{"report_id":"88531671-dede-4c03-8b64-6f64e8c23ef5","version":6,"status":"done","tags":[],"date":"2026-04-22T12:45:47Z","url":{"schema":"https","addr":"rewards-metaspacechain.com","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"title":"Metaspace - Explore the Blockchain-based 3-D Immersive Metaverse","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T04:51:57.63231Z","times_seen":17880808,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-metaspacechain.com","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T12:45:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rewards-metaspacechain.com","ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-04-22T12:37:51.031971Z","last_seen":"2026-04-22T12:37:51.031971Z","alert_count":76,"request_count":38,"received_data":5207812,"sent_data":18054,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-metaspacechain.com/78d1eeb1-118f-44cb-a812-ac475f735ac1","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"085b9ee88344d16145119b7c7b771eec","sha1":"3f5a20a5e4a9c5834cbd6c4d6d1906e01893f9ed","sha256":"e3b91a08665911314a66061aedfe9f976ace9271861c152eaf664cfea20b9ec8","sha512":"aa0cf26369bee76a38a0aece8c261f961f403b9a69e7e937e5a45568035fed3746e7dc17c6437838b34b7cad26a0da14e9672991f14546c28cd2d2dd03751439","ssdeep":"49152:D7OwPEZJsoJHUwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtLkf:v","tlshash":"20f523826c87a9b68f48436570f75d0724d80d1398adb0dbf758f9c1346efa281eb91e","size":3412193,"data":"","first_seen":"2026-04-22T12:37:59.49214Z","last_seen":"2026-04-22T12:45:53.380335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b2e516753346745129cb8d7ccc83c583","sha1":"4365ebfeb348170f94382afc6fded2158404cae4","sha256":"bd1813485955ccda74de7ebfc6284fb978600e9cb259382aa86c550f7a4a9bc2","sha512":"02a12f67283ed79088ad73a58e212c8300fed71ddb8681430bb20e2be5bfa6891b92e00df9f09b51660c94f02d6df5bc9dfda07f705b1c23b627339a468e0dc3","ssdeep":"49152:w7OwPEZJsoJHMwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtDaK:Z","tlshash":"c9f523426c87a9b6cf48536170e75d0725d80e1358ada0cff698f9c1346efa2c1db91e","size":3409783,"data":"","first_seen":"2026-04-22T12:37:59.503823Z","last_seen":"2026-04-22T12:45:53.381396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-13T18:23:46.325377Z","times_seen":3250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c362962e320e20f6b103df73554544fd","sha1":"41d821ae673bdfed580bdc7b9b8eac82be28c145","sha256":"bcdb461a455aaa19ca7c21146f2f96a6284e62200d545d2041ff7fd8fdd0306b","sha512":"bb896670ea9a1dd144464f69a2cb2ea890621f0d153e42e5b1c9a6bd0ad63ae2dafcbf62737c7051e31a7fc1b33f63be72e012a82e50f56cc25a17fb9ae43e01","ssdeep":"","tlshash":"dde0263861bd4631d673054962b963ca3e6400a3bc8f220374accf450fca3eb2960ca3","size":351,"data":"","first_seen":"2026-04-22T12:37:59.494992Z","last_seen":"2026-04-22T12:45:53.382445Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-13T18:50:31.09853Z","times_seen":3357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-13T18:50:31.093372Z","times_seen":3420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6930b36cb8a27d68076a6b6694c07b48","sha1":"2e466b2e56c0deab5b884e0d616b565a27688ac2","sha256":"37bebb83e928352299508968ad12a3243e5212a367a45814e070738572a2a59e","sha512":"5505fa3c7a3877bd66084217eb0ca5db7ce300ee3f6c3e985822f34571c754c234d112afe24c665c476f78faf52c70bdc69119f155863e627836036871946d5c","ssdeep":"768:0dgADcYm09NPlEbO//naH2k38RycHgCWKUMGU7QQEl7tRsJrc1cvc1c7c5cGcDcJ:D09KOnnaWXXILRVMfQEpXFER1w15wBL","tlshash":"bdb350d5a94bd0e08e5520ded473f805e8285923cd6df1a3e62cddc2785df22888b67b","size":112670,"data":"","first_seen":"2026-04-22T12:37:59.499819Z","last_seen":"2026-04-22T12:45:53.384864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/bundle-7cbc338152c6bee4.min.js","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a423bb81ea0a9fc0736d28333de6942","sha1":"8a3451b2bbd07869c8f2ec7e80397a9d7bd16409","sha256":"d3735abb9175968e4d25718188c7809be90452f58638b693f2e7ce939e5c4698","sha512":"4bfa440202c62d28ada96d07a1ed8d414a4048d8cbd8a47f92bbb0199a7564444e9f0e59beece983a638a389af8ca0eadfc67de6a2efd78a45ffd10de54cd474","ssdeep":"1536:qUIoZ2yjKHbG+yD7rIjv3MfQEVTFEr87vQ9J:qUPfmh3E57IJ","tlshash":"11b397c6694ad0e58e1520cdd473f808e8685963cdadf0a3e62cddc2745ef26c84b67b","size":117038,"data":"","first_seen":"2026-04-22T12:37:59.485707Z","last_seen":"2026-04-22T12:45:53.370403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-13T18:50:31.088173Z","times_seen":3505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T04:51:53.507935Z","times_seen":419324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-13T18:50:31.088741Z","times_seen":3464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-13T18:50:31.093924Z","times_seen":3289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rewards-metaspacechain.com/index-847ced0f.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /index-847ced0f.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-24f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1pbonfl0rKwxXyfmJvnUotAGiNUTxLAyOBOsrO%2B0a5wFgQjzzsvSm1%2BAxBPvwo8EY0TuZOBlhzyG9jSzsJtDGY4uO6vcqlajAdm3VAIAqkN9cdS0qGC3G6c91rtATSnyGW8ADpv42Np6JfrAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9a99a201525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9455)","md5":"b0509d351dc48d9a2afcb01f2d2cce71","sha1":"a32bd7a41616472b92161f49028d7014f0730a07","sha256":"d30a9dea9d28ecbc4b68c45dda04d625458c23502c8c1dd627f163508cdb98f5","sha512":"0d87b3ef6101a4706a1df11df3e771432d328d88e04be37ccd114b53267cfc6f9e6b07d7c2b81244bad41f342cd375cbdb9d91d23d619b58fefbf75e52894de5","ssdeep":"96:9ZnrmiGQYMIqWE8PwlIFj6FxLeQub3xcMaVPWwrTineG2vpki2Iu7MQDZPyB:9lrmQxdWvwoO1ub3PaVPWw3XGxMQFqB","tlshash":"701232136a482229f46f8997f093bbdb31404d21a27b47f4fc913975c9cb9a30ba436d","first_seen":"2026-04-22T12:37:59.487761Z","last_seen":"2026-04-22T12:45:53.349468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/stylesheet-3f558032.