"2026-02-11T14:37:50.096647Z","last_seen":"2026-05-27T00:09:27.861229Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"206fec6413ca72c5cb30ca4f801f13d6","sha1":"53c9f5f6b3968aa6c34ed9c0a3f6b2e603452393","sha256":"0e5330a7ecb2f888b6c077ea72e7be0090e792d20712066b2bced55130876f51","sha512":"c2c058f159ee6e6eec140aa74d7f90dfa0b1da78f57212194e4ec190ad211d24075c33d0ab690e557621bd960072af2c196b23a06c0e982fda5d5b4d80bbc0ea","ssdeep":"","tlshash":"81c08cc8b1c32d102a22755054af24e49028402774881b428cd8ec492e224f08233ea8","size":146,"data":"","first_seen":"2025-04-27T11:55:12.962447Z","last_seen":"2026-05-27T00:09:27.861806Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c5a37aa3d10246e51513258630aef21c","sha1":"b2a0e024bf65871f47b66176a005a03ab35344f8","sha256":"e7234259076eb9716562a106d4ba488c48f9b822ac48769ed0c155c82705ffab","sha512":"8aa61f63ce1f444061e84300c9aa4fda86d2145943bac1e9edd2252cbeeacbb2d9326b253d7c54aab2d7d226c2805d058480178415c97abe2f8ddf20f6601ec4","ssdeep":"","tlshash":"91c08cc8a0c23d002a02651110bf24e4a0244026b04c1b62ace4dc482e234b0c233e9c","size":145,"data":"","first_seen":"2026-02-11T14:37:50.080098Z","last_seen":"2026-05-27T00:09:27.862333Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"76588463b4a1b8f66537a642e064a352","sha1":"fd544241c344e19bd4f24b7584ef771378e4459d","sha256":"fa86cebee01d22e3c7bf2e901791ab8e8fd0f4e06a971801043ab31686253267","sha512":"6a75dbfa2108004896051b7aa3cb481c682b2b86ed3b522c99fea9c653765678a778f6d599887aba75fbb4476a8b889a0df4f7651c0ca1359d00c5d714d82a68","ssdeep":"","tlshash":"28c08cc4e0c26d001752641424ef34f4a026442ab0882b028c94e8892e620b08233edc","size":145,"data":"","first_seen":"2025-10-21T09:09:09.044383Z","last_seen":"2026-05-27T00:09:27.862853Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4fee3b2564cd277adfecde05ad697ae0","sha1":"650e7b5c439ddfde4ee3dbb70256d3ad40321b28","sha256":"e161dc564235d3674b7c10a2490b8754c006b48e382981d17599c5b8610d8ad9","sha512":"86687563632ba08344472340581d8ccfcf998de12197ac3b4405edc17c55a48bf14603d57da80a2ec127d9238eb4a5761a324ffa853e3ed79ae0beed4233f5ba","ssdeep":"","tlshash":"8fc080d560c63d205911955511ff34d450384027744c17029dd4dc493d131f49133ddc","size":157,"data":"","first_seen":"2026-02-11T14:37:50.087015Z","last_seen":"2026-05-27T00:09:27.863422Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-07-22T09:37:18.768775Z","times_seen":891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T06:19:51.156139Z","times_seen":6895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-d4e9773b.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd7eb63b9f6da0898df9403e57e31f86","sha1":"5417411622f26e6e9e0c7d4a4aac061f914c6fc1","sha256":"60e51af5bcec9800d63c21a7e9036b46d70eba514d8e97d6e97207113fb1bff5","sha512":"f01ca53a993ea7ba997d1f46ec5eeb0c8b1443fafa1127a6d15316eef842e83890d8be72f582901bd95b3d16f2d825ee696d632f690db1e6e2f4b91fc835fd96","ssdeep":"192:4d13o3o3J3o3o3ed6wrdeLEDJG2KPcbLXRL5bsz:SC8QduEDM8Vy","tlshash":"f5226414f90790ff92b719d1a036ae647199ab84e16ca5c9b2fc400d2f61ca9f31bb74","size":10054,"data":"","first_seen":"2026-04-26T01:58:13.914267Z","last_seen":"2026-05-27T00:09:27.839139Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-22T04:48:45.470054Z","times_seen":1688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-07-17T15:54:20.142309Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"347f96c4617aaa747ffbdec34b815747","sha1":"1a343df301b848d1f6491435ebd2250ce778ecf7","sha256":"e2a5f25690e3471c6752f4ec7b92fe2b8ccc105e792a308c824d07cbb2007dc4","sha512":"cad4ac470dec3e372fe810b417c2355790b3a117b4415d6737175fc97be92a2d8d6824819d31cfc13211cc6c84876257ba0f3527c61bb170802319031b434fc3","ssdeep":"","tlshash":"54c08cc4a0c32d101602741011af34e49024402770481b068c98d8492f220b09233e98","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-16T13:48:05.5589Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94bd8eaa6d37fa413aa2a3b38495c3c1","sha1":"7a745e251f27abc65895b214cfab75a18ec73c9e","sha256":"d371aaa503312e3e2e6292f61b56857d8e4fbff8b8051e112e89213d3a18ee52","sha512":"a6b33b57a9b251f0c4a3f59b326c0dbb11dd8723662d6e8b6777b2f551a78bc2cdb8d34f458b75894657a776a84ab6b14dbf336f7f67000b62546a0a05101e31","ssdeep":"","tlshash":"2bd097cde2eb2e010b51b201a2af78f47018c012322dc7438ed4888c3b370b092339e8","size":244,"data":"","first_seen":"2026-02-11T14:37:50.102447Z","last_seen":"2026-05-27T00:09:27.867133Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"af315e3f4b1b621a5ea7b0367e381fa8","sha1":"8387695f307403f8ef4a211e8b936131f0e7c985","sha256":"f54a3fa38199f2c0a125d572ccbe3f8588d9f6b7487b4b243753ebbe0947f907","sha512":"bf1e445aadbbe6f97514320287c773d8a0fe5b219d777f078163680387114cfbfec1d5c19ea68eaff96ed1724f41059d95ff1e81f4b6827f698a279e36706595","ssdeep":"","tlshash":"90e0228796722b427e63914428ee34b4709d3003d0ce1212da36ac8649321f662bad43","size":389,"data":"","first_seen":"2026-02-11T14:37:50.07225Z","last_seen":"2026-05-27T00:09:27.867622Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"51bc193ac88c24641bf09f75c8cbc30e","sha1":"0a443b998ea825485befa3e2b294222ce9045b83","sha256":"40d07aeaf4c6ad3f645f51662f86504ad0ecc334ab51e86f821557549d08cf9b","sha512":"9b53b27adf0faffaaf7c11965d9ea5adc5f554bfffdeabb9a0645ab42a8d845eb3d7728585db