{"report_id":"62b5af9d-6687-4118-b8ac-a2ed568005b6","version":0,"status":"done","tags":[],"date":"2026-06-08T13:05:48Z","url":{"schema":"http","addr":"metamask.betmode.io","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"title":"BETMODE × theMiracle x MetaMask — Play Fearless","dom":{"size":116316,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55780)","md5":"a5dda429bfaed24bfbb9ea06fe240a00","sha1":"e334bea7bc70b3adf7ed1db87e3998892a43ce9e","sha256":"aefa549ee4e753b2729f7197abc751afd51d3dfece42d6cb68e35e13549b5c40","sha512":"1993dc6502aed06b1d47845bb9455c9f839879363a3aab4e1b6ab85c09e9838bcf33838f8563fc88ff7da11bcfdbefcacbdc4a285283be5a149168a6b4281044","ssdeep":"1536:iI54ZRfleNQR2GV/kl3or9TDEoDwlKYNgpg6tSdzHNj751/hd35XpJr7bRaiZAX9:BmNa4LcyS/b35XpStX","tlshash":"44b30862b442e2e994470fd4307eafbd3dfca106c141cdb972dce9282b89df647691a0","dom_hash":"domhash5d1eed9ad49c538b9b8b4f629b55d5c6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamask.betmode.io","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T13:05:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"consumer.cloud.gist.build","ip":{"addr":"34.110.164.207","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2019-11-17","domain_rank":65317,"first_seen":"2025-08-17T17:58:04.583537Z","last_seen":"2026-06-01T15:11:09.713539Z","alert_count":0,"request_count":2,"received_data":970,"sent_data":1489,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":2,"received_data":10155,"sent_data":1094,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tag.adrsbl.io","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-29","domain_rank":1443297,"first_seen":"2024-02-13T05:42:12Z","last_seen":"2026-05-31T12:52:40.753147Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":489,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metamask.betmode.io","ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":60,"request_count":30,"received_data":1824998,"sent_data":18189,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn.iconvert.network","ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-02","domain_rank":2168078,"first_seen":"2020-03-29T03:58:37Z","last_seen":"2026-05-31T22:36:47.103263Z","alert_count":0,"request_count":4,"received_data":120902,"sent_data":1962,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":2,"received_data":61562,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"event.iconvert.network","ip":{"addr":"52.214.65.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2019-04-02","domain_rank":3558726,"first_seen":"2019-09-18T09:07:20Z","last_seen":"2026-05-31T22:36:47.139814Z","alert_count":0,"request_count":2,"received_data":771,"sent_data":1235,"comment":"","tags":null,"fingerprints":[{"name":"Akka HTTP:10.2.9","description":"","website":"https://akka.io","common_platform_enumeration":"cpe:2.3:a:lightbend:akka_http:*:*:*:*:*:*:*:*","icon":"akka-http.png","categories":["Web frameworks","Web servers"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-06-07T23:11:32.887116Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":817,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":2,"received_data":958424,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdp-eu.customer.io","ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2011-10-26","domain_rank":246410,"first_seen":"2023-09-06T03:34:17Z","last_seen":"2026-06-06T17:37:34.145278Z","alert_count":0,"request_count":6,"received_data":239104,"sent_data":2990,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2942def2d94b6e1b0b79b3566ee32eb2","sha1":"5ee7abdbbd36f0cbe4ea166f916879ea2d1fc08b","sha256":"9a300fbc92910404cfc2d0e40ded6dfadc3699b9958e05d57d822625f780773f","sha512":"28a77dfdb21a0f7e2ee27bd31811c5ada021b8f708f30a7396bf6b8514249da21a68fc5d18f32893c06d327c61097debcc28ae3826d19354651a84c24f387be7","ssdeep":"","tlshash":"eac02b8430f3226420b31038037713041143024f308c94337ffcc1006f0820b0c15108","size":155,"data":"","first_seen":"2023-11-17T13:20:29Z","last_seen":"2026-07-13T12:02:24.008838Z","times_seen":20898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/code/07fb08e5-7b66-48f2-bfdd-997b846c14cb.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ca28f385aba431965064720e168d1bd","sha1":"36efc6c625dcf0df7e9a93003d89d1bed820d2db","sha256":"fde15c4441432525ff5d030bdbc77766270168de89e10d79d7fa79fb1b8a5158","sha512":"79de0d81f08a287eeaa9dd9408db37220749934fd1e9c9614246bfbb37925939576e58051f18e2019263ce17a88b1f8c9ca10f2cb4fbd88c1e8e4c0a4234408a","ssdeep":"","tlshash":"6101f1830d7decba05690e99f233e714bf523bd72881d38371eeee1c8e914424818b54","size":797,"data":"","first_seen":"2026-06-08T13:05:59.267837Z","last_seen":"2026-06-08T13:05:59.267837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0gnb3osvwbr.a.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1678099e09a4d9bce81017229d90aed9","sha1":"7b91d65cb3225aaf4fcc5b0683b67c0e73287878","sha256":"7f4e4c19cde0502a90eacea7c87757c7c36fcc625a8d6422f2b5908f544d6154","sha512":"d3eafe63035e58fc08ea1db5812f04e885c65ac2ac12559895317a0088f94ec3338daf46a638484a422f8820bd0d7f17c7471015cf89212e5ab1de86520bbbb7","ssdeep":"1536:RXHei4cfcOiUjp7Y/+XgWX9aw2XwmV5BAn954WN3N:RXHeipU+XgmafXE","tlshash":"b533e7ea3296b63307da01be84764106723c8a65640e0468f76996df396cc49f3f7f74","size":50404,"data":"","first_seen":"2026-06-08T13:05:59.263461Z","last_seen":"2026-06-08T13:05:59.263461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KQQ26VFS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b82a9ebce00afa299b97e3e791e506f","sha1":"25a1175e1d8e7543b80c49abd6947c57c4c602cb","sha256":"6a64eed12ae9f3ba34acb49966d877dfdce8fb47cafb153c402d8173d9910131","sha512":"dd4031a099483146b22e0d7e2ba7777373eb38650b7c3020bc9c7bd8328808198c527efda0ad185191dc527ed1f2a28aeb855736497129857999de3a31db1906","ssdeep":"6144:r0NF3GsHPCgbP4V2pXW0w40dicSF1zrd5Q:ruv4evzI","tlshash":"2aa41aceb3d670625393a474503f128fb57a28e2b448c8a9f189dcd42e7499a4237f7d","size":470385,"data":"","first_seen":"2026-06-08T13:05:59.293226Z","last_seen":"2026-06-08T13:05:59.293226Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6540e627b2d15dbf5b253c98d4524cc0","sha1":"6e9f328cab21fc89f30db14fbd201a33aa9be743","sha256":"b2a9592e8a929dfb13c752ad1cb37afdcda8cf9b71961995b80e6fdea22fd8f9","sha512":"d5e9e66b683d5a3d49eebd42f287c512c2dd68a7b22844bb4c2f2d03d8a5c4b40c4674554ae13c64d569eb46134be54188a84dc8f0444d4c7941774d9cce990d","ssdeep":"","tlshash":"32e0a38c7106552242f5346d9baf3a9561321520d404985076e748547e7dd8fcfe7ccf","size":429,"data":"","first_seen":"2026-06-08T13:05:59.29753Z","last_seen":"2026-06-08T13:05:59.29753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f27a2d74118c8c44ec257b00515a01e2","sha1":"aa3bdc54beae2baa5108ff0d911ee0ca07e46d61","sha256":"a4034a828bb0ae05581889661bdb480e341adaefe72f3f6d576bed48a005db5e","sha512":"4b0d860d63b580fc63e9cf6b7a2e67adade427c1b61dd1c95c8a3fca8dba9acff1d66cf70d389f02b3744400fb138760b1c18f2de45f84c4b0b707871ada1ff2","ssdeep":"384:3seDKU7PZt545Lzp+bT/NaiZAM8xLDBvZFqNyOKEU:3seDrA+bTFaiZAX5NZpIU","tlshash":"25724166f5d9c3d682561f41b92e9f783dfea06685508df100ea7d68b78ccd603ae032","size":16554,"data":"","first_seen":"2026-06-08T13:05:59.298353Z","last_seen":"2026-06-08T13:05:59.298353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/573.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5adbb11da5556fbda43ddf87f0cc6361","sha1":"7eb26fc2fa014039aaa9a1fe3cc5e71d2bf683a7","sha256":"007a6393b24b8a9c2605272f9b53f3f7343a8d4091ef67df135695738bc7163a","sha512":"b7b2d2d1f6e3569a435ea1ed3f3ecf4e31381467452beb365dcf6e6af4deed0149aa03c922448f9ec11202f31a03aaf34462f9acb1c8c4ae81b8905b6ec5d448","ssdeep":"3072:Gd1yFaxoEoIB/od/h8LW6qcWHFywNFvLH9WqVFr/wvmxRL2XCMlh3UbqEjYsBd4B:Gdx+E76d/h8LW6qcWHFywNFvLH9WqVFS","tlshash":"83b31b1671a2353952d39ade6af71214b32e3501f40380a4f69ce8970f9f8c952b7fad","size":108493,"data":"","first_seen":"2026-06-08T11:11:55.824055Z","last_seen":"2026-06-10T06:54:44.848652Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0w_0q6r0e~m20.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19fcf33159eb9387d249ea926fbaba9b","sha1":"0655839194eb18cdf1dbec7257199b174840e24a","sha256":"06fccc0f40dca4f8e83a8a717cd5816db9cf2054fbf22ebb8af9f8d59e94f72c","sha512":"4dc02eeb158b604ef3c5765b7391d618b97d51c6f849eaccee6f9b5925a35e902180abf0c043354e0953862c2b725b409dc3f86a15e5a1c0ca52ed0162939656","ssdeep":"384:l4I0zqT2HDu8KKjl4Nrc2cuwL/e/uukx0nBMt70Quk1VkuQoEPkPZ:dLfDK+xcGwj+Ba0Quk1SoEPkx","tlshash":"b4c23d663264fce1029bc1d9543f140cf7391d7a917cb0a477e88ca965a4985b0f3f76","size":26870,"data":"","first_seen":"2026-06-08T13:05:59.282444Z","last_seen":"2026-06-08T13:05:59.282444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66890aad8bb57f433c750114e93932bc","sha1":"1222d824cf006bd07cc5a5fb5037bbad8ee25b73","sha256":"8d8d80124eb9727d4320f197c2740709ec286e2063768947d6de65464d0bd7f7","sha512":"adae59fc36502f8b1cdf6ee8c7ec5b1e09596040230bcadcf1645b5cdc24ed41d336242e93e0cabd0cb92a34845de38acd317fcc9c5e7a0140de56c8c12cf61f","ssdeep":"96:/uWJUk532dGX4FJZ3x+gEWuwZFqqBJDyrOpU:NUkAdGoFJnuxwDqqBJDyR","tlshash":"b5a1e7ad611a1ab925ff2f9eb03f7ba5b071409ea414d110662ecc1c1c79cce0633ee6","size":4866,"data":"","first_seen":"2026-06-08T13:05:59.299335Z","last_seen":"2026-06-08T13:05:59.299335Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"364fc13a8a5415080147b5fbda733c1c","sha1":"080408ff4ee27dc87ca12ca301e8a7507bd28f77","sha256":"71c6b23a9db15366297721f9e9dc9ea311a664e1fb3acafc9c0eaaea6a07c2bc","sha512":"b9f5c37ddfff2ea4d31560635beaa5afa59b2e49118b634635625cb4d2db38f280b256e85503a434c2f72cbad879c026f0fe135abfb803046047e32e2a835c4a","ssdeep":"","tlshash":"01e055ee6aa876742a1334ab736fa24476b61057bb01d889108648480b7ca4a0a7b997","size":437,"data":"","first_seen":"2026-06-08T13:05:59.300783Z","last_seen":"2026-06-08T13:05:59.300783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0doue9lb.--c9.