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /stylesheet-3f558032.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-610\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNtzngiUxHt4FU8AQyHT6oQXuF9GHW6P0oqlYtxaAYNXVk33eeiBQa9o1bxIz9lrlmT2lxAx9q2gIhTQIS9K4qZWhiy07TF9C2vrqulkzzCWKAWDIuSOhPTdcnuUbIzaWJvWSFzv%2BUCPinza2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9a99a221525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1551)","md5":"03e651d0b29c2aa1b6aeef3dd0b71b6b","sha1":"1285a8b28d096e190d125cdbcd1782f3cde699e7","sha256":"f36891449fe514fc8e4de7719b476a5a32d29db04fe18d79af5e6f00b4d7aa71","sha512":"ff1b6d55ffd47a90f042bcbe134248d66344bea33be3346dca97805e1a14da696b84d399c35fb519b7740124a114f030952dcc67482f194b05fee9544731af0c","ssdeep":"","tlshash":"20317a1143194037f3c93cb135e63f13484af2173a4dad678a79844fb8fc5aa4289f64","first_seen":"2026-04-22T12:37:59.415109Z","last_seen":"2026-04-22T12:45:53.350831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 22 Apr 2026 13:33:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pF23CiHJh55IvBNDamwxS6b0UT3XnWAsFkjrCz69cbrOQZL19I9gEctxwXusu1%2B37SYYh93x9G8siQic%2FJwaB6BffUhWSINT%2BYfvcz%2FIq68dMePr9tAMS9if1ZROOW%2Fx%2FkBRMsVYROkFJXQTtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncf-ray: 9f04b9a9ba361525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T04:51:53.507935Z","times_seen":419324,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/css2-3.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /css2-3.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index-847ced0f.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-2d423\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rUt1hRYmXtB4SQ%2FaK1yNMAuV6q9Wo9dAhKCsZE5XGcfeRSVBOhimttnBROxq1YxZ3jbBgm5Hh9SgNoTzFZk5dsuShNQOzMGSed4oAH5HadhFG%2FtDq4dDZ%2FVoUKsYg8uhciyyQtS0rnQImnTxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9aa6a531525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0773e03ffb31d7d54fde6ca563dfcfad","sha1":"60211f2296a80433c82b417ddfabdea7f28a891a","sha256":"770742b04af01ffa075e0a5a50bec886a04dfa286db4fd1b77eca73507a36cad","sha512":"5be8e0419af5f842123f3a1656f3788389bfc600dae3cdbc0d75f1f9b5212a73faf657e8febcc5e9e65ad24f989e05edee0f7abcecab28aecec9361ab459e765","ssdeep":"768:gYvYvYvYvYvYvYvYvYvYvYvYmhGhGhGhGhGhGhGhGhGhGhGhp4g0UTBbbKKXlU1y:q0UTBbV","tlshash":"6f045990087fa204db972dc162ce7e32ee1db29064459d346ffe1498fc9ad5963b2b4c","first_seen":"2026-04-22T12:37:59.468879Z","last_seen":"2026-04-22T12:45:53.354649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/custom-menu.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /custom-menu.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 293\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-125\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6xcIfepsIm4%2F1%2BheibnEUrpBQASbnLi6JKLNjjvtkOQ%2BZEo0b%2Fs2PVLaPHP8yspBISGXL7FEP%2FVneH8NsjFdmsPPP%2BYk9pa1PsxawjQlqtQ46TF7Z6gjlHKdq9WPqnIdHh9R9l4CQeCmTF70Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a99a231525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 21, 8-bit/color RGBA, non-interlaced","md5":"54603a59b0326c4b9c847fad6da90706","sha1":"07a99800336e68ef962dbf02da5fa66f68f30824","sha256":"8fe9e9efe2953e4c99bbe66ef4623584661a0ec483851551088cfe4582960a14","sha512":"15cb560ee626bfcb8103250fcffaf89fede66f297f48e8cb663af52347129d77bc6a8d3feab0eef83c608f885e832268f5ff35e71e8d6acb21aca17e02db4ce5","ssdeep":"","tlshash":"23e0ebc2d6007c6cbeef00b34b9361b0e6be1d8833002c0dac143e10c080b0c80422c3","first_seen":"2026-04-22T12:37:59.398175Z","last_seen":"2026-04-22T12:45:53.355356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/null?e=jscdn/getFile","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"POST /null?e=jscdn/getFile HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-metaspacechain.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://rewards-metaspacechain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"f5uvahyfzdh3dm6eo95o\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvcjdn96c8n%2FzT2nzsN2I3ZL3MwCZl7Z%2BtJupSkVxjJTbdFCF%2FtTld3AzcE%2BXtD860%2FNnCViFKEEl%2FQu%2FjrDq9015h4xryw5sKFzLe3p6x%2FB3wYCDKnP19wpelIX6ugsaVl8UbpezFjM%2Bmm6LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04b9ac6ab81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d5ce8ba8dcf98117e9329c3419a8298a","sha1":"fde2a01dc50e1858314b5572887549e2bc2b19b7","sha256":"0e3ae3475a519a5c9f23858c084d3bcd133111e4f42234e99bf09652c5fd937f","sha512":"98f2673ba8d2e2afa175cfd09e401dedd0e5bbb09a0c20aa3c7395343a79a605ac6b2d5af83d7e2f46586de4e0444e0fa86c9641edd26d0e75db4292fabc4f3b","ssdeep":"","tlshash":"17c08c6e271b3c48c66321742ac3f4b0c28e92a284f84300a444005331c32269acbb51","first_seen":"2024-04-28T11:50:49Z","last_seen":"2026-08-05T03:07:59.9369Z","times_seen":163,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/whatsapp.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /whatsapp.