3b1b92dcde32f716a649894a3b91f79c9e2fa7a4c34fed8f5e40","ssdeep":"","tlshash":"fdc08cc4a0d73e20260aa92254af28e49034802778dc1b428ea4d8492e230b48233eec","size":154,"data":"","first_seen":"2025-06-06T16:58:32.675261Z","last_seen":"2026-05-27T00:09:27.868112Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cc3b05ae4d2b5ecced4fa4cf6e3921f2","sha1":"1017778e8aa0dce0d82bdd0251e5d7016869fc19","sha256":"bfc0a33bfb0cf4eb9367c2316d5084289e070fb6d0fb0d8d0be7c5db604581fd","sha512":"75da9199afa79650df8d39c12c0b08f9216e33e404b457b1b7893ffe936410be8f75a4b0cd9281a110050f98d79ade67fbd3e9527c5b9ea64c86afdc64a11aba","ssdeep":"","tlshash":"fec08cc4f0c22d005a02682060af24e49024802674481b029d94d8482e220b58233e98","size":143,"data":"","first_seen":"2026-02-11T14:37:50.10676Z","last_seen":"2026-06-22T13:58:27.66741Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec22711836a5950de7b4aa4e0b1916a5","sha1":"e50192b569d6c584480455760748c6071f248a70","sha256":"ef7dcef6d6f9a44b26df1479b432e4dd6abccb1c62d6f6a04d9eb7fb344b928c","sha512":"68f09fbf881370af388ce2cd4f1bf289925d9e0f930cb287190559bae5b313b6ae0d442c999f48dcbc3756ac00f888ef2b26b2bb4e4a4401d7eed691636ae378","ssdeep":"","tlshash":"89c08cc4a0c63d006602a49021af34e4a024402670481b028cd4ec482e630b09237ee8","size":145,"data":"","first_seen":"2025-05-27T14:24:25.136133Z","last_seen":"2026-06-13T03:38:45.261444Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"573ea7071ae155297b4f30dce34bf992","sha1":"9c5ab4cf83442f1d88d17672533d0e53ae7d8277","sha256":"e0723eabd94b2d8dd5fb30a800b3b94f2dc6a5aaf7e0e0166449b3fdf0aefb36","sha512":"7a2427cf103db4ec0ac9a4d412dc1ae280e6212b9f0a96063cb5de879106216596ad331b1648066c1fd71a114f8c8a96f696202bcff5a59363927bfff9905ede","ssdeep":"","tlshash":"adc08cc4b0c22d002602681028af34e49024402670481b028cd4d8582e630b48233e98","size":139,"data":"","first_seen":"2023-12-24T00:38:06Z","last_seen":"2026-07-19T16:49:11.302197Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/#/home","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-07-21T23:27:49.85607Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eth-mk3.vip/","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:09:02.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:09:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UU1GcYKitN6gISDUhBWT9OErzktEWLfVv9MgzxWhNELGx62PeyPpmbjDtOKDyqBoT33x16Jk2Nw%2BmOZrwwAKZPkYv7brST5RAnAmxKFOTJpsuL9YOHJw3%2FY8MplDHA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a020c9deda68b4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":477,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8bca333f36ebc347f6e290dd9d286c6b","sha1":"3caba12a8f57605fbf25e2584de16a80b52f85e6","sha256":"fac198620c6195a6f39d59cf6c2e798e33407c15f05415eb05eefb8ae7f8cfb0","sha512":"76cf36c0cd9b302f07572bd550c24b6e005884579786de8f3efeab6a60bbb77d4eb5deafb8b53b69b42cd61630079922035182e9429c99073e29c9b49181e94a","ssdeep":"","tlshash":"c5f0208648d0581e03309a18bcd0f098eda3eaa78f1a5e5075e5606f5fb2a48cddb828","first_seen":"2026-04-26T01:58:13.945699Z","last_seen":"2026-05-27T00:09:27.82933Z","times_seen":7,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":33,"dns":17,"connect":1,"send":0,"wait":621,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-89ea05d1.css","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:03.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-89ea05d1.css HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-3129b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWL66PjyjwYdb7iuZuQl2chAvwQhgy9I5Y00CkqPMFzVdCmQi74UPi8YNKqD%2Bzeh6wXqfu4OSSqbH6PMBRG130eul23qsRVFZ8unqoMwvV83iRpR%2BX%2BaPjI2Sna9cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9e3be752678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201371,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"a21f9df71e650dd11aebe8dae44eb0b4","sha1":"5e613c99390135425a255f59ec3dbb81be9f9da7","sha256":"89ea05d137d23113c2395e93eeb5fc308c578dcffc2499a202d2e238cc6bbc11","sha512":"190461e4e2ae5dd829a85911d15c5bdb58b5d58d99955feef3c8513c0e84bca3da906da9c7af440fe48cd619d49ff3bcb2c542c003919391a854c9d7cb8fb690","ssdeep":"1536:uc1IyNBi3MFYaQj7FCwsBlDOFIxuVoxJPUiCNa1Al5a4zinVTVax5:ucvNIClDsIxuVSFqKy5","tlshash":"9614a4a5a69091bcbf27f275ab8b56dcf23cf570ed01daa4f10051580ec7bf50623a1a","first_seen":"2026-02-11T14:37:50.03623Z","last_seen":"2026-05-27T00:09:27.830468Z","times_seen":9,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/NavBar-53dee0da.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:05.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/NavBar-53dee0da.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eth-mk3.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-12d5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylFCe3Nl3vp%2FDV7yoxEhrXYgwhigwjMzc5gXkRScAIKBVc2sSgBHFdGo6BNYvjdUg38bnWegGIfqK9hMTytClEdOdb3OS%2FVPaqeftOpD%2FwfWsk19T0jzGQ7HX2qDCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f45f1c2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4821,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4790)","md5":"1c9165e7d7ab617369e35e1f333044b9","sha1":"21259dac572773868fad86012c8feeaaecf69de3","sha256":"6f0a92a8776c9d270efdfe1a4efd2165483ead13f336e5adb38e8126141b3886","sha512":"f2e8f6aa5c246ea13e89dc93130b479bf117a26509b74ddc1342a8145913f612c64052205d503ef1861b8b0bdde13f83b4d336e5b69c41273d5bc6859884a298","ssdeep":"96:aN/X4TWoUAtL/02VfPZy/zywbcHeEFkq/ppcbNZj0nC6:aN/4TWB8zHhPwmwbye6kq/pS1t6","tlshash":"49a1642cfc19ea7de2779064648b2460611e3bdca528485573bf55323adbdb8b70eb30","first_seen":"2026-04-26T01:58:13.94147Z","last_seen":"2026-05-27T00:09:27.831536Z","times_seen":7,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_top_ex-82310252.