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8920bbe3eea10bd55ca7fa7ca956d4cc","sha1":"a148007c547b1a61cb5504f3fbdd0610715b4a4e","sha256":"030c1ea3db59e9b2a3704ce7311e9ff1979b24e9fc61c49381a18a0f02459a43","sha512":"122b601d70a1ab5369093723aed271e22acfc20a194c641ebf3195d215002ac1265c27205457e7f6cb116cf47f615b7e90b7ad7018a6232a52ced7ad8ba8a0e7","ssdeep":"384:AbaCn7JB99TOkdFXfjk6vm3zqAmCbzEQ0IcT7N:AmCn7V9KGFPjxm3zqAmCvIN","tlshash":"78b218a9b195f4421ba364a4807f500bf2382976286dd4b0b3e6d8f1b9f00add537f99","size":23520,"data":"","first_seen":"2026-06-08T13:05:59.27538Z","last_seen":"2026-06-08T13:05:59.27538Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b634d5de02bb05a8ee8bac0f461a4b8","sha1":"3088696b5a71b89f7d8efd19a4269dce3e00e4d5","sha256":"e1993ab59fbb78019f8162bea1c3a6b08c4e5b43200d2cebb15e84e22c2c7b90","sha512":"1485a052e5760ec2ebf387151a008b53134cbb724fbcee2b12c465a3788d6b9f8f67a14bf8929e31352499222d38e9314640763ef953d6de0bb11941b0616571","ssdeep":"","tlshash":"e5f02e296b736478d4677557173faa443d344053340ee845bf5cd6054f6489f2405fce","size":628,"data":"","first_seen":"2026-06-08T13:05:59.301649Z","last_seen":"2026-06-08T13:05:59.301649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6cff93afaef14ba403e2ef36a718f6","sha1":"598fd314b77112f7f5d750beeca166b0bfc5baeb","sha256":"83e840e6f6327353c87b50c921eb9401858bb5c4349b35c28ada228fec828d62","sha512":"dcefb70d92d2db63b6ee24f738c1d742627c7cf4954fa7ab8b799ddbb1be2fe5b726eed18f5ff133796b6cd1b74f196b2f10fea061950fe3999354db2f0f1f26","ssdeep":"","tlshash":"42e02d19bc18828c885b022ea47b83a8508000082d9098130090c6c93e20fce428b94c","size":327,"data":"","first_seen":"2026-02-19T13:37:20.808871Z","last_seen":"2026-06-08T13:05:59.302495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"363389c05f1064213880b208c258491e","sha1":"cfc236324ac39423b5ec122ff54f7a59d69b1896","sha256":"f8f95060bffd5345798d5c058d22a82def3c9bb76aedcc95a4003180f1a0e170","sha512":"d395cb4593d1404df66990c0ed094ce3d4ded0e19309b5ec9960b134eff5d7d44e1c8279964a968e1b4f869292e20d7fd35b5645ed3635d313ea2ae3d4e6375e","ssdeep":"384:GIwYtsEqUNj73vRh6ksIyu8y7c8dZ1DBQRk2pAKyfAyeyoyGrbKgByX2xA8E772+:+UNj751/gcag35XpxH","tlshash":"7192e8e7b167d1e500870f55b5aeabae74f58c43da10e9f004e4dc29e7acdd1213d2a8","size":20291,"data":"","first_seen":"2026-06-08T13:05:59.304067Z","last_seen":"2026-06-08T13:05:59.304067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cb364a0046aafcfe78e7a962834b620","sha1":"5c2df4adda3fec4f6ed4a13c9e6c7036cc546697","sha256":"4348c12332fad6223acba9579dc45ab8d554d1a2e16f16029f31ecb76a641d9b","sha512":"b69349189662d73a9f4063650839b951dc823391077a3c5178ce3ef87b12bd7f0810478170fecbef9741628a401996a1811b541d125c5f480cb25e106f5d54c2","ssdeep":"","tlshash":"a031a4c424f50826062e20b2be0fe3887a78e5192618c830d42ec15cb7dadc2e2d33ac","size":1870,"data":"","first_seen":"2026-02-19T13:37:20.789849Z","last_seen":"2026-06-08T13:05:59.30499Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0.5.k0cwel21p.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57719006e5a39216786a5fb2fd1d3213","sha1":"4818654610be99dd11fce179b2a524acc497006f","sha256":"f83280f05aac09fa513fc8e01c828f074b4b37fa656c9ba27496cf5d096b8818","sha512":"5281e6f2ad6d1ec1442da269d960982cb831e3afc5d9bb7366b4b9a0955e50c90389f337ca7338009b7d8ed4683bbb392b7de8d1a685bd819f0979d5e416a7a5","ssdeep":"","tlshash":"1d11e3503143bcd40ecb11c88926844ca06d507c84ed54701bac5dea767af16f5d7f9a","size":873,"data":"","first_seen":"2026-06-08T13:05:59.26207Z","last_seen":"2026-06-08T13:05:59.26207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0no1b_s-81nqh.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"608d4ef0bb575c7196c6813c2c642b0d","sha1":"4c1979925316e4c5a2448e415342cd6564de86b0","sha256":"e1b08a0fcb7e22ad79fc66a410c07cf5349e79da6506982e7d74166077a10768","sha512":"d2d8c15df11093042463235f3cc95ff61f4d9fb5d8a53e91eaff03f35a9cebcba4c41c2de5a2fecccc0002cc3fb891637f7539dbd6cc45fe56446f07dc4c2ce6","ssdeep":"3072:0aq6DIlkx1T6Hp6d0rVOAyzPrQwQm9VXLK0v+1K4a+:0aq6DIlkfT6Hp/rVOAgPLHVXl+1K4a+","tlshash":"fc1407f932d1f99207a740a5c03f1006f22c4d77249d6860e3e5dcda756899de2b3faa","size":195352,"data":"","first_seen":"2026-03-21T11:33:45.024927Z","last_seen":"2026-07-08T13:30:59.785121Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6651cf1b2f75af5e4b8468fd87b03b6a","sha1":"36d90f8a694e4c64fb50a0d17a046dee170a2932","sha256":"3abcbff43aecc5b88c68e502da81e2d4d2e0d0da0758f83f18b7a88fc28bfd68","sha512":"e8144d181e2ec5f7947fce108439b411589f41e343d54c92bd596c2a4c067932d3e48257364836baad22d8da4bcb6ceeb358adff8fd7bc21880dde35ab2d3fb6","ssdeep":"","tlshash":"021110de020e893971b61415a69fa3027d7009961d02f0417089499c60aee8fc56efee","size":902,"data":"","first_seen":"2026-06-08T13:05:59.305892Z","last_seen":"2026-06-08T13:05:59.305892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0b483395c93d1bb95bec0c1d2888631","sha1":"fe3ca23be0b0873456d25494d0e9ebcbb06f4378","sha256":"d9d01c092e5540e3f9069dcb35a0ee442e83aa5321eaf4cd5ba0145245858490","sha512":"f2f928714cabbf907c9e1e38309aaf6e9b1525d36e6f8172db3e255f5c9cb02b9147e8f1c69a3d233eb7ea29305ed86c5f7431d11ef208f2006b7416129caa4b","ssdeep":"","tlshash":"f451afbb0b33d64717b0130cbaaf1ccfa8dd417e0ce46742459ec4a6b7919b71969132","size":2956,"data":"","first_seen":"2026-06-08T13:05:59.306773Z","last_seen":"2026-06-08T13:05:59.306773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0b483395c93d1bb95bec0c1d2888631","sha1":"fe3ca23be0b0873456d25494d0e9ebcbb06f4378","sha256":"d9d01c092e5540e3f9069dcb35a0ee442e83aa5321eaf4cd5ba0145245858490","sha512":"f2f928714cabbf907c9e1e38309aaf6e9b1525d36e6f8172db3e255f5c9cb02b9147e8f1c69a3d233eb7ea29305ed86c5f7431d11ef208f2006b7416129caa4b","ssdeep":"","tlshash":"f451afbb0b33d64717b0130cbaaf1ccfa8dd417e0ce46742459ec4a6b7919b71969132","size":2956,"data":"","first_seen":"2026-06-08T13:05:59.306773Z","last_seen":"2026-06-08T13:05:59.306773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NJ47RHVR1C\u0026cx=c\u0026gtm=4e6631","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e24b469d79e4059a8890abcaad9e40b","sha1":"36da7031cb7bdcaa305314cb52976e447f8c2027","sha256":"5df63903c4ec5ba44ff1b908d52f2f6b00b229a5d5d1ab7a14b99ade8234ebf2","sha512":"1bc45545f3f73b8cf9811ae6aa54446187a1fa829df71c2afc046bb5f5dd5433f53194ca0d0eb2467e44951d22a552bc4bcf23cf80ab336defa161650f7650b0","ssdeep":"6144:xyo3GsHPLhgbE47c2bXW0w40dicStQoSXDKTl25GrQ:04x47LSohG","tlshash":"68a4e9ceb3d674625296f478903f01cba57b28e2b44cc899b189cce42e7459a4277f7c","size":486805,"data":"","first_seen":"2026-06-08T13:05:59.295086Z","last_seen":"2026-06-08T13:05:59.295086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/client/4.4.2/main.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c4705c14ca4d7ed869224035c5f8c25","sha1":"85676fd4e4b603bde74f198caaac8e51bb428e33","sha256":"80046c209ff29bbca144cc405b48b3ffe4efd8ab952fe67b508b3b418ecd0903","sha512":"37f8d094ffd84f8d0a2e12ead91a48b1a63df696c3249015ec5191685e3aaec4b73aad7f85dfb789ece2b1d21f6674426702017e651a9804611292f856120e0a","ssdeep":"1536:jHTqN9OocTHvP3naZTq6haTI+qBcfBzd1MVm+BMSCzE:jzL7nac61FBcc","tlshash":"3643289932d7743027ea52ea613f5206b33a5965380e8018f12dd9e33c39e9b5277f78","size":56375,"data":"","first_seen":"2026-05-15T22:00:38.772769Z","last_seen":"2026-07-02T09:21:10.461727Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0v9c2uadhpd-i.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20043e0c52625a9516b59e34a3439c40","sha1":"6ea37954cdf4168d64482bd82b160ca939750014","sha256":"4fa618407c66f83a10205f5a25c1abffbfe73eb92d57b91f3008226ace26186e","sha512":"7fb52faab9af48d42db459e26a2768d23884df9b8295e0615e3f84d86a99c6a6aa7c20d6fc24fd8f692d8fce9f30c17e8cbd7846fc9e4a743c32240b513607dd","ssdeep":"3072:CFJtqqM4OGLOg/VNqfxMtmcvlBibQBTGQHyXs0Mug98n+d0+w/:CFJtZxOGLOgNMMQQy8mO8n+d0+w/","tlshash":"5324fbe83955f662aab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":226355,"data":"","first_seen":"2026-04-18T16:32:26.067355Z","last_seen":"2026-07-13T09:54:21.384554Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/client/4.4.2/events.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94a6bbcf7029be24a6fc7360ad6668c2","sha1":"ef10544ab3f395e27fc9479d32efdf96b2f1ab2f","sha256":"d19286ead111cf33ebddb78cd5bd8045f50915932a87b398f7f934ab14bdac9b","sha512":"8716a494bf6af491c9fbfd86b06295997671c3709b6c13bc56c41104771482befd019fa9a6f655d30b4e192a182048b743780ac6be97ad76eb96eb9e355b4faf","ssdeep":"768:NKmgDRGNVdrBea4iterXs+UQGbmrtlUxaoPAHEp8CkDECiL20KddMuewBCvvIrgu:NQYBBXteryQGgoPIEpSoGdlByRo","tlshash":"3443e6d936c6f02553a3657a403f610bb33a7e91680e8910e622e9d57c74b8ed233e7d","size":59996,"data":"","first_seen":"2026-05-15T22:00:38.668377Z","last_seen":"2026-07-02T09:21:10.465293Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/inAppPlugin.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93a2bcd727fe3410865d283a0503f546","sha1":"49cb29a60cbd8f34c339ba97b42a389ef8f69ced","sha256":"a4357525a1f9ac2b465a164923106892ec26ecadcb26aeac5c1f707b661f4005","sha512":"b930a9a147c0ea09bba8a623f65b14c4ebbffb9d317bc881d2bc5385ec8b00ebfd5497ecb01805d2a433b36293c35c2b09189eee95d3bfc0ac0cee71a003bb0b","ssdeep":"192:XJajLJKA8+9ucuKka3YTKFwLMtNbi99xyWez0EcoTaNrKlD9n:ZajVKA8oucuKka30K0Mt099xyn4EXaNI","tlshash":"aa2203cdf7d3f96801a3aabdd17b3423933a7a12701da421f057cac15d6874d9123ab9","size":10432,"data":"","first_seen":"2026-06-08T11:11:55.829699Z","last_seen":"2026-07-13T09:03:13.27902Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a928fca6562fb9dd22311f308852efea","sha1":"e472cb18915c0459442ff2576698c9adf7c47d9d","sha256":"57498fbd04c262d834bd278160435f83f51ba188db152b1d137f699cfacbcec9","sha512":"e3ac58faddd7bdbf48528e1143da72008f6dfa0db10d6491bb5256fd737a99fa6c683f12db556b82b100b45e1fb13d621f6612cf0b535278274a5fff2b1e4ce4","ssdeep":"","tlshash":"cd21f68e171c7aa8a79a4cc6e16fa74bf278084dc764c1d4631cf535692ccd862217b8","size":1379,"data":"","first_seen":"2026-06-08T13:05:59.307642Z","last_seen":"2026-06-08T13:05:59.307642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/ajs-destination.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e62f1d46d8fe23797704e9636bebb91","sha1":"8ca93dee412d82d4391915955b54cabc547d2eee","sha256":"a2dc3e824f206996cd0691f0ead47e401b06ad6703dae06fb04615de165697d9","sha512":"e6b402f0068a045e3284404a97cff00d06360323087a4c00c8cfd1184ee9037df7a8abcf51545dad20d508bf84fc8efb0009905273a1989e4f14dd54beffd3b8","ssdeep":"192:e673ew3JmyeahKqnMfJlCUFag8pUImwyAXu2A:eKVeKMKUc2IO32A","tlshash":"390212ccf6c7f0155267bab4817b411a733ebd2e248e4854f42bcdd52878659a12bf38","size":9009,"data":"","first_seen":"2026-05-14T22:19:26.547413Z","last_seen":"2026-07-13T09:03:13.216034Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/turbopack-0rq70xfaypost.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59145f17e766f0a04e0f1084200bfd1e","sha1":"4eb2fa33166656591edbe87a5288dad1be7e60d8","sha256":"78a46f7e590c84f13ef75e8f1720937acc206eefe03c7b5b7dbcaed44d48909c","sha512":"313f2536061e54c3d92e3cbcc9ffad6253ddf845c8500d738054ae1359d0f9c903232f5498ec1b77ccf8129f1fcd49d0f721131731b3ac22d86b9f86ac10cae5","ssdeep":"192:c4gMSBC8QEsg6+9EiZfYGElpETND+S3sBT4fCT3cXX6hfH+yLx1:c4gMStLElWyssqCTM5yLx1","tlshash":"0532c6ea33a6f07343af90ea907f4004f17954a9145e141c93ace8ea2c395a985e3f76","size":10986,"data":"","first_seen":"2026-06-08T13:05:59.271151Z","last_seen":"2026-06-08T13:05:59.271151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0d3tkj33oycf2.