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2352\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-930\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9iVKbh%2FSyrs9K7L7owcYcBhYrR%2B5pnI2hSaynIKSsg8VGeZS0WtLYuzNjvzoNIMKjZ%2BZGX9f73Ezd5YfiGL7lE1Bi0vE9e8Cj5lClNHcBFZJ23qVZR%2B7XxsCdRRD%2FsdPj3nq%2FN3OPqlFVsxwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"c40bfcecd842162468e9e8200c48626c","sha1":"d9d3474c52a157b637012391a90ee4cefb666728","sha256":"bdda7aee91e3a0eb4eac5b00768ab0ad2db914571d5f9671bf86639006c358f2","sha512":"c5a3e5588e498127f832d9f18f0bfeb9827b25354067909ae66f4d799ba12870348ffdeb92844cf95777d3b9c9a708ab20771ccdb5784b01209f76a23978af08","ssdeep":"","tlshash":"c641a708fcb6b8c05709ea4579eea2670a7f47814bc1a051bcda8d5b6970276c40e6cf","first_seen":"2026-04-22T12:37:59.472289Z","last_seen":"2026-04-22T12:45:53.35693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/office.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /office.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1158\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-486\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2af0OwzWirJ4PgHKqF%2FdOn0x%2FGeMkHqSQgMA0UWF%2BQ2V6ze8%2Bw0R0RKUMw2jO494%2B8BFe2qQfJAlG7GxqiKCEPcoSLWavivqp%2F5TgQvTbagAxW%2BN%2F%2BqKWZb7sVKMSxOkC1tihuVfiZAOFdLV3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa331525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"33c5bd3a768c2e07c4c960fda28d757e","sha1":"1d5cdcec5c761c0fabac60ff5b0fd6a022751247","sha256":"ccbd989309a10e91ab00591f6e591994c4ae6d7186771a0ebb7bf24f4cc2cff0","sha512":"b6f14129d8eaecce8f87514834bd08935091f22d2aa214124a77f028d8cda6b3f50b808393efb7ce5cc1b6a116222c7c28e2ec025d270927276e8e3fd66794fc","ssdeep":"","tlshash":"3b21a7ce592e4f09766e58334539d4c651e36815c994992968979150333989430c3bf6","first_seen":"2026-04-22T12:37:59.430024Z","last_seen":"2026-04-22T12:45:53.357503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/css2-2.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index-847ced0f.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-6a23\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60RHTA7zf2hA6rFM9fdFIRMLW5CQ8iHfHtUg5pG9wCztqe6pbv086pYZ%2FL%2FwyOZcrap7ITQUMnExaWSjcuUwNxbGYt3xvkyU69dJYOzPgDKvbStg3xQvAYUMtcf6CYNLrVLN5SKF%2F3%2Fp%2BtnlOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9aa6a511525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27171,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c04e67d71cb757f5e13018539bb09ce0","sha1":"562bb0202043fc2d3e21d31edb9a4e323d9f1dad","sha256":"5b28dbd9f8ae5c1e2837994a2d7b64d5f697f7934b7f849c737b51b0d0c004a0","sha512":"dfad5418c8a7cd97248c26213177bd2c87059bfd5b7140dd15fb77429df0e4edebfa5cf1abe39e66f06b264ec22446bf8edf70317260ba6fa812898436025501","ssdeep":"384:43E31+p+DOi6g6MgugbKK3H3J3kUKAHRn7zV0qgl/N1v9weUz1i1R0:M4g0UTBbbKKXlU1R0","tlshash":"e4c28890086ba104eb971cc127cf3e37ee5da254a445da346ffe0498bc9bca95372b5c","first_seen":"2026-04-22T12:37:59.464257Z","last_seen":"2026-04-22T12:45:53.358146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/headimage.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /headimage.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index-847ced0f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 886186\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-d85aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTPArFr3%2FD0MmKxCTBNFzYo9aqFQBH1SWrzRjRBSsiLqhimL5825FFZ3BkfK9YuSyzkwlYknGSADLWLqPoql0Og3ximnhmcllsqcI3y7MBtCTse7AInN3TEKg2u7ik0t%2BF0OqTFLOoxPAsPeXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9ab8a8a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":886186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 320, 8-bit/color RGBA, non-interlaced","md5":"a4c0049612ed814355c88c8261e524a6","sha1":"9bfb8cd2dfa706c3b635d721fc625e4f2f456a92","sha256":"4392d34b6aad709673a2b95aab1a98e6194b54b55aad9697cc179d0b2c43ecf2","sha512":"577fc5bccee0565701f805b8e51d69f4f9d46f963357b2a8213cea1ba7e6a04a1fa4adfc46f7400e5a25733046bf802884435884b510343f5bafe01f6fec999d","ssdeep":"24576:H06zFJ93AhRjmXTqxbzZ91FfNpa9kdkoel:HwRjaqZfHr6oel","tlshash":"5c1533eeed5018b50abe655f65be4718276f0ae9c3f84348509e1e49abdae0432cd433","first_seen":"2026-04-22T12:37:59.452054Z","last_seen":"2026-04-22T12:45:53.359668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T12:45:22.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMstKAWpvz4obO9EssxT%2FEwrUpyux5aSgFbYdB2UznnQm12epwWM57qkqFrG88Cu%2FfjdC7R3CD5FTealTKkfztSZ8%2FG5U52ZFx2pBPoGQ1Ku8%2FZKCpBGQAf0Oq9vL0zjWfiQdyNH51FmFPfYiw%3D%3D\"}]}\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f04b9a7df60b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11126,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (353)","md5":"3b429af864eb2b54e424ae5b924113c4","sha1":"2f0eaee5301f07f1f05fb8607fc2b8962d1e2744","sha256":"37c57894890a637cb714fab9ddeeea7d0ebf74a7f980eb0116d866ddac986357","sha512":"5225157c880fc45842904345f1577afdfaece36d3b37cfe51a4e79ef7279da06ba88fea7206984191ddf8bc3ee4819514a7597600509d63788731bb4ef23cf64","ssdeep":"192:9X2tigwuCBd29u1lZGu7kXZH0Mp78zbdi0SzCBa:9tgwuO/1P2rVGbdi0SzCBa","tlshash":"fd325131a4f4102b22a2c1d4ba70a71e9e92d10bde4e6a51b1fc0bb9df82ed6cc1350d","first_seen":"2026-04-22T12:45:53.360262Z","last_seen":"2026-04-22T12:45:53.360262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":22,"dns":8,"connect":1,"send":0,"wait":17,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/stylesheet.css.html","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /stylesheet.css.html HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 