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_top_ex-82310252.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-313c4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUp9GPDzJ09gv%2BkimLSQ8c2muE0G9EvGxzQEvYS5qvj5QvPl4Pc6IpR%2FZX%2Bta7PLhABmoCEwY%2FUqEvw7woA9C%2F2RSy6s1gFe9JuD1RTNCe1rzJF82szWQwh5YhQU9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa894b2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1120, 8-bit/color RGBA, non-interlaced","md5":"4a38b18ee00a5eb8dac6efe45acf9147","sha1":"46f6e2b25fb51eaa98fe80b71def6bf0d1d34cec","sha256":"823102522666f451f62f1743ffcf43705907434967a96f7d1e4bf22c01fdf045","sha512":"7569c4080fe57df174d196398026c2097b99e2c688e51922251eb39952237cf07a984d81ace9e4794747e2708cbea52e581e322a69f249bd1834e964f5e2b528","ssdeep":"6144:NHFV8xHYIl/yFquerLe58KE3T/Bb0TPyeGZK6m:Nn8xvdyFquerLe5c1b2PyFZK6m","tlshash":"1414e0a2cd21a82f62972b7c6313729898721c57347e2e9b5f242c264d5bdc4f0f1da7","first_seen":"2025-06-23T10:32:24.985947Z","last_seen":"2026-05-27T00:09:27.832261Z","times_seen":35,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner4-a12d9f14.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner4-a12d9f14.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-40fc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkdMvOgFv0JWaiMFeWFzk2GLNnbP%2BSyr3jc9FKkEz7pU24mPdnm3hD%2FifNMWx3BOO92yl9xSwfDlhoMoLnSNUZTamjKS4nLNykLz6ndQAktCIb4Xeb%2BKz40sYzR6Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa95a2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"93483f09f8f567da99d2d4991be97cd5","sha1":"3b96b5149e9bf6a6129d3264e1955db3dac4488d","sha256":"a12d9f148c2f3e9af2fa2253fe0d4913f70604d95eaed76ebddcb80a66118a34","sha512":"dc805454f3a665d91ee9a3131db190e0ddaa0bda97b57c6b781a7b1dc0f21992c8de244e8eac409f83136dd81e273b30647449a68212412880622695b21d0ef2","ssdeep":"384:6oOpbRaTOL3DZmg6o8vSPEDPmNOrwsvmRo:6dpbN3EU8v2WPmNOrwsvKo","tlshash":"d672b055e1b98c08fcb5d86c29169e66f0b87813231d7c6ede5c859f70ca04b94bb21f","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.893179Z","times_seen":68,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-24392ce5.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:03.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-24392ce5.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-bca01\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNFW%2BJezjLGixHOVi2j4aX5eh0P431xJQljB9qKLuNvSTO7iN%2BK6VY4Bdj1ZugF1uAyfzFsYliCSWQsxRMgM8KioLRaUOKZPlAPkS5y1BmsOkEYhsHGFauXkP9aYcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9e3be742678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772609,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44916)","md5":"148bb62578952aa19fcf7dc63b30ef45","sha1":"b12fed70b1db267fb4746dc705a1e287dae31eea","sha256":"e654c199376cddd6821c335418523e7e7f846098d3d01d97c39cf7bec911bd96","sha512":"7931524246f49b9e305b07ab376b80bb178275e0a8f143626f136f23bed1dbb456ff72a2c3928ab25ed2b2aeaad784e27f3e58d7052a39c08d515d3ccf10ac3d","ssdeep":"12288:azeUL0xOHOaZWtxGXa2eZKMkHHwKktKMyc4d9ZXn3I5uK1B984wmL:azeUL0x+O5txGXa2eZKMeQKkCc23I5BR","tlshash":"40f43ad53693f47547ba25e6407b0001f2391f19740e84e4f1bc9dab3e6a98992bbf38","first_seen":"2026-04-26T01:58:13.978566Z","last_seen":"2026-05-27T00:09:27.836335Z","times_seen":7,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-6ac814cc.css","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:04.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-6ac814cc.css HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBK%2FkAZy9%2BzDgpPFrZmcIu4SRsxixGjFlZFsDbeYr6aH0DMPFxnrq6UrFMt9zChQuc55K0wsDKHcWxmNG7t4PHenIDX1lBl8b%2FIVfGI76mfNAZUIXooLE6hU1VuN7A%3D%3D\"}]}\r\netag: W/\"69ba8eea-dd\"\r\ncontent-encoding: br\r\ncf-ray: a020c9e859cc2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9eae06ed59758775cd8672b46c4ab4d7","sha1":"4df3979769eaa9f4a8037efca79f061894ddbd4c","sha256":"6ac814cced04d8da291502f396ebafd8bdff356ac2ffaf0782562a9136d2da20","sha512":"b92bf42d155db0497a927d7abee01db8ed92fa3a5fe6cffdd29ae7aa74a9d269d77009c593d379473662c741ab21f2157371d36f9b2b178de299c76d3ed2d81f","ssdeep":"","tlshash":"a8d0a7a41246b2117477c24674c2aece13be5396ef2291bc4928bc41e9c778d24114a0","first_seen":"2026-02-11T14:37:50.028407Z","last_seen":"2026-05-27T00:09:27.83722Z","times_seen":9,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/NavBar-d8b433a6.css","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:05.