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0952ae1a57d7d561f4f16c4b36463126","sha1":"8dd07917908aac6ab93a33f68c759dda6f56c079","sha256":"2a4653e53a56ac6ea963b296eda9626a685c9838a9603e3ad0280975e118a717","sha512":"203381341c2e9eee890e44b71ab2bda309db48d3105ebe8474d8a75d7ea7a1e4465ae42dbff92153c5271d3ef1eea1e22488816a6a0604a231be93328ee7d5e7","ssdeep":"768:vUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqGmV:vpUQHp3M1VXV","tlshash":"9a43d8b57291faa303db91d9c0370012f2780c7130ad64b4b395d8af799dd8992faf69","size":57741,"data":"","first_seen":"2026-03-21T11:33:45.019991Z","last_seen":"2026-07-13T11:42:01.245422Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb9a44a7774ca0dd75dd4a405748ebc","sha1":"51d55a99e21018ce1db7f8e48260652204a0f09d","sha256":"7df5d91a4ec0a7c9e5f03aa99221c76ed27bc722f0ffbbb73fe301a133919a49","sha512":"a0a23bbd06e8100f20930a1aa127a7706bf4db5a976a217502cdfbbdbb914d6a1a6064e6681d9699ec261a2a65322c1bb3b4e223f40fbd6a38160da7cc7551c3","ssdeep":"96:bxhTnxW6+ziJk/I2ZQ9GDBzZdbZWFNr/9+Vo0dhr9hfvRqc:bDnxW6+ziau9WTZW/QVjrrLf5h","tlshash":"a6a1319bf590d3390e83018a49f7f7bd7ebd6824e710dc3d618c723c6342a95902a2d8","size":4996,"data":"","first_seen":"2026-06-08T13:05:59.308401Z","last_seen":"2026-06-08T13:05:59.308401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/snippet/d0eb5277cd9c87553541/analytics.min.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08d85270eb273b0f94b0fb0beb91f787","sha1":"eda42682e8f484d4a4507f5aea896e1997dd83fd","sha256":"f6da24dbcc49921b4bdf7c9158088c98c5daee5056a1d084ec264129d0734ddf","sha512":"9cceaf4071fe7692a3cbfb1293180a8692bdb4a0da9edac684918b4aa3020f48daf35d35baa170c7c445a9fbc478380d6b8c7dc4190395c176f646ad26909125","ssdeep":"1536:+Oo8gLdeovBoIWWf1sAsSgdYPYF0Sdi06/CH:+E69BeIs1DzF","tlshash":"9cb392c8f6e6f06043a764b4803f510bf23eb96e640e8464f226d9d66cbc58d9127f79","size":108154,"data":"","first_seen":"2026-06-08T11:11:55.815568Z","last_seen":"2026-06-11T13:58:14.981027Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.917Z","timestamp":1780923923917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"Mulish_Bold-s.p.0hp7uuipn4aby.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"146da79a7bbf3dad6d6621986cfb20b0\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fqrbn-1780923923920-875c7dc07ad0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":106572,"size_decoded":50576,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409","md5":"146da79a7bbf3dad6d6621986cfb20b0","sha1":"f3888ae5a70ddae97b73cfcdec86b51de4ead17e","sha256":"fda6f84f926dfbc405211da63705e79a76c44904b097fda7e23f47fcce536e6e","sha512":"6fab172d6cb2b334d6f5e317b3b434729e0d263001341f4dec034aa457e86d4733dbf181fcff4380449f20e652c84e4b9f76fb71e2570e225803fc8712e55577","ssdeep":"3072:GfhrrVqd0zxBx/xFxnAJJoh8Dd26GYX4o:uhrpqd0dH5LnAWi+YXN","tlshash":"93a32913f713a30acc435ebd9bb2c3a8b3a5be612e99c60ff8471e5dd48b9854c54642","first_seen":"2025-10-11T14:34:34.816259Z","last_seen":"2026-07-12T07:36:33.71508Z","times_seen":73,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2Ftmlogo_white.png\u0026w=3840\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.261Z","timestamp":1780923924261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2Ftmlogo_white.png\u0026w=3840\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 301205\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"tmlogo_white.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 05 Jun 2026 01:25:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /tmlogo_white.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wsgt5-1780923924265-373b6cf7114d\r\ncontent-length: 28540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28540,"size_decoded":29122,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b091e4834e43c9be7fc1a7fa0edd2c4","sha1":"4bc8cfbbc94e167a5146224923fa50c2cb20aa2c","sha256":"d8d3257207e2b1797f4b73da46d15f655ab244beb3a2f318750e2806dac5c881","sha512":"8faec3342c00c30ed530c33c10cbe2b4f743dadd8712472ae0a4825d517bdc3cf5091c5d679f3037e09d42161817e2b3f9b5af478464d2d74ebb66a96cac4e9e","ssdeep":"384:m7NPxnx8TM78hfyNCCEh7VDpuV+Dthg2wrx32wVW+Y7z+OOBndMz7GiJ9fgIhkJp:m7VQc8+CC2n9n9O32wVW3yOOBdPmdwJ","tlshash":"4bd23b9c2f39aa1d63b416d46521fd3ca9657814ecba447c2add3baec78733304b48e1","first_seen":"2026-06-08T13:05:59.258136Z","last_seen":"2026-06-08T13:05:59.258136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.396Z","timestamp":1780923924396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"Mulish_Bold-s.p.0hp7uuipn4aby.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"146da79a7bbf3dad6d6621986cfb20b0\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gwmsr-1780923924398-1371cc8823c8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":106572,"size_decoded":50576,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409","md5":"146da79a7bbf3dad6d6621986cfb20b0","sha1":"f3888ae5a70ddae97b73cfcdec86b51de4ead17e","sha256":"fda6f84f926dfbc405211da63705e79a76c44904b097fda7e23f47fcce536e6e","sha512":"6fab172d6cb2b334d6f5e317b3b434729e0d263001341f4dec034aa457e86d4733dbf181fcff4380449f20e652c84e4b9f76fb71e2570e225803fc8712e55577","ssdeep":"3072:GfhrrVqd0zxBx/xFxnAJJoh8Dd26GYX4o:uhrpqd0dH5LnAWi+YXN","tlshash":"93a32913f713a30acc435ebd9bb2c3a8b3a5be612e99c60ff8471e5dd48b9854c54642","first_seen":"2025-10-11T14:34:34.816259Z","last_seen":"2026-07-12T07:36:33.71508Z","times_seen":73,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/snippet/d0eb5277cd9c87553541/analytics.min.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.554Z","timestamp":1780923924554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"GET /v1/analytics-js/snippet/d0eb5277cd9c87553541/analytics.min.js HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=300,immutable\r\ncontent-encoding: gzip\r\ncontent-length: 30111\r\ncontent-type: text/javascript\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: a83982bb0fe691dc72361a226ba40347\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":108154,"size_decoded":30624,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08d85270eb273b0f94b0fb0beb91f787","sha1":"eda42682e8f484d4a4507f5aea896e1997dd83fd","sha256":"f6da24dbcc49921b4bdf7c9158088c98c5daee5056a1d084ec264129d0734ddf","sha512":"9cceaf4071fe7692a3cbfb1293180a8692bdb4a0da9edac684918b4aa3020f48daf35d35baa170c7c445a9fbc478380d6b8c7dc4190395c176f646ad26909125","ssdeep":"1536:+Oo8gLdeovBoIWWf1sAsSgdYPYF0Sdi06/CH:+E69BeIs1DzF","tlshash":"9cb392c8f6e6f06043a764b4803f510bf23eb96e640e8464f226d9d66cbc58d9127f79","first_seen":"2026-06-08T11:11:55.815568Z","last_seen":"2026-06-11T13:58:14.981027Z","times_seen":25,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":45,"receive":13,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/projects/d0eb5277cd9c87553541/settings","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.709Z","timestamp":1780923924709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"GET /v1/projects/d0eb5277cd9c87553541/settings HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-length: 271\r\ncontent-type: text/javascript\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271,"size_decoded":653,"mime_type":"text/javascript","magic":"JSON text data","md5":"b3c2b17be1c0a99402cd80e24d80e218","sha1":"0d7d73ada3e87159f962a3c61bc26e7e0b4a6fee","sha256":"c984f126847bd73bef73447dc0b353b9df7e5ab629bfeb498ebb2672825c38ba","sha512":"b4faeea2333da3ab1f931a5206823799e5d8496a002268f9b61ccc1dbba74e193224f0af9c42706c31edbbce441156bd81447ed408f9ddb1dc5ae5386dd96c14","ssdeep":"","tlshash":"cad02b8d54701ffb8ed58d7a4b9e5909f5dfc72e55a0db087878cd000dc18ec1614269","first_seen":"2026-02-19T13:37:20.676296Z","last_seen":"2026-06-08T13:05:59.260015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/573.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.928Z","timestamp":1780923924928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"GET /v1/analytics-js/573.js HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=300,immutable\r\ncontent-encoding: gzip\r\ncontent-length: 29756\r\ncontent-type: text/javascript\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: 716d5626d6624bb8fc6e29b473206c12\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":108493,"size_decoded":30224,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64837), with no line terminators","md5":"5adbb11da5556fbda43ddf87f0cc6361","sha1":"7eb26fc2fa014039aaa9a1fe3cc5e71d2bf683a7","sha256":"007a6393b24b8a9c2605272f9b53f3f7343a8d4091ef67df135695738bc7163a","sha512":"b7b2d2d1f6e3569a435ea1ed3f3ecf4e31381467452beb365dcf6e6af4deed0149aa03c922448f9ec11202f31a03aaf34462f9acb1c8c4ae81b8905b6ec5d448","ssdeep":"3072:Gd1yFaxoEoIB/od/h8LW6qcWHFywNFvLH9WqVFr/wvmxRL2XCMlh3UbqEjYsBd4B:Gdx+E76d/h8LW6qcWHFywNFvLH9WqVFS","tlshash":"83b31b1671a2353952d39ade6af71214b32e3501f40380a4f69ce8970f9f8c952b7fad","first_seen":"2026-06-08T11:11:55.824055Z","last_seen":"2026-06-10T06:54:44.848652Z","times_seen":18,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0.5.k0cwel21p.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.931Z","timestamp":1780923923931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0.5.k0cwel21p.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0.5.k0cwel21p.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: \"57719006e5a39216786a5fb2fd1d3213\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0.5.k0cwel21p.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fqrbn-1780923923934-48ef206f6ac2\r\ncontent-length: 873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":873,"size_decoded":1472,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (873), with no line terminators","md5":"57719006e5a39216786a5fb2fd1d3213","sha1":"4818654610be99dd11fce179b2a524acc497006f","sha256":"f83280f05aac09fa513fc8e01c828f074b4b37fa656c9ba27496cf5d096b8818","sha512":"5281e6f2ad6d1ec1442da269d960982cb831e3afc5d9bb7366b4b9a0955e50c90389f337ca7338009b7d8ed4683bbb392b7de8d1a685bd819f0979d5e416a7a5","ssdeep":"","tlshash":"1d11e3503143bcd40ecb11c88926844ca06d507c84ed54701bac5dea767af16f5d7f9a","first_seen":"2026-06-08T13:05:59.26207Z","last_seen":"2026-06-08T13:05:59.26207Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0gnb3osvwbr.a.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.934Z","timestamp":1780923923934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0gnb3osvwbr.a.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 868321\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0gnb3osvwbr.a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"1678099e09a4d9bce81017229d90aed9\"\r\nlast-modified: Fri, 29 May 2026 11:53:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0gnb3osvwbr.a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8hg8t-1780923923937-942ee8152877\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":50404,"size_decoded":16518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43442)","md5":"1678099e09a4d9bce81017229d90aed9","sha1":"7b91d65cb3225aaf4fcc5b0683b67c0e73287878","sha256":"7f4e4c19cde0502a90eacea7c87757c7c36fcc625a8d6422f2b5908f544d6154","sha512":"d3eafe63035e58fc08ea1db5812f04e885c65ac2ac12559895317a0088f94ec3338daf46a638484a422f8820bd0d7f17c7471015cf89212e5ab1de86520bbbb7","ssdeep":"1536:RXHei4cfcOiUjp7Y/+XgWX9aw2XwmV5BAn954WN3N:RXHeipU+XgmafXE","tlshash":"b533e7ea3296b63307da01be84764106723c8a65640e0468f76996df396cc49f3f7f74","first_seen":"2026-06-08T13:05:59.263461Z","last_seen":"2026-06-08T13:05:59.263461Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2Fellipse.png\u0026w=1920\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.255Z","timestamp":1780923924255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2Fellipse.png\u0026w=1920\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1481850\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"ellipse.