480\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVRuCXsfxpeipieLe4mVLP4K1BDl8SYyCmB4loqQjkpbpOyOBFFXBaJ%2FFnWuZivBFaXY2rPvOcWdfF8ZL8WAp4jD3wUvAqgWIsmqlhC4EsNdvEaK0lSKleOcMMbBOuhcdwdpxJJT0S0dDGpToA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9f04b9a99a1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T04:51:57.63231Z","times_seen":17880808,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/globalstyle.css.html","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /globalstyle.css.html HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 480\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awhRYTlX4TNilLTHIEoLhvUXZ0%2FvgH4Ec6NNwH9HxEcYZDiXd6G7xrQM66zuzk1MpGljlS25MINJ1pSJiONmS8SSxpYPnvlTGy7O0DMWd7C0QTiJDnxlqPznLDukq7Sn7bypKM26HyARnKKJ0Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9f04b9a99a1b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T04:51:57.63231Z","times_seen":17880808,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/index.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-1c0bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdPXod0wYjMP9PhvlLlPTTb%2F97InMqV0dKMww9JxRGVpuxSD4X%2BmH2EDdAEAyuo7FzK9UkHNnB%2FcvuFlvgCJsadqCp4lFr5qhKngtxbThiZANyI1StBIBXdIOX7EMPMQ0w7lDWqrQONRHQj7IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9a99a1c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114876,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6845765b716c290a3213504a56aba751","sha1":"a93fab26cd7a14dad6e4114293c09a4949fa1a67","sha256":"5807b534f40439eac375198684b4729f5dce022cc748b2479ee9fa93c5dfd77b","sha512":"5357f0f6cc5f0155ffea39a61a0b9ff6f870d7aabc9b368fa31c05e2cde7941940ae92354792ccb79257251cba8b4de7591cecdf498bc1775f72eeddb5898a7f","ssdeep":"3072:iwd+lmWHwd+S6WK/8Cn0PyiPOMp9eUMyfZ+bdCoQcsr9lNjvZA:iwd+lmWHwd+S6WK/8C0PyiPOMp9eUMyI","tlshash":"99b3638b6bf61104b42bd4a879a76758336cd003a60fcdb97bd0315cdf892e456a2bcd","first_seen":"2026-04-22T12:37:59.413215Z","last_seen":"2026-04-22T12:45:53.361801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/pinterest.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /pinterest.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2112\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-840\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsxNluq9rbLyo%2FjlTzrFRizohUeHmuHDK88F3yyeM6DfoJz8jd8e9SyZypgY%2Fr%2BK9tnL4X%2FUxifMeQNF8GgBI%2Bnrh7eTvAuQpPqGQpB6fQQjWCResBkqV%2B5cxis7GHDi8ugoEGsnu3ls5DdYlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"678a7ffdab5d5b5a2829b3e62251f360","sha1":"91dc4ba85266e14b7658cfbd6a0fb3c56eca3eee","sha256":"4d3cf6843f98ded3fd73c3e85bf3fc9da91ac72555d06aa3e3d81dc770a06165","sha512":"062562048586f0b60617558b7479a8c65e55d3db52de3f85204148bb088effb21f83fe7ba93d38677db65912e6b5414161954880224b1decb773de307b07f110","ssdeep":"","tlshash":"84417709fd1099419accee096ceea1533f374bc0ab80a551a8dacd0759b157bcd0d5ca","first_seen":"2026-04-22T12:37:59.462224Z","last_seen":"2026-04-22T12:45:53.362605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/dubai.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /dubai.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1360\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-550\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiDFQalFzNC%2FwumCTZdwhee3woqMPsXHGVpZocgEnVqvCY7M0yxoqbImgiG7xrQhAoldGdjWAcdoYkbAZWZ3wVz5R%2ByqhY49APKtK9L3DXu84Uay3GNqykKgKFSlpR8un77cYkzAv04AUhr%2B7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa311525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"34133091ec6aefd3d5eeec91cdd44246","sha1":"84792a88ea7920a802f19a8f56482fe84ba767d4","sha256":"630339f2703ff820924f9ab50b739eecba42a09d5fc877401416220d9bff2379","sha512":"b5e88d148e00632f21df183a5235db0864582ad4e237df2861e39cd4164035ef1751f8fc45e130a91fa4f1e17b74d14b03e540f1f25dedf90afd193c779442fe","ssdeep":"","tlshash":"1521db6e524578e7d18423c54855f8523dcf041585da5026edb54911c9166c2fb9cd93","first_seen":"2026-04-22T12:37:59.44243Z","last_seen":"2026-04-22T12:45:53.363342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/swera_regular_demo-webfont-af64b605.woff2","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /swera_regular_demo-webfont-af64b605.woff2 HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/stylesheet-3f558032.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17400\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-43f8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGHfq6vZISaWaR2rDq15Xenm9n8ci7LpGsT%2B5ktZ%2FCqEznzLUUprxp%2FXYHn9aIAUD45LcnQWHWFHT62UVpaWLVteGUjxqOMe%2FIrWIGx1gcHNucqEkGEreUoOajhWxJr4GbSoeA1OmRuuAmdOGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9abba901525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17400, version 1.0","md5":"4b6c979aa645f61449ff0c535f67382b","sha1":"c71a328f1f1c8f1eeec4475f9aac92a945bcc264","sha256":"af64b6059a72ef7d20cb2624696124c55bd1ca044d378ad826bf281091f9cd0f","sha512":"ccc9381288c2d5a01a8d52fe8b9967dbc056198aba320719248dbe3c576e06d2df273a1cdf39c36ac67b7927bc7e22858981af1e095a5593be20d22fc4c7002a","ssdeep":"384:jL6X3hrm8WBZxV6B34IeJtzG8kGRa26lXCWddTlZxVt64G7:jesLeB2HG8k2a26M+dTlBN2","tlshash":"5672e0016d84fe54e552f2f483f9431ada95e618d1522cf88943aa9e42c21bd32c3e32","first_seen":"2026-04-22T12:37:59.422434Z","last_seen":"2026-04-22T12:45:53.363968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/css2-3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7840\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-1ea0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3u272%2Fedh3k7kir%2BayXGY%2B87YGQFcTLO4pNh4wTpKtmSTEnUtTwGtfwM%2FgSnO4BUxb27hOPua%2BwRfNIcVFxggTMTvTcwrVzKi8G2s0GEgeJ5IrMIRCniypnXwTSrtiUVWHfxu43EF3rsooqO7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9abea9d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-08-14T04:22:49.808516Z","times_seen":81405,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/all.min.