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/NavBar-d8b433a6.css HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-88c6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DT2kaYq6ApFNgWAH2pBcepnDheogTnmxQ09l4E%2B%2FkXtcfaHzzSVmCxUXYMS86yhAzFRkhHKzHzC4w80ou%2F1yFYNODhoT7nTwTfi3l%2F1JdhdGDzk%2Fq5lnu1Wo5I6wKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f44f152678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35014,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35011)","md5":"51bc764b599d0077b5b10f24b0e9c461","sha1":"6bb1a2ebf2932d4dc7ef7e90a6a8e466f21f1707","sha256":"9ad6e2269fd5c0ee116df7e71d8e9b56cb8554fdb96623503de1f0f982d71a5a","sha512":"10287cf04430dd59ec1419bbea86925ebb4c1737c4677da8ee53391e7116c3c226c8a21846e6acfc3a17f1b9077f4b7fdc29be5d7e20ac207bb15c48ce9db76f","ssdeep":"192:omYzXCo/bYmuha2KWc/wKG1rgr6EcNY0EN1fascFC49/vu3bJS10gxD7h9/fPiGO:p0chhXpHY0o1fascMUxx/hdy","tlshash":"cef24b00d1c6d46fb81f293374662b99711bdfd6e300cb7f5a3baba4b0655882533ab1","first_seen":"2026-04-26T01:58:13.919832Z","last_seen":"2026-05-27T00:09:27.837768Z","times_seen":7,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-4a30f69d.css","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:05.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-4a30f69d.css HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-14f9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9ziqOKo259gdkFeRUmRVW93h%2FtPefC1bs49SirLooEJQcK4VKhoHBdPLEvTNjKa65wqCBeUv6JvyZtqICh7ToBAGY9fS%2B%2BAjHGpA%2FNofjql3k%2Fbcc1oRNbY23px6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f44f162678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5368)","md5":"467da54f35fda5545e244338e78af663","sha1":"7083057341acb32abde706eb1dee0ef6a80898db","sha256":"4a30f69d84e16c9049968f9f85b890f5be0e7865c22ee7dc8841b4e6979bf91a","sha512":"a4cffefd81a84158e9ce7c80ce9e91f9300ca684770e37148f5f7b15917a98ca2535c9e2973f04c1ed419d85252ae0714faf4ba75f7c3dd3b6c603a033fa0a00","ssdeep":"48:jNvdSmJE5l9nAT+kbNTTmMSAySP5U5ZHX+fU+PcZkcAY3R5KyijD5+fqj9UoHQ6z:jNVOaT+ONTSNZ3+di4Y3vKyU4Yki1HH","tlshash":"8bb13d50210c3b28fcfbd4d1e4d07faa6094eb0bd22279d9f54124599be72873a332a8","first_seen":"2026-04-26T01:58:13.923615Z","last_seen":"2026-05-27T00:09:27.838433Z","times_seen":7,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-d4e9773b.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:05.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-d4e9773b.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eth-mk3.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-2746\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xa%2Bn3HwuUSjL2Qa9OtH99NNe%2F%2FiI8nCrWcXEB8vpyCzeqKYMV4eQV8s1FjJzShN8XGpliVtKw2cbsCyY0%2FRFN9LprhYiKeAWQ%2B%2BNGhaCbX3DHK4f%2BJFKZnIP488nbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f44f192678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9765)","md5":"fd7eb63b9f6da0898df9403e57e31f86","sha1":"5417411622f26e6e9e0c7d4a4aac061f914c6fc1","sha256":"60e51af5bcec9800d63c21a7e9036b46d70eba514d8e97d6e97207113fb1bff5","sha512":"f01ca53a993ea7ba997d1f46ec5eeb0c8b1443fafa1127a6d15316eef842e83890d8be72f582901bd95b3d16f2d825ee696d632f690db1e6e2f4b91fc835fd96","ssdeep":"192:4d13o3o3J3o3o3ed6wrdeLEDJG2KPcbLXRL5bsz:SC8QduEDM8Vy","tlshash":"f5226414f90790ff92b719d1a036ae647199ab84e16ca5c9b2fc400d2f61ca9f31bb74","first_seen":"2026-04-26T01:58:13.914267Z","last_seen":"2026-05-27T00:09:27.839139Z","times_seen":7,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner5-dae2aaef.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner5-dae2aaef.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-5bc3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uk1YocN9qXk2QBsygwq5MXhDgCwYUHdwkieiZp6Uxym9tqQ0CFH0bGnrPajjWbmzyrHiethyMEBbphATPXqvJz59f4eYKiR3kFlhCU7VTrrxANHlLDsxOu527GVBoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa95b2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"f6b7dded44c832fc2a49d59cda4558ad","sha1":"273d2633f46015d0c0f4331817c0e5ff0d6ca16d","sha256":"dae2aaef9bac524ad166ac01153d083f3db155aeb238329f1167ceafff37fa25","sha512":"f96e04875935e2dfd1bb50fc86f0516d693a544e909724bcfbe8e1436c864f018ff4764baa569454fd352ba2ed95efb27c707ce939c4d3858697d924848f3ffe","ssdeep":"384:+zQt9LH5YoFVzObIs+27JAKDP7XMjkT2WQJ1HQi6HGRnCtLPcsBPWdKhb9CQyq7y:+29zOoFxOUKZj7B2P1H2mRnacsBP3d0r","tlshash":"58b2d1d587ce258770adc4eb3dbdcb54aee20ab0299287d51e11093df4e10890ed1bb9","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.888648Z","times_seen":71,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner7-b39ab560.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner7-b39ab560.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-2efc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxp7%2FY%2BcI1J1bRhN8tTP1Lozs%2BNm6XCwBZEAceRuwmjl%2FZkmC25c8%2FXQeVRVoGMdk%2Bj%2FQI%2Fs5xaAatroHuIaroratiKPnMZHI9h%2FvYS1pGUgs%2Bf88ycxTufR9Dcq2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa95d2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"b40be6cae63706be03cc49b57c1ba9dd","sha1":"3eb8dabf80fc820ddc04938fc98429043e8a3985","sha256":"b39ab56098dfc97d339ec8ebf58d6d38a926fde9cd2eb5978a9940b902bf73c9","sha512":"76174707c9858a6dad29405389b2dc04ef144940f1fd09161a73daa60635308da75bdc46db4d12a29d9a5f2cb9263f2ff87d86ce59a073e94841d8531e29266b","ssdeep":"192:SzyI20MBpSpTNTk5PQ+2m/F3M5YBPDf+hw9jNZO9g4034u2dbnxOKecsHJn9wE4t:YySMsq4+2icmhDmh4bORfLgdHHwzEEyc","tlshash":"9a42cfe038f4885d7e0d3866b7f42201aac64810d82b05b27575a671a378e3f72b319c","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.882351Z","times_seen":68,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner8-ba0aeb9d.