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 22 May 2026 07:48:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /ellipse.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gwmsr-1780923924260-8e83cfcfab17\r\ncontent-length: 101276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":101276,"size_decoded":101850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66bef4298e4d9bf458c32da1c447524c","sha1":"31fc046e1ca725594dc62667a7d8d7559d67c596","sha256":"12ccb49e3fe5d1a4850c6dcd41023e652c11e7dba9d9e22df4a06d8dad082dbd","sha512":"adba30a57a9f44f0219792bb8d3816892a8365c11c4d2a90b4a65c05d5149b59a013ab447181347017ead73f2747903fc34fc7e8d9c917b2ef94785c7fc243c4","ssdeep":"3072:lnPYsTLpF6w5Pd3PFOc3AHKb53O9s2AA7+H37+onl0yDN:xPYsTL3NtFLXbg9s2AA7+Hr+olNDN","tlshash":"90a30272cb41e571e042b1fb908ae6938da5234ba3a44c6c1783bf9910bbdf7745742a","first_seen":"2026-06-08T13:05:59.265128Z","last_seen":"2026-06-08T13:05:59.265128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.397Z","timestamp":1780923924397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"a43b79a2903c75325ba5ab740af668e4\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::84tql-1780923924400-4c2122127600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":106532,"size_decoded":50968,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 37 names, Microsoft, language 0x409","md5":"a43b79a2903c75325ba5ab740af668e4","sha1":"9b3870f27552e84bde98622ca2a0a305faca0ee9","sha256":"4c880a6efe6a4040418f1207f795d330c0a1f06753c21f43a293e42456746426","sha512":"8f369a55e5160863df14b39a7de81679d556b063da2e18eb1646841956d1e303f0d7035ba9eeecabae89e7650edc0523a0526e2d34ab55a164655fbf74a92eed","ssdeep":"1536:wo25ncjzovmROYXD03xsxYxexyxxu9zZjl1oqfD3AhG1WTccBkq:8JhaPXD03xsxYxexyxxszZjHoO4TB","tlshash":"8ca31913f723a74acd435e7e8bb1c360a7b5be517e28c64ff8522e2dd84b5c64890642","first_seen":"2026-03-15T10:01:13.196311Z","last_seen":"2026-06-08T13:05:59.266119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.434Z","timestamp":1780923924434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 883808\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Fri, 29 May 2026 07:35:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::84tql-1780923924437-a10529d7452e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":9847,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-07-13T12:06:27.390415Z","times_seen":32188,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/code/07fb08e5-7b66-48f2-bfdd-997b846c14cb.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.537Z","timestamp":1780923924537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 27 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:E9:22:A3:B5:A9:B3:7F:2F:4A:F2:F1:B3:24:E6:67:FA:5E:4D:9D","sha256":"C7:59:CF:F7:1F:22:B3:8A:BA:B2:7F:B4:0E:44:41:BD:70:42:35:E3:0A:E4:DF:FE:C0:42:DF:A8:FE:E6:3C:73"}}},"request":{"raw":"GET /code/07fb08e5-7b66-48f2-bfdd-997b846c14cb.js HTTP/1.1\r\nHost: cdn.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 797\r\nlast-modified: Mon, 18 May 2026 11:03:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jeHr5ONcMN27TQC9iPBNmex5YN6LUwyf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 08 Jun 2026 13:03:34 GMT\r\ncache-control: max-age=10800\r\netag: \"4ca28f385aba431965064720e168d1bd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1cc96dfa269d8f804027fd4df8ad9ab2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UtJyhpKFb1nIh_SFZ3z31t3JDTXl8-EZwEpEzp5qd53NhWdqD5eu7w==\r\nage: 272\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":797,"size_decoded":1443,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (527)","md5":"4ca28f385aba431965064720e168d1bd","sha1":"36efc6c625dcf0df7e9a93003d89d1bed820d2db","sha256":"fde15c4441432525ff5d030bdbc77766270168de89e10d79d7fa79fb1b8a5158","sha512":"79de0d81f08a287eeaa9dd9408db37220749934fd1e9c9614246bfbb37925939576e58051f18e2019263ce17a88b1f8c9ca10f2cb4fbd88c1e8e4c0a4234408a","ssdeep":"","tlshash":"6101f1830d7decba05690e99f233e714bf523bd72881d38371eeee1c8e914424818b54","first_seen":"2026-06-08T13:05:59.267837Z","last_seen":"2026-06-08T13:05:59.267837Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":30,"connect":10,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.702Z","timestamp":1780923924702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 07:38:13 GMT\r\nexpires: Fri, 04 Jun 2027 07:38:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 365231\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29968,"size_decoded":30781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-07-13T12:43:52.692994Z","times_seen":8840,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":4,"connect":34,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/inAppPlugin.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.930Z","timestamp":1780923924930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"GET /v1/analytics-js/inAppPlugin.js HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=300,immutable\r\ncontent-encoding: gzip\r\ncontent-length: 2940\r\ncontent-type: text/javascript\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: 3b83648280f0b7b8310afb59dfd650e2\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":10432,"size_decoded":3432,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10432), with no line terminators","md5":"93a2bcd727fe3410865d283a0503f546","sha1":"49cb29a60cbd8f34c339ba97b42a389ef8f69ced","sha256":"a4357525a1f9ac2b465a164923106892ec26ecadcb26aeac5c1f707b661f4005","sha512":"b930a9a147c0ea09bba8a623f65b14c4ebbffb9d317bc881d2bc5385ec8b00ebfd5497ecb01805d2a433b36293c35c2b09189eee95d3bfc0ac0cee71a003bb0b","ssdeep":"192:XJajLJKA8+9ucuKka3YTKFwLMtNbi99xyWez0EcoTaNrKlD9n:ZajVKA8oucuKka30K0Mt099xyn4EXaNI","tlshash":"aa2203cdf7d3f96801a3aabdd17b3423933a7a12701da421f057cac15d6874d9123ab9","first_seen":"2026-06-08T11:11:55.829699Z","last_seen":"2026-07-13T09:03:13.27902Z","times_seen":226,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/067t017v-0k3f.css?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.920Z","timestamp":1780923923920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/067t017v-0k3f.css?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"067t017v-0k3f.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"8d78b7e18a4fb6bcd4e9a77fed2e52a8\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/067t017v-0k3f.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923923923-4578ae6b55e3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":41633,"size_decoded":7697,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27723)","md5":"8d78b7e18a4fb6bcd4e9a77fed2e52a8","sha1":"00ebd29c23502f8ebf504f29f2732400a50bf414","sha256":"dc90c34fec467ac937803d2cfa748e803901d0de7ea30db90d7b343695a5cdad","sha512":"9e14830acf8368376bbe439e4ee79d5d4127341799926c10d6d33bb2042587a40675004b19ade09d648131b8c331ccf097a7f8efa67c7f220866963f5f260b40","ssdeep":"768:WzWF4HBmwbieTuW7N88oQkrByG319zv69:SbieT/N88oDrByG319zv69","tlshash":"6613c830611be83aec63e9f277cc794e7c2da060cd750566ed451601afeb2b607a6f24","first_seen":"2026-06-08T13:05:59.270207Z","last_seen":"2026-06-08T13:05:59.270207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/turbopack-0rq70xfaypost.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.929Z","timestamp":1780923923929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0rq70xfaypost.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-0rq70xfaypost.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"59145f17e766f0a04e0f1084200bfd1e\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-0rq70xfaypost.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wsgt5-1780923923933-8977b89be9c1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10986,"size_decoded":5129,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10547)","md5":"59145f17e766f0a04e0f1084200bfd1e","sha1":"4eb2fa33166656591edbe87a5288dad1be7e60d8","sha256":"78a46f7e590c84f13ef75e8f1720937acc206eefe03c7b5b7dbcaed44d48909c","sha512":"313f2536061e54c3d92e3cbcc9ffad6253ddf845c8500d738054ae1359d0f9c903232f5498ec1b77ccf8129f1fcd49d0f721131731b3ac22d86b9f86ac10cae5","ssdeep":"192:c4gMSBC8QEsg6+9EiZfYGElpETND+S3sBT4fCT3cXX6hfH+yLx1:c4gMStLElWyssqCTM5yLx1","tlshash":"0532c6ea33a6f07343af90ea907f4004f17954a9145e141c93ace8ea2c395a985e3f76","first_seen":"2026-06-08T13:05:59.271151Z","last_seen":"2026-06-08T13:05:59.271151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.380Z","timestamp":1780923924380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\"\r\ncontent-type: font/woff2\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923924384-7361a1a37a4a\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":49053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-07-13T12:21:25.21986Z","times_seen":75743,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.435Z","timestamp":1780923924435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 883808\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Fri, 29 May 2026 07:35:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nrjj-1780923924438-fd2021416fc3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":9847,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-07-13T12:06:27.390415Z","times_seen":32188,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumer.cloud.gist.build/api/v4/users?sessionId=aa91f82a-c8ba-42b5-a95f-34488f94998a","fqdn":"consumer.cloud.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"34.110.164.207","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:25.020Z","timestamp":1780923925020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consumer.cloud.gist.build","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 05:32:40 GMT","end":"Sat, 15 Aug 2026 06:26:54 GMT"},"fingerprint":{"sha1":"6C:59:1E:41:CC:CF:0E:AF:FD:F0:82:60:E4:95:BF:55:74:1D:97:3F","sha256":"89:19:A8:5C:6E:CA:E0:E5:F0:C9:B3:28:D2:8E:56:B8:8F:4D:25:E5:B8:32:4F:CB:B2:09:D4:48:73:01:E9:61"}}},"request":{"raw":"POST /api/v4/users?sessionId=aa91f82a-c8ba-42b5-a95f-34488f94998a HTTP/1.1\r\nHost: consumer.cloud.