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /all.min.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-18de7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCrZxOo%2FS4pYLdIFuPRYOtPH98d2fyTOVvcl1Wm5t4Dz1VNufUdBPwYx6%2F44vpe6ozWK1IwM1OO1LzMcibvkuHLowK%2F00QeU1zKtmy88vNy%2B%2BQ4cwEQlsukYswcjaT%2F5Ce1YQizTiauZ1qEp%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9a99a1e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101863,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"06a33f5408c26817215bd750d29c1fd8","sha1":"bb123552071d650ae25cf6e5cdaa431e16beae9e","sha256":"55a1f5f5424a5943ea1dc21fb0e9236dfff4d8499ef9e8d79187f92fe6558f46","sha512":"19bedd9498591a35c42d2c19c821cdf6936c1a03b78faf1d38876d565fb62009ff0186c49dd852ca69929df4ca296f0f82d6e8158696ab90ca42019d1becf555","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuSprrlCU:M709gMGFiyPGuSprlCU","tlshash":"3ba3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2026-04-22T12:37:59.405307Z","last_seen":"2026-04-22T12:45:53.365261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/logo.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 20751\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-510f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6t0RolEO3N1hw8TxOim%2FpEQg1lDPXpEuBidctc1N9lZpCOKNZkC7zlukaWqRddsiidlbvvpwpvDXyDOUXMfNHoA4vyyMqZ0A5sExN1hk8Qzw2rkyzR1qNGueJZnxknuM4CdbVVAoodtOptYcyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a99a261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 631 x 574, 8-bit/color RGBA, non-interlaced","md5":"9739430506bd59923a17ab9e4a8f29c3","sha1":"64ad87edc365f49acb7214f0f6c21a7c6c0a7026","sha256":"541c79bc0321277da2afffe2f7107146a09c1928414a355a5ce0344f4ba21011","sha512":"49cf95179d7da1158e0fb08ab444a164279706b3ac43a9b50c66c03072f820dffdaa116dc4e8657b4b4697ec339e5c340c6324fe62be0139721c8828f4b684c4","ssdeep":"384:qBncAMGhtT07OBLDZsGPC3I31Q507c3xOJZgjNsa+Jn8WBSpDbnXli:aGGhtT0SS8Jq0f2Nsa+58WBgDLs","tlshash":"0392cf0d97d19810e887cc2c25e2288b7bf37b981a97c8d7ada8995684305fff7164c7","first_seen":"2026-04-22T12:37:59.401653Z","last_seen":"2026-04-22T12:45:53.366637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/opening-decor-1.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /opening-decor-1.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1480\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-5c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ubVGNc84JHIET6gU2GZkgA4rVrf%2BaxGnQhWHzDawWCRPIbOyVvA1ZLb%2FJo6O9YO1%2F7cwq54CE47fvApzwR%2FC4Xs3NykHYk7y42uEtl9lNsLv2ymHjjG9w0hPRDu5BzBg1%2BzlQmRnB9wvk%2BoxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa271525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 727 x 2, 8-bit/color RGBA, non-interlaced","md5":"0f6c3beadb0f46b7005bd8b7785a147a","sha1":"9bd8f7c3d5efc2a8152603e9df65201243526b01","sha256":"cdd0b2491417fedcf604717b4f2fd19cdf0cd185c96719979fcc63708e3d848c","sha512":"c692b4d8a2c18af32c5c9232a11db7581ddb1ca75b4ac10105cdd240a1a2579171f2d027561f7c614011eec612f0c43c02b85b1eeccd9909134936b7fc964b3e","ssdeep":"","tlshash":"4731455eac605c921049f6060cec620b1f27dbc0abd2b5967ced8d1771302f6ca081eb","first_seen":"2026-04-22T12:37:59.435594Z","last_seen":"2026-04-22T12:45:53.36729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/instagram.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /instagram.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2331\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-91b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WV5ug72Al4SGhGdTfxWy7A7XPJG6eQTm1ZHJCrOD6e5IOeaLTb3LnawdsZB0%2Bo2FxYSJtXkADFE8eb0NaBkfbEe9NmKOousKsap46dEBFFaoohQ3on3CR2yTFCeLb1wXHWfM5YBjo5LrDQOMpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"25a06646fa50f9bfc2064d15f2cedb10","sha1":"54b2614fe16d29c7d091a183185f43bc5059524b","sha256":"2854010794f720e9f05da4ee86a9f70a4d9657c4e51e9cd8004f3287fdfd6ee0","sha512":"d1c6c5ce3c2a4081244334e997de902e84ae12630d51ee672d7cbc07b63a0d3f4ed183c14c4586c170846b99709e9957dfb4105dbda50b8b51e590a722f0511b","ssdeep":"","tlshash":"35417209ed656c4053c8bf965eec71a7953b4bd1cb82b065acca8c5218b11fac908ada","first_seen":"2026-04-22T12:37:59.481202Z","last_seen":"2026-04-22T12:45:53.367832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/facebook.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /facebook.