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner8-ba0aeb9d.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-2972\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hgMWxDFRaZJ6yGC3T5WY7I9icUkqMejHAOX%2F11By9ANY9cz4hn%2FMWrnK3TaikMKndAW%2FPbtY4aYMzxwyk4iJlQg49QRVBg5sCHHTpw0xZL6JeqVZ2aTiMA3a1LLt4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa9602678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"f374cda8d52f3a15f4f07c1ef359616b","sha1":"c3003a2898958ac1c735b37c0dab131a662ef107","sha256":"ba0aeb9d905912c861c2b9e93c42f3ec01d216b71038d64e6dbf49166e2483b2","sha512":"6a0bc32bdb8ec0b530684d7630b709d4dfc8063c85d0f4a0774b6d8c845786b2793fb27b5360836638aa29db1f3b635f0510bfd3f2bfcdbe6f8198468a250d65","ssdeep":"192:tjwsrFCCNpUF6an7QwqcCbKsUoOo13J9fG8VCctX4uqs5waDK71euZG/u9i:NwslpUbrCbKsUG13J9O8QyRqsGx1DG2Y","tlshash":"cf22bfa34f80217bf663efa0189fc01279d7f9085f96d25018927f48820c263e5f62ee","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.902413Z","times_seen":67,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-07d6e181.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:04.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-07d6e181.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eth-mk3.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0db38CfyVCrsCTgh%2B5oEjZ7KrCPM3KONpmL2G6%2BYoTs%2B0Iyxemom2hnNxkwtqyIvOHHmEy1r7yVCEZSaUhMxPKS2gzvZFh2eCgeGrLyysgQrgYALh28GWm4M3L71Zw%3D%3D\"}]}\r\netag: W/\"69ba8eea-1dd\"\r\ncontent-encoding: br\r\ncf-ray: a020c9e859cd2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (476)","md5":"ccecdb95f962d16e0adf02e9d459a2b9","sha1":"ffe0ad43fc548f462e11536e9a4d85f079e70556","sha256":"962d6dc9f78efcb16c68c132a842a3af9b14eca9df1b22e38bf6ab15b1179586","sha512":"97ab7b8417d16525d2f68943ce6622f94b47a5d9bf8275dcbdbe26829b50d1511e1773598ab6cd91daa687cd9a4f29317fd70448eb7068ed03f7b201716d307b","ssdeep":"","tlshash":"57f0231e6c8351f3472b049034721a94ab3c0f58063564f1b2644d2fb7238bc715fbb9","first_seen":"2026-04-26T01:58:13.939159Z","last_seen":"2026-05-27T00:09:27.842146Z","times_seen":7,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner6-385ea8aa.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner6-385ea8aa.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-4ea3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwoM9I0cRxBpQPI0mGHJKz9jplKSO%2FsHTBlsbhLhXwzs9IST8Uo3apoCl9fGJrNPu%2BfbqYaN0H9C8%2BFvKAncF3nCgLiE%2BUuApLDXdtHL5jchrk43mjCZMPou1ByArA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa95c2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"5443829a1601fd48ae42d3c18741ff80","sha1":"0457079cfaeaa90b046539e86476fd7e6c510cc3","sha256":"385ea8aaf257338489734364b73760a65818d9a08b21dd893b2f50dcd29be2af","sha512":"50ec1efe55c3ea9b8d3f8e77482744fbd74ee317918e452a7339a30713c575b56a6a58aeb2436f51f3777046a36b358046c006e627064cbf98ebda13b169a376","ssdeep":"384:VDDf6v9uuLQZeo4dfHVt5EoI+E9QNO7fy/6K1ceMNcixVhIcA:VDC9uuM54d7Gf+EyCk6Kye7ixO","tlshash":"6c92d0f1ead529124ec8b92c9f49f28a1055f3cc425da89069fbe7255e5b0c187a81ce","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.881607Z","times_seen":71,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/api/index/webSetting","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:07.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /api/index/webSetting HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-us\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVzA9HSXnCO86kNzfd1bF9UmB4TO4unL5XFoS%2FY9FyDYSJsXMnY5cIoEYyQhZevhjc2fKw%2B6gWj8vqyRt3ppgNf3rkVoLRn8LAp0WrH58%2BOA0bLxOjasgqu9X4Jd0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fab96a2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b06ddfcc63b0b2dd45188828864d0ff","sha1":"d0075b0b1c75ef762885f977bd5429d4806073dc","sha256":"e6e64d8cc81822a63f41930d8251ee4692f5fca96e6e4b616bd0835b6e0ae07c","sha512":"91d5e2877f364288c6eefcfe8886583c63b98cfb3aab0b0a3725c1ff18ced6778aa6c9e304eb29627623698f135ed086a9a7e4ee567db6c25e2b66f1a3698fc1","ssdeep":"","tlshash":"5bd02b0aa8be5d55df16c84686e7319b41aa619b04d15e788affc9e990c974c4110452","first_seen":"2026-05-27T00:09:27.843906Z","last_seen":"2026-05-27T00:09:27.843906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/favicon.ico","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:04.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 27 May 2026 00:09:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FFUAlPgrlivD4c48mH9ILNf48V%2FgcR%2FKrZY%2FDf0vZdnCqJx9nU8%2Bswb6gBIWeHKbLVMRsaFkMyHggH5blW32xzGNHNa4SI4oHoZ6k0%2Bm6M8y7kN9dCt6WB89LNVsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a020c9e99a2d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-23T09:24:41.678657Z","times_seen":315784,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-07d6e181.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:04.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-07d6e181.