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nX-CIO-Site-Id: 4197a1a04ff7d41d7e00\r\nX-CIO-Client-Platform: web\r\nX-Gist-Encoded-User-Token: N2U4ZTg0OGQtNDg5Ni00YmZmLTg0YTEtNTllNmJlM2VmMGQ3\r\nContent-Type: application/json\r\nX-Gist-User-Anonymous: true\r\nContent-Language: en-US\r\nContent-Length: 2\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:25 GMT\r\nserver: istio-envoy\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nx-gist-queue-polling-interval: 360\r\nx-cio-use-sse: False\r\nx-cio-inbox-enabled: False\r\nx-envoy-upstream-service-time: 14\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":39,"size_decoded":415,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ca561a61ae483bc02b4449de2697657","sha1":"96d2496e0e9ea786d132c316767997baf37bf43e","sha256":"3e73da6dd56a18d29446649d47c4bfbe5f5d176182b7318734e5d2b7fde05b71","sha512":"537e3e732f7fbadd4786713a538b7ea7e55332603576dbbb5476087ea0f543ba39cb92a21a771249c05fe8f6332fdaf24c05ad38a463f00665c0ca72d808e117","ssdeep":"","tlshash":"c69000220c328e0ccb080800b0033f03c08800ec202c3ca0ef0c00cb03203e20ce0323","first_seen":"2025-12-12T20:02:03.257105Z","last_seen":"2026-07-13T06:41:02.799856Z","times_seen":547,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consumer.cloud.gist.build/api/v4/users?sessionId=aa91f82a-c8ba-42b5-a95f-34488f94998a","fqdn":"consumer.cloud.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"34.110.164.207","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:25.022Z","timestamp":1780923925022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consumer.cloud.gist.build","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 05:32:40 GMT","end":"Sat, 15 Aug 2026 06:26:54 GMT"},"fingerprint":{"sha1":"6C:59:1E:41:CC:CF:0E:AF:FD:F0:82:60:E4:95:BF:55:74:1D:97:3F","sha256":"89:19:A8:5C:6E:CA:E0:E5:F0:C9:B3:28:D2:8E:56:B8:8F:4D:25:E5:B8:32:4F:CB:B2:09:D4:48:73:01:E9:61"}}},"request":{"raw":"OPTIONS /api/v4/users?sessionId=aa91f82a-c8ba-42b5-a95f-34488f94998a HTTP/1.1\r\nHost: consumer.cloud.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-cio-client-platform,x-cio-site-id,x-gist-encoded-user-token,x-gist-user-anonymous\r\nReferer: https://metamask.betmode.io/\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nserver: istio-envoy\r\naccess-control-allow-headers: X-Bourbon-Organization-Id,X-Engine-Project-Id,X-Gist-User-Token,X-Gist-Encoded-User-Token,X-CIO-Datacenter,X-CIO-Site-Id,X-Gist-User-Anonymous,X-CIO-Client-Platform,Authorization,Content-Type,Access-Control-Allow-Origin\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nx-envoy-upstream-service-time: 2\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":555,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":47,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/BigShoulders_Bold-s.p.16pvna0tmfzs8.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.914Z","timestamp":1780923923914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/BigShoulders_Bold-s.p.16pvna0tmfzs8.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"BigShoulders_Bold-s.p.16pvna0tmfzs8.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"9108072b786389ff1b55eb4c574b0093\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/BigShoulders_Bold-s.p.16pvna0tmfzs8.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cwpww-1780923923919-54d69b53c94c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94528,"size_decoded":49168,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409","md5":"9108072b786389ff1b55eb4c574b0093","sha1":"2cef93ce6c248c3519e5d07e795d307a02707acb","sha256":"b43bcd198b9fdf717dd42aa61a34dba32e01aceaeae659d689afd0ca52c37ea2","sha512":"0955eaf331b151991e481c30e66bd487560f902405237024ae2e5b3e0fcd7c535ab36d06171e4c201d7f459926d12b8d26514b33080d51ab717fc2b2539607d6","ssdeep":"1536:voJ6///e/ie+koO7NldZjDLGoD6MXQl0ku/UMVXb+dMQCvBeN1Um0Ig/Zxz6spPk:wk///e/ieYoNldZ86ESQkU3WZx+spPk","tlshash":"9d935b527a037a0def926eb5a671c351b3b6fe44ff27e38bfc817b5a184b0461845608","first_seen":"2026-06-08T13:05:59.274301Z","last_seen":"2026-06-08T13:05:59.274301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0doue9lb.--c9.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.924Z","timestamp":1780923923924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0doue9lb.--c9.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 868321\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0doue9lb.--c9.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"8920bbe3eea10bd55ca7fa7ca956d4cc\"\r\nlast-modified: Fri, 29 May 2026 11:53:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0doue9lb.--c9.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8hg8t-1780923923927-7191fed4ee96\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23520,"size_decoded":8760,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20086)","md5":"8920bbe3eea10bd55ca7fa7ca956d4cc","sha1":"a148007c547b1a61cb5504f3fbdd0610715b4a4e","sha256":"030c1ea3db59e9b2a3704ce7311e9ff1979b24e9fc61c49381a18a0f02459a43","sha512":"122b601d70a1ab5369093723aed271e22acfc20a194c641ebf3195d215002ac1265c27205457e7f6cb116cf47f615b7e90b7ad7018a6232a52ced7ad8ba8a0e7","ssdeep":"384:AbaCn7JB99TOkdFXfjk6vm3zqAmCbzEQ0IcT7N:AmCn7V9KGFPjxm3zqAmCvIN","tlshash":"78b218a9b195f4421ba364a4807f500bf2382976286dd4b0b3e6d8f1b9f00add537f99","first_seen":"2026-06-08T13:05:59.27538Z","last_seen":"2026-06-08T13:05:59.27538Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2Faviator.jpg\u0026w=256\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.263Z","timestamp":1780923924263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2Faviator.jpg\u0026w=256\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 334686\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"aviator.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:00:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /aviator.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923924265-4bf0c77d633c\r\ncontent-length: 5530\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5530,"size_decoded":6101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x341, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"01872e471bd3cf49525e900b465b1a00","sha1":"29c3b675e7b74321b53ed8baad3f691844903ea2","sha256":"c5b7628d11b5469d87be9ded1c498827b9b1fd19f97acbd800acd987df23ca83","sha512":"a174847b28b85590c68e423570d8c53b6d4269681b98ea3726bb52cf194d551d9fbd4b03be462e9137ae15b39ea5727bec59f27211964e7dd187de81d5b3901e","ssdeep":"96:cM6YAZ84bZwQrYOuFO1nqE6eYMY7rR7YdQSwGtO8aAyBaeo5Fl7BF:ENWeoEYMYxcN00eTo5dF","tlshash":"bdb17eb4eb1cc4b756d1564bc17da568634daa0101acabdae16c0ae90164e82b4d1063","first_seen":"2026-06-08T13:05:59.276236Z","last_seen":"2026-06-08T13:05:59.276236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2F3.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.266Z","timestamp":1780923924266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2F3.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1430047\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 22 May 2026 07:19:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /3.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fqrbn-1780923924269-f05ab2825f04\r\ncontent-length: 18516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18516,"size_decoded":19077,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f6bac2906d822499303db1ada2bbf3b","sha1":"3c8b99c2c03040ee369f5b488ac324d9a729706d","sha256":"cea7a22192a837d9866630387785b4de445fe11f550b404843087c428983b20a","sha512":"e6bbbcb30cfc0eae119019a1c7601cd9f57c2f6121c4e267f0a62c5f65518a9eeb881cfdd22ff5f4deca2f0a87cecaecdf55204438bf4a6d773ca4527e2349a3","ssdeep":"384:v1y6MKogMpi5MwqU/Nzd9reCXV1lLqdfIvkp4delPJ9uIqRvGsHI55dsnbvJ:1Toji5MChziCl1tGwvkpcelYJGjyb","tlshash":"a682d021c7b74c9fd804ccbb9c9c9b265a0a9cb5a56350a1a1b2815bbcd875b7f6803c","first_seen":"2026-06-08T13:05:59.277172Z","last_seen":"2026-06-08T13:05:59.277172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Big+Shoulders+Display:wght@800\u0026family=Mulish:wght@400;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.527Z","timestamp":1780923924527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Big+Shoulders+Display:wght@800\u0026family=Mulish:wght@400;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Jun 2026 13:05:24 GMT\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6880,"size_decoded":1402,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e6c6723722603d71b47c0152abcb92ee","sha1":"9fd14b30f42a58ba1c53ec1991425850d4da1039","sha256":"f54b3dda1a62ef02e0f4f8e3cb1580b0288d33d5b12feaf5b7ab847ab4832b0e","sha512":"50b40afe7df0b62d0b1f973fa2d253bb6a270ac58c944154449312efc80bbe9d5396d2691b0dde604742ed0e4237d6d4c4f81c60f731eb919c47088b64828434","ssdeep":"192:c5z0zbazosp4rHp4u7sp4Up4IVp4QKp4rqp4u7Vp4dp4Isp4Qjp4rDp4u7Qp4opv:c5wS8/r6u7/H7Q5rZu7cEIQGrmu7D7He","tlshash":"99e1cba2045ba100eb471cc23bcf7f36ae8fa1557051c5ba6ffd49d99c9ac221364b0d","first_seen":"2026-06-08T13:05:59.278225Z","last_seen":"2026-06-08T13:05:59.278225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.703Z","timestamp":1780923924703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 07:38:13 GMT\r\nexpires: Fri, 04 Jun 2027 07:38:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 365231\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29968,"size_decoded":30781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-07-13T12:43:52.692994Z","times_seen":8840,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":21,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/client/4.4.2/main.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.735Z","timestamp":1780923924735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 27 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:E9:22:A3:B5:A9:B3:7F:2F:4A:F2:F1:B3:24:E6:67:FA:5E:4D:9D","sha256":"C7:59:CF:F7:1F:22:B3:8A:BA:B2:7F:B4:0E:44:41:BD:70:42:35:E3:0A:E4:DF:FE:C0:42:DF:A8:FE:E6:3C:73"}}},"request":{"raw":"GET /client/4.4.2/main.js HTTP/1.1\r\nHost: cdn.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nage: 865619\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Fri, 29 May 2026 12:38:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, HEAD, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 14:22:39 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,immutable\r\nx-amz-version-id: T5tmOH31dRnmOEJ5jj8zK4oABB_o52DS\r\nserver: AmazonS3\r\netag: W/\"9c4705c14ca4d7ed869224035c5f8c25\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2641ce37a88af457fa707094ebf66736.