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1994\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-7ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ctNywMvQji%2BBPMPIfi4VNni2%2BFgQ3mT3S2vEF7PodI%2FiEqpqMisSuBx%2FK1R%2BCEQVUKBCxgFkfOtWYc34eHuiQ9j03nn7BjExHs24X4VtJU5tpvzWpwnyo4ur%2FvXtPMCK35GkasvSRnv8cX4pQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"f46b68d161d081542f3058ac713695f6","sha1":"6aef6d978e3af161c139623f8f42497e90996146","sha256":"00be8f0de6470ee31b4008081adc96bd6e9bf20bc5350ab604bf7b20345ba592","sha512":"22b76ff7a1363aaa7af300364e61f3b186237b839e73df8c5c5614007ca377017793ec18d06cc32bdbce4d8330317e70c404ccf0b79645a80da0ab9714aca6f4","ssdeep":"","tlshash":"7241940de9615c10874cef5a69e931e7493b0b844fc2b015bccacc4769311bbcc59ada","first_seen":"2026-04-22T12:37:59.459258Z","last_seen":"2026-04-22T12:45:53.368493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/fa-solid-900.woff2","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /fa-solid-900.woff2 HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150020\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-24a04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNFirvLtwNTJLg%2BQvK9vXvZQ3huig%2BWwR0LoopPVjTtDS0zJ5jFcXP0G2iCsBJgSR9yd997atoebSonU9GBGRdn2nSNDTOVvXn0urIsJnITXS8HKYhROgRcN5oZc7W%2F%2FqrdFU6iiCkmHSFmoiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9abea9f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-14T04:31:53.001782Z","times_seen":41052,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/logo_fav.svg","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /logo_fav.svg HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69e66cfb-89f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE9C3H8BDEp6hqkDlianD2%2FYW%2BUZV2j5Yw9CNP0GIRtD8EphB1L9gOk%2BBEypJceeZc5B%2BQaWDbx7H4e6PH%2B%2FiQus103i3jyjZT4faWi2iQ2gACXxAuwzJ8pea4bATmX%2Fr7r9vz6Hi2nimcZOOA%3D%3D\"}]}\r\ncf-ray: 9f04b9ac3aac1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97706053363106b5c3c404bfb06a0529","sha1":"1ccae10c91e86e892a85108ed1671d5dc50b4328","sha256":"06f9d2b63afae308186c3a14202e50c71648e60eebb882a7c3bc37a413869a67","sha512":"3186be9383001991905bd8b29ad32f5beb6ebc67ae6eb16bfbee24bf9215d020a3b6bd5a1eca4e99c47612acf76a1a6df0e2ce40d5cedd48e461bc91acb0fca7","ssdeep":"","tlshash":"5e413e45630d397e65520182c339a6a276fbac43e63165e8e1bf64bb7306ce008d0ea9","first_seen":"2026-04-22T12:37:59.457544Z","last_seen":"2026-04-22T12:45:53.369688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/bundle-7cbc338152c6bee4.min.js","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /bundle-7cbc338152c6bee4.min.js HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-1c92e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kRCoZhW9updYClbRbip4AC99RJniq1OMVSKVQye1n%2Bb5mBwDBOXY4PPsD%2F36O05aHW%2BKj8BfuIZlbAiLMOix%2BPp9JwEMf6zoGcAd0%2BnwqIYB24i%2Bn282huYCoqW9sfTQaxiIfleuBorvkZNYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9a99a191525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a423bb81ea0a9fc0736d28333de6942","sha1":"8a3451b2bbd07869c8f2ec7e80397a9d7bd16409","sha256":"d3735abb9175968e4d25718188c7809be90452f58638b693f2e7ce939e5c4698","sha512":"4bfa440202c62d28ada96d07a1ed8d414a4048d8cbd8a47f92bbb0199a7564444e9f0e59beece983a638a389af8ca0eadfc67de6a2efd78a45ffd10de54cd474","ssdeep":"1536:qUIoZ2yjKHbG+yD7rIjv3MfQEVTFEr87vQ9J:qUPfmh3E57IJ","tlshash":"11b397c6694ad0e58e1520cdd473f808e8685963cdadf0a3e62cddc2745ef26c84b67b","first_seen":"2026-04-22T12:37:59.485707Z","last_seen":"2026-04-22T12:45:53.370403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/cross.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /cross.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2040\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-7f8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gplCAgKn54DDpILTiTXqxRC9yfLJUXsmd20XHxQkmFIuFeWclaDGFznerGz90bwznmlc0SXXXatwFokFQIyGD8hxnNUXLxIx4JiBxix3Enu96knQhRL6qr5Wnvk1XaKPmW1TTr8cLb7ckxhsYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a99a251525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"4b672e5f2a4aac896e52d4fcb546c244","sha1":"ed8ec28572cbcc11e6a672867ae0c89bdfb34663","sha256":"d71d2fdcbbcf4d2c91c10dbd9014eb4ae84f5b2c298bde93d3c41e7b8f7596af","sha512":"b44220b8c5af6089890cb0774b69edb643cf90db3217796b4c3824ea7c65caa7521c652b2bc5f7d87e9af7e64d1ef44b1d9ad7de475505c8b7ec279f5bf06973","ssdeep":"","tlshash":"c941ea48f982bc52c49e85d924db91f2c4724f0086e8ffb57efd510902726b1421edca","first_seen":"2026-04-22T12:37:59.41685Z","last_seen":"2026-04-22T12:45:53.371826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/css2-1.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index-847ced0f.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-1d8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6EeCpkoaDfcWyrpni1GjKuzs%2F9YT4rE49%2BHnt9UAsbAFk%2FXQRRuPQuc1NWnPDHjSsb1l%2Fd13426B7a85PF1mgLwk5ck9nmc0nvlvUuv9Sq7PpxhmZMUpQbgp7a%2BD640jwcoPK34U%2FQsxEb2Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9aa6a501525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7564,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d65b461fc35f4aab49eda5c6031d0fa6","sha1":"adeaa5ffe4dc6886fc23e681d7fe406b37ddb332","sha256":"5de41dc0ae0cd2d922ad8685f4108084e3834aa39c6e7e3528c6c1680a3cb877","sha512":"aaeb028a68850af75dd746f3f3db3e3072cf996aa77b715f8245815e90b726ac05cc3bba0888762b613e0d33a92fe3cd9dbb8c77ac3b3d09a90c4990be214714","ssdeep":"192:43pW33pzn+B3n+DOR3Obr+E3r+Mx+i3x+bpROp00IFK1AUMq66O:43E31+p+DOi6g6MgugbKy","tlshash":"fff16a90086f6604d7931dc127ca3e32ff5db29164499a34afff1098bc9bd699362b4c","first_seen":"2026-03-25T15:03:28.946368Z","last_seen":"2026-08-07T21:29:27.502928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/css2.css","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: W/\"69e66cfb-5d60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 