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/assets/index-24392ce5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIexoW6SGooKl5537dG5ufG0Dovmm71K%2BegvPzXQXQwoIN8jHE9h9%2FsQ%2FgjnT2NDX6N5BcFEEdR6Rw751MR50b6k9dWviW7re1OEwKBa7yeDa1B4aR0wwNUW0HOjyA%3D%3D\"}]}\r\netag: W/\"69ba8eea-1dd\"\r\ncontent-encoding: br\r\ncf-ray: a020c9ebeb1b2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (476)","md5":"ccecdb95f962d16e0adf02e9d459a2b9","sha1":"ffe0ad43fc548f462e11536e9a4d85f079e70556","sha256":"962d6dc9f78efcb16c68c132a842a3af9b14eca9df1b22e38bf6ab15b1179586","sha512":"97ab7b8417d16525d2f68943ce6622f94b47a5d9bf8275dcbdbe26829b50d1511e1773598ab6cd91daa687cd9a4f29317fd70448eb7068ed03f7b201716d307b","ssdeep":"","tlshash":"57f0231e6c8351f3472b049034721a94ab3c0f58063564f1b2644d2fb7238bc715fbb9","first_seen":"2026-04-26T01:58:13.939159Z","last_seen":"2026-05-27T00:09:27.842146Z","times_seen":7,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/index-d4e9773b.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/index-d4e9773b.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/assets/index-24392ce5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-2746\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qzL095L1U6oYOrhOPyamsL0WjgmJFom7xZ4ZXxFF5BON2Y1mtCOSg0w5J7GsxS9TlKj2msPtepIkK3zeFQGdW8Nt0itqffGVXRk%2Ft%2Fse4HmrJ9ur8yyJ6L1pTpa2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f808662678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9765)","md5":"fd7eb63b9f6da0898df9403e57e31f86","sha1":"5417411622f26e6e9e0c7d4a4aac061f914c6fc1","sha256":"60e51af5bcec9800d63c21a7e9036b46d70eba514d8e97d6e97207113fb1bff5","sha512":"f01ca53a993ea7ba997d1f46ec5eeb0c8b1443fafa1127a6d15316eef842e83890d8be72f582901bd95b3d16f2d825ee696d632f690db1e6e2f4b91fc835fd96","ssdeep":"192:4d13o3o3J3o3o3ed6wrdeLEDJG2KPcbLXRL5bsz:SC8QduEDM8Vy","tlshash":"f5226414f90790ff92b719d1a036ae647199ab84e16ca5c9b2fc400d2f61ca9f31bb74","first_seen":"2026-04-26T01:58:13.914267Z","last_seen":"2026-05-27T00:09:27.839139Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/NavBar-53dee0da.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/NavBar-53dee0da.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/assets/index-d4e9773b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-12d5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EO%2FHmhJicrDVlEDlS%2FSe6LphLSTkwflaQEBe1Rt7itx3cXr3K1Q0ikUWm87cRwzvmLu%2Fb0ykW%2FKyNqWL%2BDz4hcqIyIrpZnVOPTbDqwQFEe%2Fu8gS%2FxMIHGsAGj9ruuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9f8286c2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4821,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4790)","md5":"1c9165e7d7ab617369e35e1f333044b9","sha1":"21259dac572773868fad86012c8feeaaecf69de3","sha256":"6f0a92a8776c9d270efdfe1a4efd2165483ead13f336e5adb38e8126141b3886","sha512":"f2e8f6aa5c246ea13e89dc93130b479bf117a26509b74ddc1342a8145913f612c64052205d503ef1861b8b0bdde13f83b4d336e5b69c41273d5bc6859884a298","ssdeep":"96:aN/X4TWoUAtL/02VfPZy/zywbcHeEFkq/ppcbNZj0nC6:aN/4TWB8zHhPwmwbye6kq/pS1t6","tlshash":"49a1642cfc19ea7de2779064648b2460611e3bdca528485573bf55323adbdb8b70eb30","first_seen":"2026-04-26T01:58:13.94147Z","last_seen":"2026-05-27T00:09:27.831536Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_link-5e555340.svg","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_link-5e555340.svg HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-9e5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMWJzsKzfGtm2zEHmiYDYk2GkOXl%2F4e%2BWC3jFzjphGfZakWXx2YgZfd0vK%2BQtczqa%2BNq5Y0McSi1QqhCzXhOVXwU0yDIitvre56QfZAuwAxMRhxlin4CgeM6gB5kQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa79462678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51cbbfdbe10000dde095e11763986476","sha1":"30f85fe7baaea5b139901d4f4e36964a173fad8a","sha256":"5e5553407e5f19ecd7144f69615708906df6c0faa1f173c5305496c06a15ba68","sha512":"2a9a5fc06d695453b4c1157628845d8e3a7e66ec54f5551150aea4ffeb2f31e1b4cb5464cb0a01e79bc071744786b201c5e5dbff9ecd45ebc1069cb8c66e5fb0","ssdeep":"","tlshash":"83517488a3d000d0c2588377f3e468a6a97570db6ac79706fdad1e9a8f33986015fc93","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-05-27T00:09:27.845557Z","times_seen":42,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_eth-9f549873.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_eth-9f549873.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-141a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9RQqHLfYlg5KkaGFExq%2FvpNkfiRc9k4ITIA5fSRbNoqDCstCbqeh1mDKPw83KMBZHGLoJeWIkUU6n5xuuy%2FbfAHWqPBMQN%2BI2q70tjzrCgmR4N4VAL8fGCk4DDsvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa79452678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 102, 8-bit/color RGBA, non-interlaced","md5":"f763823b6f779ff3c972a65d2b3d74e3","sha1":"bc7847ce616c57706a0011d46253cef8a16013ce","sha256":"9f549873c01c1815eeef9bf4cbdbf0351eb84f32c24940a9b5f31f687e7e93f2","sha512":"2e2078ac38d9affb45e52570ab6c813af5aa951111903bbfd81f8e39df40a1c4b7bd245a73e1d9d3d8d444abbc69993a32ac1cdc10bd3c4ace8a54eca84e8185","ssdeep":"96:IHj26FbfEQepmefNcjk4QdykY9k8kR/BW0OzRvH5bArY5PPqWmvUBswL:IHj7FToAkqV00fae/BswL","tlshash":"a4b18e70cabd372c9e1945669770246ba93c0489f368745e0ef6d03abc89f6e692c905","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-07-12T21:07:43.934463Z","times_seen":84,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner1-1dc9abae.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner1-1dc9abae.