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: QS7xB8-cRIvppHrdk6RQcX7K_Mt5J1M3dyS9GCKzMvcMklKi7gKiIw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56375,"size_decoded":20361,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56371), with no line terminators","md5":"9c4705c14ca4d7ed869224035c5f8c25","sha1":"85676fd4e4b603bde74f198caaac8e51bb428e33","sha256":"80046c209ff29bbca144cc405b48b3ffe4efd8ab952fe67b508b3b418ecd0903","sha512":"37f8d094ffd84f8d0a2e12ead91a48b1a63df696c3249015ec5191685e3aaec4b73aad7f85dfb789ece2b1d21f6674426702017e651a9804611292f856120e0a","ssdeep":"1536:jHTqN9OocTHvP3naZTq6haTI+qBcfBzd1MVm+BMSCzE:jzL7nac61FBcc","tlshash":"3643289932d7743027ea52ea613f5206b33a5965380e8018f12dd9e33c39e9b5277f78","first_seen":"2026-05-15T22:00:38.772769Z","last_seen":"2026-07-02T09:21:10.461727Z","times_seen":59,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event.iconvert.network/com.snowplowanalytics.snowplow/tp2","fqdn":"event.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"52.214.65.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.921Z","timestamp":1780923924921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 02 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:71:56:E0:1C:90:AB:5C:AE:AA:73:02:3D:DB:FE:20:87:75:F3:1E","sha256":"DA:2D:DE:7B:5B:8E:23:FB:C3:3A:97:E6:1D:B2:9F:0E:59:36:B7:A7:2D:5C:E4:C4:EF:F7:EC:33:50:41:FF:2D"}}},"request":{"raw":"OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1\r\nHost: event.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://metamask.betmode.io/\r\nOrigin: https://metamask.betmode.io\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 13:05:25 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://metamask.betmode.io\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, SP-Anonymous\r\naccess-control-max-age: 3600\r\nserver: akka-http/10.2.9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Akka HTTP:10.2.9","description":"","website":"https://akka.io","common_platform_enumeration":"cpe:2.3:a:lightbend:akka_http:*:*:*:*:*:*:*:*","icon":"akka-http.png","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":303,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":2,"connect":33,"send":0,"wait":34,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T13:05:23.400Z","timestamp":1780923923400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\nlink: \u003c/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/BigShoulders_Bold-s.p.16pvna0tmfzs8.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/ttf\", \u003c/_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/ttf\", \u003c/_next/static/media/Mulish_Bold-s.p.0hp7uuipn4aby.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/ttf\", \u003c/_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/ttf\", \u003c/_next/static/chunks/067t017v-0k3f.css?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR\u003e; rel=preload; as=\"style\"\r\nserver: Vercel\r\nset-cookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3; Path=/; Expires=Tue, 08 Jun 2027 13:05:23 GMT; Max-Age=31536000; Secure; SameSite=lax\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fqrbn-1780923923445-09fcd90a8dc8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50566,"size_decoded":10366,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50546), with no line terminators","md5":"8ab12077f6d7a1976dd31fd135f8b90c","sha1":"2a403823ed579f654a881c6ec4762bd64b021747","sha256":"f13ba1e671310377733890389e9d6becd98da9f764110e3136c09c9264c7b36a","sha512":"b84732e1fb67bb5dc5be0bc268be9085e8f954a74360448072529a3728a66000ffbef2ca35cd803618919ce99116513c1419bad7219b0df9c34a55a96ee80fbd","ssdeep":"768:JlOpyHffteUMbNQR2GG/kl3hUMpcYQgCGmxoDwlKYNkh6QPI:QyHfft6NQR2GG/kl3gYQgZEoDwlKYNz","tlshash":"ec33d931a007fd6dec5b5dd8303dafae2a8de316d097ca1ea2dcc9141fc98798b91590","first_seen":"2026-06-08T13:05:59.280541Z","last_seen":"2026-06-08T13:05:59.280541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":10,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2F1.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.264Z","timestamp":1780923924264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2F1.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1430047\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 22 May 2026 07:19:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /1.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cwpww-1780923924267-69d4bc9ed7d0\r\ncontent-length: 19270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19270,"size_decoded":19831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0f495e439a0d36aeec7eb663971cfe4","sha1":"81bc1b5ce50607383f021fdaa6f4d6114b95e484","sha256":"316cfadf5bfa3683728e69e46c92dc60f788179e7415713dd4539dd662100f71","sha512":"e17bc9634695ee694327992e4fe1c2da5f308e0263d4cfa44a0655d7008b2adfd1602db864d2bc505070b29a2cf5203651601ec8c222e193e4dfa616a9dfaac6","ssdeep":"384:7ecmbphAS/c9i3uEm9nLb3b4j/MkEOSNUhO4lo:7eZpmSki3y9nLbUsOSNUh/","tlshash":"bc82d00c6d4f1ca8a6cd04ebcdf83bd5a62b799cf71c750111439ad979c2d208aeb16b","first_seen":"2026-06-08T13:05:59.28141Z","last_seen":"2026-06-08T13:05:59.28141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.912Z","timestamp":1780923923912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\"\r\ncontent-type: font/woff2\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923923916-9a5aeb72c88e\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":49053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-07-13T12:21:25.21986Z","times_seen":75743,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0w_0q6r0e~m20.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.935Z","timestamp":1780923923935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0w_0q6r0e~m20.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0w_0q6r0e~m20.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"19fcf33159eb9387d249ea926fbaba9b\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0w_0q6r0e~m20.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7zdxg-1780923923938-43bd94efe502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":26870,"size_decoded":10340,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16153)","md5":"19fcf33159eb9387d249ea926fbaba9b","sha1":"0655839194eb18cdf1dbec7257199b174840e24a","sha256":"06fccc0f40dca4f8e83a8a717cd5816db9cf2054fbf22ebb8af9f8d59e94f72c","sha512":"4dc02eeb158b604ef3c5765b7391d618b97d51c6f849eaccee6f9b5925a35e902180abf0c043354e0953862c2b725b409dc3f86a15e5a1c0ca52ed0162939656","ssdeep":"384:l4I0zqT2HDu8KKjl4Nrc2cuwL/e/uukx0nBMt70Quk1VkuQoEPkPZ:dLfDK+xcGwj+Ba0Quk1SoEPkx","tlshash":"b4c23d663264fce1029bc1d9543f140cf7391d7a917cb0a477e88ca965a4985b0f3f76","first_seen":"2026-06-08T13:05:59.282444Z","last_seen":"2026-06-08T13:05:59.282444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2Fmetamask_hero_mobile.jpg\u0026w=750\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.213Z","timestamp":1780923924213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2Fmetamask_hero_mobile.jpg\u0026w=750\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 334659\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"metamask_hero_mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Thu, 04 Jun 2026 16:07:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /metamask_hero_mobile.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923924258-8c8cd60b6ce2\r\ncontent-length: 17544\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17544,"size_decoded":18142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 705x576, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a211a11ee7016537f4b7195d0d99499","sha1":"f6c74ae49eb7a4491cde190d9ad4a57e414d479f","sha256":"d20bc72b5b0376d99cc2b15856f14d89486e48060c1fc82622c1e5555fd09e9c","sha512":"16af552d9ca669f940ae0d9d2a55f3b37166064dced854b3640853038486f81e88e782c56444f795a31826b8badbe7767d714220774eaa2c411eba58ac3c4ef4","ssdeep":"384:kFbieasHz204ybgEQSvaCffi7qKaYlIjpozknu:kF2r+i7ybgEQ0aKfi7jlUpozku","tlshash":"5272e15163f43b591b83fa125ae32c09947e5ae1c6a6dd24ac563013f7a48fa6c084e8","first_seen":"2026-06-08T13:05:59.283355Z","last_seen":"2026-06-08T13:05:59.283355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2Fmetamask_hero_desktop.jpg\u0026w=3840\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.214Z","timestamp":1780923924214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2Fmetamask_hero_desktop.jpg\u0026w=3840\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 301206\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"metamask_hero_desktop.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 05 Jun 2026 01:25:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /metamask_hero_desktop.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cwpww-1780923924258-07467d0e36c0\r\ncontent-length: 51218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":51218,"size_decoded":51818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2400x808, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55d3af8842744823491198a03acfce41","sha1":"89b642429349f0d5dda65d4e253fcba018d10b36","sha256":"6763a3c8d55782546e92462d31296aa0d011940132ee8f0900639a0440d62750","sha512":"f1a3bdfbc102b14f932f5dd43deed0d60a3ac12e58354b728ba031e3378a3c572fcfc58f3ccc65fef680b89f013e7bfa095b70382028112a158678face2f02af","ssdeep":"1536:RqHvLG11um/kSYf96dyAZ5t0kWRorqx8QH7UQK:Rus1F5BdyAZ5t0bAW4QK","tlshash":"7d3301812f13d839a19919dd657ed80653100c31ff6ce8ddd5de20b1e9633ae3ca46e8","first_seen":"2026-06-08T13:05:59.284354Z","last_seen":"2026-06-08T13:05:59.284354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.383Z","timestamp":1780923924383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 868322\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"49a0f0b6b0a9d04e32b6428a0cdb5802\"\r\nlast-modified: Fri, 29 May 2026 11:53:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923924386-4aa35e565f61\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94416,"size_decoded":48799,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 41 names, Microsoft, language 0x409","md5":"49a0f0b6b0a9d04e32b6428a0cdb5802","sha1":"b2d2848386beef9354dc08b4bd230fc7dd934996","sha256":"35c156145e954eb9c13f97c282b0f9b6653039baeef35815e7d951c1349cf087","sha512":"f8b4d1ff01722ebc03ef254726815c0583017994ef32ea6106f586bc81a333698f28c651278bc1fc82ebd514f8056b2c67c14af71cd3603f3fa3a8aaddd16060","ssdeep":"1536:E3Voe+koO7NldBgJ2xXVBM1Sv/4gHsxo6loOi0pCvMXOpu9KtNjN36VgkL:EqeYoNldBEYc1oHsxoyOpiKDRS3L","tlshash":"aa934c12b703b90dcfa17e74a571c39573b5bd45be22d387fc85b7aa4c4b84a2982708","first_seen":"2026-01-27T19:46:29.055942Z","last_seen":"2026-06-08T13:05:59.285577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mulish:wght@800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.558Z","timestamp":1780923924558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Mulish:wght@800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Jun 2026 13:05:24 