480\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH4UFt4GjFOiCjgbS0ZfwZHAtDC%2Fz%2BmpirO0Tksx42vLY1mnwnbt6L74Uwfv5UWav7VX3VkJ44NgeHtek3KPQv3bkBjh7O6p%2BJU8vvcZzPkqpTbVlKfphFc0mdQFnGPIRp%2F4VL3GLm8KtnWUTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b9ab3a721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bb674f094ed4b7e3804ee1747a247902","sha1":"be972bed5c6ab65e0a1b051e6e6119cd2d786b6d","sha256":"969c55a27265e9bb8968585ade0d2c93ff60ae97ab9b3f674c48019923981e1c","sha512":"7f811f6776763c37397670b0d7348b4e3588bdde6ceea0d79d101a8b31de0406643b467226ecbdde7f5707670c98c35b319f561a5d37ad7a0c97251d2ace3159","ssdeep":"384:5QJL0Rxl/JO0eqwyJ10/PDZJQ0sgOcJ3099RLJa06G8+JR0brvlJc0Ic0wOViu2c:3","tlshash":"6cb2cb91046aa100e7872cd577cf7f329e8ef284b045c9396ffd05a9ac9ad6523b4b4c","first_seen":"2026-04-22T12:37:59.475658Z","last_seen":"2026-04-22T12:45:53.373071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/css2-3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23580\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-5c1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1Se6eT1F4NyGyxV08Z1Fy%2F1Oo7jsiXZ9NZN2pheYALo%2BitwR%2FmHKPiFLYM1lEGh8zQNsZk%2Fw%2FuYJVyHr9uCxwVqR%2Fj0AhUvCT2WZj67iV91SfJeRIcyKxsM7rXooPm2ocxjOurgKygMWyvqtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9abba921525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-14T04:25:09.347481Z","times_seen":256532,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/twitter.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /twitter.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 910\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-38e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJVm30Ano2biSFIr%2F7hiJyhCJSE61FhsfMlUGJXtQG6eGWzQE7q%2FSLR7AMfYYfHVWukjqxmM7J%2FPPs45XjfXzUCD4pfBtx%2F77l041jH1ksypNAyIxnXwPlYU56e%2FvB%2BwZmfaxqBzPgq3TKpmLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"93677bab6152eccd0308d7643ec9848e","sha1":"151a36201df156ca52c505c38642f0239b4e550b","sha256":"646da98cac06e6e2df7c57e9898930085be25f38bd4bcd9e744a164563a6ca8e","sha512":"ef21277b0ccea7db135c7a3eb3b49a466ce7b53cbc13f7075c2b6ad138af772e7c2643dfb9244782314f6064386424834566dd49540bc9cdc32fb1e6d933570e","ssdeep":"","tlshash":"6311b7c81208b0f5772498fe0bb9407c584a6e1e0e2a0608eff1d1544cd178a6a7cf3f","first_seen":"2026-04-22T12:37:59.446767Z","last_seen":"2026-04-22T12:45:53.374394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/youtube.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /youtube.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2119\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-847\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOYvOz%2Boxsj6vvqY8XkFIHet0cK9s5snb9UJREjmVh5CNyKgtO8nIPfvEDKchXnEOPTSBRo7AdRQl8nL3nOvDqvtsPDnJidO9thh%2FJih4qS01xTPma2qaSbx4gUgSkjb8cNo5GlmJyCEr8ggNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa301525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"8a35a02b8f594828bb94fa8e670cdab9","sha1":"36ecc808d9110fd18d3e51c48347abacc1b5ab31","sha256":"a39c536c737bf63ec741870fb53a821f3610831d942356889e7887aa3fb84f9f","sha512":"08f0a89bd4fa3b65c6185a59aac673bdbfd2d2b948a559032ec01b7675e92507ffc19cab621a799a1720b3956701e5f754365f4dc534c3468ba9cb51c44a315e","ssdeep":"","tlshash":"78417409fe526940950deb056cdab1b35a7a07d08782f105bcca8c5698606fac99c6cb","first_seen":"2026-04-22T12:37:59.428667Z","last_seen":"2026-04-22T12:45:53.375635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/india.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /india.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1298\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-512\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hXy%2Fdmu5wZhK%2BlQFtI3KOLqol4T%2BtKouaE1VgtUWMLW4OX7aH1tos5YuZAoJ5c5CExxL6KRmsfEE5z33vhEIE4tQvpfWrdOq3htQ%2BpaLSCOgWag8sGKAdNW%2Btu%2B4Y1h1cuwOVLIY1Hc9DrROg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa321525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e63316803878c279be3fdcad800ff6ef","sha1":"a8584339f068b68aa7202f0dd0438838bbfb63e8","sha256":"a61e4a8ded27938aa04e14796e57fec0b172b71d570264103fdf59daaa04a9bd","sha512":"94e637711d9bb6c33f388b59cadf8fa60a6697a3274185b9a7e97acba4e4eb73be9fac41a2548665bd467627dc6d73640ef54c94e28b5494b6da141c9f70b6a4","ssdeep":"","tlshash":"252128c398f0a3f4913c3781bf5e88b311a236472ae021a5cc3ae04660b16c863d0f54","first_seen":"2026-04-22T12:37:59.418951Z","last_seen":"2026-04-22T12:45:53.376371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/footer-line.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /footer-line.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 11401\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-2c89\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iP38QATdcbdFRy6qQ6AlaIWiKRcVhMygGnUKZirfYer9sfils3NhYLbAE1tcFLjKZ8NwPw%2FUhafo7ZJ366f0%2BWyWeJHWhkZJ8K2oF%2FWb7CA%2B9r1Nx75tcgvLjQaya9cQcYAgJ4L19sfaRYMTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9ab8a8c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1438 x 110, 8-bit gray+alpha, non-interlaced","md5":"d457d1de14a017b16be7dabedc887226","sha1":"15e0e95fdbe34927c6718e480a17acd53bbd3e6d","sha256":"7e79b5e14a05591fa84932f940d68773f4d01d9287dbdad3c098993308bb145b","sha512":"a056e4d7ea9ebcc8882b2815b96ea64b1a0128c92a8c591e749190d0e7b4d56644e1ed5a52663c4bfe3eb94a456d01a65f315f3eb634b3844d775c3793d9082d","ssdeep":"192:BSPknTHrdDbh1aFEh/zjdwJWIgr7+EpQ2+xmAr93xb31DL2wSMh5ECfefdBDIgPW:o8nTLhHiEh/zxpIgr7GJ1h2BMh5Be17+","tlshash":"9c32aed8f71814e3595aafd46dea12794a731e848673b4277e9c8d8f20a51f8dd0c1c8","first_seen":"2026-04-22T12:37:59.407901Z","last_seen":"2026-04-22T12:45:53.377023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/secureproxy?e=jscdn/getFile","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-metaspacechain.