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-5567\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twOvccyyjfuQZqkt9cR2Bvs0RL4LR7wPh2C%2FOqtujurW0gnUImpsKqeNj2pKH9ZkpExrq8zep%2BbpW9L8v55jjaAOyA%2BKe7S8JMsz6%2BWRBanbp2dWQy1SdaAM90q6kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa99512678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"086ac37aabebe128fb548d9730584240","sha1":"0b091863bf8bb06390b44eed38336669766e4558","sha256":"1dc9abaece1b2130d20434cfbabf86628e6a0cc519ad6799b40a1529fec8e027","sha512":"f89ec4a43adc8947acd4f507a421587f4a2abb939c0b758655925dac31ab97b5eee29b7a913183d8445a71e8f4780521a7b6c09863d2626668358a725e9e621f","ssdeep":"384:s8nv+ISVY8c8F1Gq1enB14iG1VQbu3+bU+QpTPhPaqVE7/k7M:7iY58/P1ez4jVEd+BYc4","tlshash":"14a2cf0d7ec97e19bee0490ed68e02c7736b82658221fa6978faf2d5411837e860d9c0","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-05-27T00:09:27.84664Z","times_seen":51,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/metamask-f52193eb.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:04.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/metamask-f52193eb.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:05 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-4ebb9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9koAVe9Z0xGW2hXafVZHO8Am60GAVBaWy1mIIEegE%2Fgj7fAGeDALxhJ0VDtxllwaftF88ZCpyG%2FqK0hAQX8Jz6OX2Dn7z8W7Lsb7Qp9DABvcfSS01bVydyZItvD8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9ec2b2e2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 712 x 1233, 8-bit/color RGBA, non-interlaced","md5":"7a0873f870fa9848cb3506a8fc3ae0e8","sha1":"0ab30c397b67e326d0ea59bebdfe50f86a0c2381","sha256":"f52193ebf482ba3cadc87765b4f0f91b716b8acafa2b42030f61613046fa3229","sha512":"23397495939fe92ab374c889884be46d0f5fe272bb529f5b97cd02e54f6ed9d0cc78102d9714a3d384c39c811ed3ddd17266b835347276ff19ee6662e63f7da7","ssdeep":"6144:rTowATiSsQAlMyYwxZA9q9RgpduneRBlLK2jjwkOskP4qZA1QR4eSXYV0JMZCl:IwATiSsdLqq9ReYnebOVZAiRyQCl","tlshash":"ca64237a171641e9bf8fa40d86981ff8ba30be4ab7bdb47e915ea042a118c2d07c4754","first_seen":"2026-02-11T14:37:50.04005Z","last_seen":"2026-05-27T00:09:27.847134Z","times_seen":9,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_top_ex-8b586dc5.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:05.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_top_ex-8b586dc5.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eth-mk3.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEAApC7o6I3fXU5G7mcxATNQ8zzGC75AOsJNYRrVgIoxGOJs4iHvmSeepfQv%2FZT5WPU8VJ2f%2FXBkIbwYDpf7xiiPGg%2FxaGAn7ZgVD3ZWlsG5rbGxZOfeig%2BaX%2Fa9Cg%3D%3D\"}]}\r\netag: W/\"69ba8eea-3b\"\r\ncontent-encoding: br\r\ncf-ray: a020c9f44f1b2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1207b48f9c5f2777876413639c21a63a","sha1":"f039a26fa4f574d83a94bc2702e61d62371bff7d","sha256":"78208da5f9be77bf295531d028f5a0a377dcf2ed1f46f3d00f3594138c10d23e","sha512":"df8486e68a0e410f109b129c3f0410f24ab2704fba79adf02e2a1dc907aba91702f62738fc43aea2f9ecbebb16b9d331f50bcc7987191e1653de2e7459634497","ssdeep":"","tlshash":"c1a002010915a4b0436c38c88b37ca74185381347515475592548605e521540566e824","first_seen":"2026-02-11T14:37:50.03039Z","last_seen":"2026-05-27T00:09:27.847842Z","times_seen":11,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/api/index/webSetting","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:07.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /api/index/webSetting HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-us\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1Po%2F22ShjvEwZx%2FWGo2E2nnKjIpSMGMfAURYN1llBTIJD7eOA2l6Z2Qv%2BYpS6niRjwnbegzB7U0i%2Fnr9wGmRSXYUNQSHJU1d23H43yusyCF%2BOfS9usbLidA1zwINQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fab96c2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b06ddfcc63b0b2dd45188828864d0ff","sha1":"d0075b0b1c75ef762885f977bd5429d4806073dc","sha256":"e6e64d8cc81822a63f41930d8251ee4692f5fca96e6e4b616bd0835b6e0ae07c","sha512":"91d5e2877f364288c6eefcfe8886583c63b98cfb3aab0b0a3725c1ff18ced6778aa6c9e304eb29627623698f135ed086a9a7e4ee567db6c25e2b66f1a3698fc1","ssdeep":"","tlshash":"5bd02b0aa8be5d55df16c84686e7319b41aa619b04d15e788affc9e990c974c4110452","first_seen":"2026-05-27T00:09:27.843906Z","last_seen":"2026-05-27T00:09:27.843906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner9-224b8da6.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner9-224b8da6.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-3c03\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unXDU4TRjO15PdhKZZHYka8aZ705juwIPNuPFz5J7ZjWSwv7aOZm20zm56dz7iQY%2BLurLx3w6Po2qy0ybiNBviQBgenY0q0ikQ0NGJ1nEyYipErchyJc7CQMive4jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9faa9622678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"c2dde12bcda04bdeb6dcdd1f5d08a529","sha1":"7fe76978eae44eb38f1282db8e9e964706f15807","sha256":"224b8da658b0a87f32fe9ebe0791b96e3f231f8112a3bcacf4946bcf59e706db","sha512":"f6227d8fa9307d1abaf3b90209b4bc3f20597b077de4f77e2392a00ad296c3634c8f58b98bb873d1a79f436bb9b718b44d94c13b4bf7e067fa98545c0fd01cb0","ssdeep":"384:spNn+HEaLD1oOnlt/gGxvaFn/tNhw1XhaS5H6Kzs0ln/Mbkl1:2+H3mQlTxiF/mjZ55zbN0by1","tlshash":"5f62bfa98cee56e34fb01e72824bb209ffe40284d4fe4148e71521f4b65d3e86b95292","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.893915Z","times_seen":71,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_lh-13f3fab1.