GMT\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1907,"size_decoded":1244,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"124a0a2f6ab8d258171a60c12a6be7d3","sha1":"d6c7d47b0eb5896c04d1966767e6942dcabca946","sha256":"0034f4a69a7e20163ee4ab03583c3e86abbfcb3bb2b9324ccdf773ec88c6401a","sha512":"30f0eb1e38fa99d9e30a1a8065db394141bf977668cc6ca71219738bddec2517eebd2b767c678e60742b5d8bf144533d7bf15644a5d3457dc3b981edb89fb50b","ssdeep":"","tlshash":"5f41ed93041b9500e74b1dc137cf7e269e8ef0967042847b6ffc9a899caac22236870c","first_seen":"2025-09-10T20:57:30.795092Z","last_seen":"2026-06-19T19:55:38.170322Z","times_seen":116,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-NJ47RHVR1C\u0026cid=861719362.1780923925\u0026gtm=45je6631v9185676271z89185657598za20gzb9185657598zd9185657598\u0026rcb=18\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~118228215~118395334~119027224\u0026z=652830987","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.830Z","timestamp":1780923924830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:39:21 GMT","end":"Mon, 10 Aug 2026 18:39:20 GMT"},"fingerprint":{"sha1":"6E:BB:D5:FE:D9:79:CC:FE:23:D6:E1:24:F7:51:B4:EA:C7:A5:3E:BF","sha256":"D3:65:DF:4C:85:93:FF:13:D7:84:DF:43:A0:13:13:AA:81:E5:6D:FD:67:86:0D:30:F4:BD:84:4A:7F:9C:E1:82"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-NJ47RHVR1C\u0026cid=861719362.1780923925\u0026gtm=45je6631v9185676271z89185657598za20gzb9185657598zd9185657598\u0026rcb=18\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~118228215~118395334~119027224\u0026z=652830987 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 08 Jun 2026 13:05:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T12:15:31.103808Z","times_seen":985308,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/p","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:25.030Z","timestamp":1780923925030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nContent-Type: text/plain\r\nContent-Length: 772\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-length: 16\r\ncontent-type: application/json\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":398,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-13T12:15:12.807767Z","times_seen":173671,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.916Z","timestamp":1780923923916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 868321\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"49a0f0b6b0a9d04e32b6428a0cdb5802\"\r\nlast-modified: Fri, 29 May 2026 11:53:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/BigShoulders_ExtraBold-s.p.04302-4oe8dqn.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wsgt5-1780923923919-9a0038b376d9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":94416,"size_decoded":48799,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 41 names, Microsoft, language 0x409","md5":"49a0f0b6b0a9d04e32b6428a0cdb5802","sha1":"b2d2848386beef9354dc08b4bd230fc7dd934996","sha256":"35c156145e954eb9c13f97c282b0f9b6653039baeef35815e7d951c1349cf087","sha512":"f8b4d1ff01722ebc03ef254726815c0583017994ef32ea6106f586bc81a333698f28c651278bc1fc82ebd514f8056b2c67c14af71cd3603f3fa3a8aaddd16060","ssdeep":"1536:E3Voe+koO7NldBgJ2xXVBM1Sv/4gHsxo6loOi0pCvMXOpu9KtNjN36VgkL:EqeYoNldBEYc1oHsxoyOpiKDRS3L","tlshash":"aa934c12b703b90dcfa17e74a571c39573b5bd45be22d387fc85b7aa4c4b84a2982708","first_seen":"2026-01-27T19:46:29.055942Z","last_seen":"2026-06-08T13:05:59.285577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0no1b_s-81nqh.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.925Z","timestamp":1780923923925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0no1b_s-81nqh.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1372185\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0no1b_s-81nqh.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"608d4ef0bb575c7196c6813c2c642b0d\"\r\nlast-modified: Sat, 23 May 2026 15:55:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0no1b_s-81nqh.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923923928-e3780cebfe4b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":195352,"size_decoded":50319,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"608d4ef0bb575c7196c6813c2c642b0d","sha1":"4c1979925316e4c5a2448e415342cd6564de86b0","sha256":"e1b08a0fcb7e22ad79fc66a410c07cf5349e79da6506982e7d74166077a10768","sha512":"d2d8c15df11093042463235f3cc95ff61f4d9fb5d8a53e91eaff03f35a9cebcba4c41c2de5a2fecccc0002cc3fb891637f7539dbd6cc45fe56446f07dc4c2ce6","ssdeep":"3072:0aq6DIlkx1T6Hp6d0rVOAyzPrQwQm9VXLK0v+1K4a+:0aq6DIlkfT6Hp/rVOAgPLHVXl+1K4a+","tlshash":"fc1407f932d1f99207a740a5c03f1006f22c4d77249d6860e3e5dcda756899de2b3faa","first_seen":"2026-03-21T11:33:45.024927Z","last_seen":"2026-07-08T13:30:59.785121Z","times_seen":117,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0v9c2uadhpd-i.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.928Z","timestamp":1780923923928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0v9c2uadhpd-i.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0v9c2uadhpd-i.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"20043e0c52625a9516b59e34a3439c40\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0v9c2uadhpd-i.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cwpww-1780923923930-44eaf79046a3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":226355,"size_decoded":72636,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"20043e0c52625a9516b59e34a3439c40","sha1":"6ea37954cdf4168d64482bd82b160ca939750014","sha256":"4fa618407c66f83a10205f5a25c1abffbfe73eb92d57b91f3008226ace26186e","sha512":"7fb52faab9af48d42db459e26a2768d23884df9b8295e0615e3f84d86a99c6a6aa7c20d6fc24fd8f692d8fce9f30c17e8cbd7846fc9e4a743c32240b513607dd","ssdeep":"3072:CFJtqqM4OGLOg/VNqfxMtmcvlBibQBTGQHyXs0Mug98n+d0+w/:CFJtZxOGLOgNMMQQy8mO8n+d0+w/","tlshash":"5324fbe83955f662aab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-04-18T16:32:26.067355Z","last_seen":"2026-07-13T09:54:21.384554Z","times_seen":423,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/chunks/0d3tkj33oycf2.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.933Z","timestamp":1780923923933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/chunks/0d3tkj33oycf2.js?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0d3tkj33oycf2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"0952ae1a57d7d561f4f16c4b36463126\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0d3tkj33oycf2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76p7x-1780923923936-8672b6c2e0cb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57741,"size_decoded":14966,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57739), with no line terminators","md5":"0952ae1a57d7d561f4f16c4b36463126","sha1":"8dd07917908aac6ab93a33f68c759dda6f56c079","sha256":"2a4653e53a56ac6ea963b296eda9626a685c9838a9603e3ad0280975e118a717","sha512":"203381341c2e9eee890e44b71ab2bda309db48d3105ebe8474d8a75d7ea7a1e4465ae42dbff92153c5271d3ef1eea1e22488816a6a0604a231be93328ee7d5e7","ssdeep":"768:vUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqGmV:vpUQHp3M1VXV","tlshash":"9a43d8b57291faa303db91d9c0370012f2780c7130ad64b4b395d8af799dd8992faf69","first_seen":"2026-03-21T11:33:45.019991Z","last_seen":"2026-07-13T11:42:01.245422Z","times_seen":409,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/image?url=%2F2.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.265Z","timestamp":1780923924265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/image?url=%2F2.png\u0026w=384\u0026q=75\u0026dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1430047\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nlast-modified: Fri, 22 May 2026 10:14:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /2.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r7vmg-1780923924268-3493680003b7\r\ncontent-length: 18858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18858,"size_decoded":19419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c99b061f7ac45054e16e3b55a6df18b3","sha1":"30669aa08a7dd1d8d4341485f0fa1e267bef9ea7","sha256":"688333a1605651349ea791a62588fffc47aa3ebcc3362f23adbf9f4d95d646c4","sha512":"2312b727cdc7052cf661d85eed458b607c9c409de7e44c1cc4d03874b661dc6b3cadd5718038fc1f7fcb95c4e1a63326a36b7827b61ccc9cf0b80a4de472ea92","ssdeep":"384:hJ/VFuaBbzMnvGw8dXB/doeEmtGgcNZ3EosmKijIHD7cef9:XVFu6wvn8VRT61vrKijIHHce","tlshash":"8882d044872dfed7cd67f8a9a540af5c9d20e7938b14dc430077252102ba666d36f1a7","first_seen":"2026-06-08T13:05:59.290672Z","last_seen":"2026-06-08T13:05:59.290672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tag.adrsbl.io/p.js?tid=4cf3097c0eee4fefab42d9b41fd3a03d","fqdn":"tag.adrsbl.io","domain":"adrsbl.io","tld":"io"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.534Z","timestamp":1780923924534,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /p.js?tid=4cf3097c0eee4fefab42d9b41fd3a03d HTTP/1.1\r\nHost: tag.adrsbl.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/conf/01krxc2s0xav882yn45rtc4xxd.json","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.698Z","timestamp":1780923924698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 27 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:E9:22:A3:B5:A9:B3:7F:2F:4A:F2:F1:B3:24:E6:67:FA:5E:4D:9D","sha256":"C7:59:CF:F7:1F:22:B3:8A:BA:B2:7F:B4:0E:44:41:BD:70:42:35:E3:0A:E4:DF:FE:C0:42:DF:A8:FE:E6:3C:73"}}},"request":{"raw":"GET /conf/01krxc2s0xav882yn45rtc4xxd.json HTTP/1.1\r\nHost: cdn.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\ncontent-length: 784\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Mon, 18 May 2026 11:11:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, HEAD, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 18 May 2026 11:03:34 GMT\r\netag: \"cc41af4bab4902277f0016673aae069e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,immutable\r\nx-amz-version-id: JRdhW0vMoTzc3EKm.gfDI30SgGfaGQUE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2641ce37a88af457fa707094ebf66736.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nage: 1821242\r\nx-amz-cf-id: 4I_wLb1FH56MIeIzFV3n7WzImSIeWU00gO5N3iY2FcnZU7K3YzEE2Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":1555,"mime_type":"application/json","magic":"JSON text data","md5":"cc41af4bab4902277f0016673aae069e","sha1":"d94f5e76ec20a2fcd49f685e9bacd1ba8f5f60b0","sha256":"6fa29a9257df8dd5885683cd6333c11fbad407b058c58bad4e90c4040da3adb8","sha512":"c333ac21381c44abb42550ccfbcda9364b0b8c5937d50d9f8aaad63628d34e62489a1f64a2b6e0255778f35f57f645335834f87727365c0a6f1354c8c241e7bb","ssdeep":"","tlshash":"660125513567583d078b16d66c197cd0e369304748c957c79bc98f648dd419ce394236","first_seen":"2026-06-08T13:05:59.291723Z","last_seen":"2026-06-08T13:05:59.291723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconvert.network/client/4.4.2/events.js","fqdn":"cdn.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"3.164.230.