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://rewards-metaspacechain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"f5uvahyfzdh3dm6eo95o\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYnUBrSGTAQE7FnIU9lVrKuYIbLoUZ4XNdZ20ExZYXUiNdV07lUX8ae3bQNM%2FHJtfG0VM61tDP%2FxAWu2Vj0jgd7XnMCbDhD4vjPeSZXTkWtAcxWRkv2KtxyfpnFrpb1s4zQJG5w%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9ad9adb1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3412193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"570cc505b87aef74a00a1c67c10e1348","sha1":"1b05bc3de7c79435b214cdf05eb745fa06a0b260","sha256":"3d05fcc4813c53433255688304e1d9a33fa2394b812fae9ad6165b3335b74894","sha512":"b9b87c6144e3a9b49212f3461f9fff030871945cedea9d5c6d61cd3a9d3ee7f914c680decd17414b4a1b88a529fd1888e6594d90a41ff889a268c33512dd499b","ssdeep":"24576:DV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdBCO:D7OwPEZJs1","tlshash":"912533112d93fa658f4c6baa74f7ae0365804f0349cda4cbd8a5e8c031687b583de65f","first_seen":"2026-04-22T12:37:59.410351Z","last_seen":"2026-04-22T12:45:53.377617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":665,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/telegram.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /telegram.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2254\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-8ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dv53s8wNjyQnyctnMhrnaIkVup%2BjVYsfCTezDPW4y0RfX%2F0vtSkNB2Qhx30BWUrv4UZBJSRxjvrzPyICJEVpH2refvJqV07HIfZDmEE0SCYcrR99ZJWdcxjhymkbKe7TDpcy0xSkDvcOtk7KXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa291525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"746da1ddd17acd07d50fc68d45c86785","sha1":"89a64faf38575ec74217ab34c001e1febd86545f","sha256":"42306266302ef8169237f4fb311d4b1b37a5bbb70198c4f76dff192ae384d664","sha512":"c930f1e3fe8c105128ed8d5d8f805b55acd4b4af9b2da8f6634bf25db7eb6bd81b9d380b4aa083c780eebc97bce9e3afe365138cab874a1423083c70b16e72a7","ssdeep":"","tlshash":"2241a44dde35ac01468cf6986cec62975a374bc0cf85b3257dca89075ca02f6891c6de","first_seen":"2026-04-22T12:37:59.43418Z","last_seen":"2026-04-22T12:45:53.378179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/discord.png","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:22.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /discord.png HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2271\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-8df\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mmh%2Fgt9%2FJvDO6CJy7bpY4WofTkk2AHNXPqOOD%2BfwUgsWrHO3b8gHvIUaosYAzkXXFe9GsikZfrMmbzN70SIWUKSZm254Q9YjAGS0%2B26GaBP0t03hIY1gdbMYNYW2VnDiEK0VKex%2FeI%2BQq01%2BLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9a9aa2f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"c68577050199c72459b7d1b10dbdc388","sha1":"a8152943225405f70f5ef8e7ceea90e2965e84f3","sha256":"fa18fc92d798a5af08f6bcc600e0a303da6a2f2033f87732f00795d2bca3cdd8","sha512":"c4b190e36a22045744dc53907e9587e250567786ef89e538c58b7cad5fb2e0dad77911bdfe98657a6f2025f9abc1ddace1c9e6d7b21735b71ffaf70ce50b98c7","ssdeep":"","tlshash":"17419a08fe52dd41574deba5add834931e3747805b51f051adcd8c536d502bdc80d8cb","first_seen":"2026-04-22T12:37:59.420598Z","last_seen":"2026-04-22T12:45:53.378742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-metaspacechain.com/swera_bold_demo-webfont-0d668cb3.woff2","fqdn":"rewards-metaspacechain.com","domain":"rewards-metaspacechain.com","tld":"com"},"ip":{"addr":"104.21.44.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-metaspacechain.com/","date":"2026-04-22T12:45:23.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-metaspacechain.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 17:41:16 GMT","end":"Sun, 19 Jul 2026 17:41:15 GMT"},"fingerprint":{"sha1":"43:23:27:3F:DE:36:13:FC:B3:66:D1:DC:3B:BE:B8:27:67:E3:CF:F7","sha256":"B1:C6:C9:75:13:E1:96:58:49:7F:E7:1B:E1:EB:6D:F4:EC:26:85:9D:17:BA:41:1B:93:7B:35:B8:30:63:0D:E6"}}},"request":{"raw":"GET /swera_bold_demo-webfont-0d668cb3.woff2 HTTP/1.1\r\nHost: rewards-metaspacechain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-metaspacechain.com/stylesheet-3f558032.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:45:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14716\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 18:14:19 GMT\r\netag: \"69e66cfb-397c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 480\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhSy3BNe%2BDFwARWeHn%2B1ocR%2F7r9rZ88jJ9Q%2BsfhQ6%2FwNHXuFS%2BahrFSx0YZQoHH3q9XLFGX6thW2rct48vz%2F%2FRjYJqvVt2XFPyL6p4wdp6hRYMQQdxN8DwmxkLzIIu14UbYLHxH52dGUP%2Fuasg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9abea9e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14716,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14716, version 1.0","md5":"f55e49ec5074275c3bacdfc225ff901f","sha1":"b211bf15092545cc76f6104d2e71c0fb15c22d62","sha256":"0d668cb399edcf009e83de29d34bc10dc23b88b0f65f5ce702af754e24fa6128","sha512":"1c98de7a486a87803f35b085deebe076ef025b77097c1adeec018345d470e492e1b87bb1cb3f86719cb6e6d9778899c5e0d2a8f3c7bbd86e66997c31286fd13f","ssdeep":"384:aZ209FyEVRPcdNeyNcafX115Y+6up6UQoSCqZ:aZd9FyEV9cqyNcafvEkqZ","tlshash":"4f62aeb280e298ab80396dbf346d6f7d404b6bbc5b03173be50672494093d6d632d5bd","first_seen":"2026-04-22T12:37:59.437376Z","last_seen":"2026-04-22T12:45:53.379346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rewards-metaspacechain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}