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_lh-13f3fab1.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-1b1f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MP3AjFkxEm%2F49k5HpxXrUlkcbPveEEMJgySta4o3PxqL5AHF1beun1YZtEc%2FhznVvfuf6A6dEh11n7RqM7ICYA6GoDjFOc%2BayYl1SIhyG5eriL1FFQzuobWBpdunVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa894c2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b504cd7d6e479e496046be669dda0a3b","sha1":"9bdb418cbb6ffe4bf12bb940dbe6acdd83e61156","sha256":"13f3fab17cf08e2944fcc6ef0b05b42b99042eb77528dfa93c711b20a46c29ab","sha512":"70da810ef6a984b5e421bb9926669fbb8d70f8f552fc8411d6ea9023ebc32a159a3b37fc6b432753fc962024d8ef445bb3a4f4147daf70e4b1dc1f4423074e96","ssdeep":"192:b/7lp6ahBIajoLcLHBCF2/BLvzRSOgXcF4lYnu+kS2rMdS:r6ah7MqDdSOgeZ8","tlshash":"93e1ae7fa9b71570f7446612bce20497709fa5fbce60700ca9276b70ac7acc03a95a35","first_seen":"2025-06-23T10:32:24.959137Z","last_seen":"2026-05-27T00:09:27.850495Z","times_seen":31,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner2-af13adba.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner2-af13adba.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-33d5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TUS8aXrca0O1YHnwoGvWc2a4m8AyUfQZixyUU3JI1dJMJh2IOrbsslHKDY7EmaCw9J0Pa67T3RXHLiwpZbEOCL3TDFRqyH8hF%2FYB3A2RjWnTFyfOQmbloTiCBmtWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa99532678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"8ca8e6bfff889740fc53a06e78af4392","sha1":"570f32cc0d268cfe0c37fa0bf4c77306757fe98d","sha256":"af13adba44cbfb0bbc62a2b5e82df1627262fa1ceb09a5ed7abb0d8a22b40233","sha512":"62f426c80373ed7a2f914b67a21ee3b95b12c12866af6fd6c264265bfeeb049b35ba498810199bee0b2927f935f5ab2a48b1055619666076b6e996bcacf9872a","ssdeep":"384:L7W3Do1EK750tGOIKOGcqihuoG7OXdjdJAnR7tgTJP6:XWzoEPtjIEcqiNG7OXZAptCc","tlshash":"7052bfb06c140e2534124b517b917c2a5cf52e4b4d23f529fed2aa06e079a12f3befe0","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-04T20:56:47.877971Z","times_seen":72,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/icon_top_ex-8b586dc5.js","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/icon_top_ex-8b586dc5.js HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/assets/index-d4e9773b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7LnJHeh%2FPDbLoWOx2oZb9L8943CcwA4UtcNHgKDn2qi6DtjlgaocWmFRmYPTFebPlOlWaEctbMpiouRVsUqyFbWreyG%2FsvuOxUTks4wXSpqq9TZnX0vnehA1508rg%3D%3D\"}]}\r\netag: W/\"69ba8eea-3b\"\r\ncontent-encoding: br\r\ncf-ray: a020c9f8286b2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1207b48f9c5f2777876413639c21a63a","sha1":"f039a26fa4f574d83a94bc2702e61d62371bff7d","sha256":"78208da5f9be77bf295531d028f5a0a377dcf2ed1f46f3d00f3594138c10d23e","sha512":"df8486e68a0e410f109b129c3f0410f24ab2704fba79adf02e2a1dc907aba91702f62738fc43aea2f9ecbebb16b9d331f50bcc7987191e1653de2e7459634497","ssdeep":"","tlshash":"c1a002010915a4b0436c38c88b37ca74185381347515475592548605e521540566e824","first_seen":"2026-02-11T14:37:50.03039Z","last_seen":"2026-05-27T00:09:27.847842Z","times_seen":11,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth-mk3.vip/assets/partner3-47e2905b.png","fqdn":"eth-mk3.vip","domain":"eth-mk3.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eth-mk3.vip/","date":"2026-05-27T00:09:06.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eth-mk3.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 19:00:16 GMT","end":"Thu, 06 Aug 2026 19:57:41 GMT"},"fingerprint":{"sha1":"5C:9A:26:D5:02:8F:DE:EE:2E:43:B2:D0:7A:78:BC:A3:F0:B3:4E:F2","sha256":"E6:44:39:ED:CA:DC:27:67:2B:BE:95:6F:D6:37:8B:1B:0F:1D:F8:8A:17:57:79:DE:F6:6D:A1:C8:36:3D:BF:74"}}},"request":{"raw":"GET /assets/partner3-47e2905b.png HTTP/1.1\r\nHost: eth-mk3.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eth-mk3.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:09:07 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 11:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba8eea-42ff\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP04c9m00ZxdLFvR9IuSTUa0uFRIxnSBFGCBYYGTUtW0XEhgp0V50mNv3Rr5ev4LSEYHI17PbLg0x%2BQOI05AKt%2F1tRJQdJdyPlvjUdAl5zzgG1p6bMTsjqMFrN%2FwKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020c9fa99542678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit/color RGBA, non-interlaced","md5":"080de4b3d4aff9ca3b9909a40f1d650d","sha1":"54c5764002efc1bd1fd69c6267f3e717994e41a3","sha256":"47e2905b1b0e9e6c84a907ec64ebed3ce5ccd45787925a62e2eea35725932ed4","sha512":"ef282ae74d6a21dc5188c0f05c4a7f652b5eeb088520489bfad9538fc416a50557aff363003353f5e459ae1dec49faa4c547cfadc5aae2b51278c5cf87dcd449","ssdeep":"384:5VXUT1lQgkbC9ssxbIpmzGB2Tb2hPGey2OYHvyoHP5OAYuH:Illke7xbumzGBUSJy7YPyov5OAx","tlshash":"9b72c086f092ed22c57190112bdfac941673015509b49b9d37ffcc27249f8e8ae71be8","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-05-27T00:09:27.851597Z","times_seen":52,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"eth-mk3.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}