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.834Z","timestamp":1780923924834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 27 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:E9:22:A3:B5:A9:B3:7F:2F:4A:F2:F1:B3:24:E6:67:FA:5E:4D:9D","sha256":"C7:59:CF:F7:1F:22:B3:8A:BA:B2:7F:B4:0E:44:41:BD:70:42:35:E3:0A:E4:DF:FE:C0:42:DF:A8:FE:E6:3C:73"}}},"request":{"raw":"GET /client/4.4.2/events.js HTTP/1.1\r\nHost: cdn.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://metamask.betmode.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nage: 1821242\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Mon, 18 May 2026 11:11:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, HEAD, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 14:22:39 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,immutable\r\nx-amz-version-id: M_1U7wLOIlEKiE2SmBwa60rVh13.J375\r\nserver: AmazonS3\r\netag: W/\"94a6bbcf7029be24a6fc7360ad6668c2\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2641ce37a88af457fa707094ebf66736.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: OTupyS8HBaL69nDc3algk1RnA_rwkkRjsHucdotFEwOFNYSJjif2Nw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":59996,"size_decoded":21242,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59932)","md5":"94a6bbcf7029be24a6fc7360ad6668c2","sha1":"ef10544ab3f395e27fc9479d32efdf96b2f1ab2f","sha256":"d19286ead111cf33ebddb78cd5bd8045f50915932a87b398f7f934ab14bdac9b","sha512":"8716a494bf6af491c9fbfd86b06295997671c3709b6c13bc56c41104771482befd019fa9a6f655d30b4e192a182048b743780ac6be97ad76eb96eb9e355b4faf","ssdeep":"768:NKmgDRGNVdrBea4iterXs+UQGbmrtlUxaoPAHEp8CkDECiL20KddMuewBCvvIrgu:NQYBBXteryQGgoPIEpSoGdlByRo","tlshash":"3443e6d936c6f02553a3657a403f610bb33a7e91680e8910e622e9d57c74b8ed233e7d","first_seen":"2026-05-15T22:00:38.668377Z","last_seen":"2026-07-02T09:21:10.465293Z","times_seen":59,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:23.919Z","timestamp":1780923923919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 857661\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 08 Jun 2026 13:05:23 GMT\r\netag: W/\"a43b79a2903c75325ba5ab740af668e4\"\r\nlast-modified: Fri, 29 May 2026 14:51:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/Mulish_ExtraBold-s.p.0g681~-9vo_gh.ttf\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7zdxg-1780923923921-f6e2a05767a8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106532,"size_decoded":50968,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 37 names, Microsoft, language 0x409","md5":"a43b79a2903c75325ba5ab740af668e4","sha1":"9b3870f27552e84bde98622ca2a0a305faca0ee9","sha256":"4c880a6efe6a4040418f1207f795d330c0a1f06753c21f43a293e42456746426","sha512":"8f369a55e5160863df14b39a7de81679d556b063da2e18eb1646841956d1e303f0d7035ba9eeecabae89e7650edc0523a0526e2d34ab55a164655fbf74a92eed","ssdeep":"1536:wo25ncjzovmROYXD03xsxYxexyxxu9zZjl1oqfD3AhG1WTccBkq:8JhaPXD03xsxYxexyxxszZjHoO4TB","tlshash":"8ca31913f723a74acd435e7e8bb1c360a7b5be517e28c64ff8522e2dd84b5c64890642","first_seen":"2026-03-15T10:01:13.196311Z","last_seen":"2026-06-08T13:05:59.266119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KQQ26VFS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.242Z","timestamp":1780923924242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /gtm.js?id=GTM-KQQ26VFS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nexpires: Mon, 08 Jun 2026 13:05:24 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 08 Jun 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153446\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470385,"size_decoded":154096,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58752)","md5":"9b82a9ebce00afa299b97e3e791e506f","sha1":"25a1175e1d8e7543b80c49abd6947c57c4c602cb","sha256":"6a64eed12ae9f3ba34acb49966d877dfdce8fb47cafb153c402d8173d9910131","sha512":"dd4031a099483146b22e0d7e2ba7777373eb38650b7c3020bc9c7bd8328808198c527efda0ad185191dc527ed1f2a28aeb855736497129857999de3a31db1906","ssdeep":"6144:r0NF3GsHPCgbP4V2pXW0w40dicSF1zrd5Q:ruv4evzI","tlshash":"2aa41aceb3d670625393a474503f128fb57a28e2b448c8a9f189dcd42e7499a4237f7d","first_seen":"2026-06-08T13:05:59.293226Z","last_seen":"2026-06-08T13:05:59.293226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":45,"receive":51,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.betmode.io/betmode-logo.svg?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR","fqdn":"metamask.betmode.io","domain":"betmode.io","tld":"io"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.257Z","timestamp":1780923924257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.betmode.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 07:02:39 GMT","end":"Tue, 21 Jul 2026 07:02:38 GMT"},"fingerprint":{"sha1":"13:BB:31:A5:F2:98:98:6C:47:EF:2D:99:F6:C2:BD:EA:B2:F5:BC:78","sha256":"58:BF:8D:7B:75:B7:9D:B0:AA:25:74:49:82:E4:7B:08:4E:F4:2C:8D:7A:D2:F4:82:A6:07:41:37:63:62:0C:38"}}},"request":{"raw":"GET /betmode-logo.svg?dpl=dpl_8VL3Yn7XQhwrMEfawnDo5hAAhACR HTTP/1.1\r\nHost: metamask.betmode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nCookie: bm_vid=074943c5-658b-4bd7-9bb4-26f82a7448f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 868322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"betmode-logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: W/\"4706aad6ad00a7f33c3cc8655626ddb1\"\r\nlast-modified: Fri, 29 May 2026 11:53:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /betmode-logo.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r7vmg-1780923924261-1febbaf7012a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3252,"size_decoded":2148,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4706aad6ad00a7f33c3cc8655626ddb1","sha1":"0077b92211631064d9a3373f740e34c68ff0cfcd","sha256":"8c8d2cad1914b7b66bcdf1bdd5c1202b69f6d9cc4a5e8d7cf666af7a66369e9d","sha512":"d46277a420fb250bb6ea4b6e4dc7628cc44ac00c6567468296953a81297aafccac5c3792227b6ac093573fea72e2f54effb72d2f5fe03c2dee60626d252b9095","ssdeep":"","tlshash":"d26134f267b490acc8221e75eb2a4ce6275f74bcb511438edc3d9604e9d5b89f04bd14","first_seen":"2026-02-19T13:37:20.526652Z","last_seen":"2026-06-08T13:05:59.294157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"metamask.betmode.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NJ47RHVR1C\u0026cx=c\u0026gtm=4e6631","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.524Z","timestamp":1780923924524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /gtag/js?id=G-NJ47RHVR1C\u0026cx=c\u0026gtm=4e6631 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\nexpires: Mon, 08 Jun 2026 13:05:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163918\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486805,"size_decoded":164502,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"6e24b469d79e4059a8890abcaad9e40b","sha1":"36da7031cb7bdcaa305314cb52976e447f8c2027","sha256":"5df63903c4ec5ba44ff1b908d52f2f6b00b229a5d5d1ab7a14b99ade8234ebf2","sha512":"1bc45545f3f73b8cf9811ae6aa54446187a1fa829df71c2afc046bb5f5dd5433f53194ca0d0eb2467e44951d22a552bc4bcf23cf80ab336defa161650f7650b0","ssdeep":"6144:xyo3GsHPLhgbE47c2bXW0w40dicStQoSXDKTl25GrQ:04x47LSohG","tlshash":"68a4e9ceb3d674625296f478903f01cba57b28e2b44cc899b189cce42e7459a4277f7c","first_seen":"2026-06-08T13:05:59.295086Z","last_seen":"2026-06-08T13:05:59.295086Z","times_seen":1,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdp-eu.customer.io/v1/analytics-js/ajs-destination.js","fqdn":"cdp-eu.customer.io","domain":"customer.io","tld":"io"},"ip":{"addr":"34.36.127.210","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.862Z","timestamp":1780923924862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdp-eu.customer.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 17:18:47 GMT","end":"Thu, 06 Aug 2026 18:12:41 GMT"},"fingerprint":{"sha1":"03:92:A4:24:BB:BA:2C:6F:23:79:DF:67:DE:CC:AA:46:9A:1B:10:74","sha256":"97:B6:AF:E8:8F:F1:B4:8A:68:EA:5B:0B:3D:00:69:1C:A6:05:E9:0A:5C:A7:80:48:85:43:15:D3:A5:C5:2E:00"}}},"request":{"raw":"GET /v1/analytics-js/ajs-destination.js HTTP/1.1\r\nHost: cdp-eu.customer.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.betmode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=300,immutable\r\ncontent-encoding: gzip\r\ncontent-length: 2905\r\ncontent-type: text/javascript\r\ndate: Mon, 08 Jun 2026 13:05:24 GMT\r\netag: edb9c0b79254608856b841a0bea4bca9\r\nserver: fasthttp\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9009,"size_decoded":3397,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9009), with no line terminators","md5":"1e62f1d46d8fe23797704e9636bebb91","sha1":"8ca93dee412d82d4391915955b54cabc547d2eee","sha256":"a2dc3e824f206996cd0691f0ead47e401b06ad6703dae06fb04615de165697d9","sha512":"e6b402f0068a045e3284404a97cff00d06360323087a4c00c8cfd1184ee9037df7a8abcf51545dad20d508bf84fc8efb0009905273a1989e4f14dd54beffd3b8","ssdeep":"192:e673ew3JmyeahKqnMfJlCUFag8pUImwyAXu2A:eKVeKMKUc2IO32A","tlshash":"390212ccf6c7f0155267bab4817b411a733ebd2e248e4854f42bcdd52878659a12bf38","first_seen":"2026-05-14T22:19:26.547413Z","last_seen":"2026-07-13T09:03:13.216034Z","times_seen":339,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event.iconvert.network/com.snowplowanalytics.snowplow/tp2","fqdn":"event.iconvert.network","domain":"iconvert.network","tld":"network"},"ip":{"addr":"52.214.65.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamask.betmode.io/","date":"2026-06-08T13:05:24.919Z","timestamp":1780923924919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event.iconvert.network","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 02 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:71:56:E0:1C:90:AB:5C:AE:AA:73:02:3D:DB:FE:20:87:75:F3:1E","sha256":"DA:2D:DE:7B:5B:8E:23:FB:C3:3A:97:E6:1D:B2:9F:0E:59:36:B7:A7:2D:5C:E4:C4:EF:F7:EC:33:50:41:FF:2D"}}},"request":{"raw":"POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1\r\nHost: event.iconvert.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamask.betmode.io/\r\ncontent-type: application/json; charset=UTF-8\r\nContent-Length: 1109\r\nOrigin: https://metamask.betmode.io\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 13:05:25 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 2\r\nset-cookie: sp=0a7f3172-b6e0-476d-8163-4b19de505885; Expires=Tue, 08 Jun 2027 13:05:25 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID PSA OUR IND COM NAV STA\"\r\naccess-control-allow-origin: https://metamask.betmode.io\r\naccess-control-allow-credentials: true\r\nserver: akka-http/10.2.9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]},{"name":"Akka HTTP:10.2.9","description":"","website":"https://akka.io","common_platform_enumeration":"cpe:2.3:a:lightbend:akka_http:*:*:*:*:*:*:*:*","icon":"akka-http.png","categories":["Web frameworks","Web servers"]}],"data":{"size":2,"size_decoded":468,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-13T12:17:34.450331Z","times_seen":436234,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}