{"report_id":"8d3090ae-3177-4f4b-9648-fda3b8893dbb","version":6,"status":"done","tags":[],"date":"2026-05-15T17:14:15Z","url":{"schema":"http","addr":"bakkt.art","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"35.71.138.125","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"title":"Bakkt","dom":{"size":25394,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18845)","md5":"2f5132414b9a1399e96b4dbea8715aad","sha1":"7e01cf163e984257d3c2b061afdd1f34334d587b","sha256":"523f63bc5114f7b7c2d87635496e09ba0e9db154bbfde6deec0b4ffb3c6d4dd9","sha512":"867a4705ab24bc7d0357241ff93c0b0e2d7b0d9f143afd2e22612b4afa14fe7525ad456ca967619beb6e84f5820ed7d6c6b7d06ee99cd07b065a4337bfc47983","ssdeep":"384:c+69dZCxZ2Wy+kmFpFOcFNFHzy2nE7et7Gwk8mAtjgvlW2LrSiYssS:c+6dQxZ2Wy+kyrO0XHRytlYssS","tlshash":"09b2aa71aa8610ab07aba9c1e0b07f5e76b3f71bd44f80087bed95890fc3cb1b585561","dom_hash":"domhash33e2d422284abf39fafbda3da86c1a10","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bakkt.art","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"35.71.138.125","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T17:14:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bakkt.art","ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-05-12","domain_rank":0,"first_seen":"2026-05-15T17:14:18.606943Z","last_seen":"2026-05-15T17:14:18.606943Z","alert_count":33,"request_count":33,"received_data":2792106,"sent_data":13492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adminapi.mevpro.pro","ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-15T17:14:18.619955Z","last_seen":"2026-05-15T17:14:18.619955Z","alert_count":0,"request_count":6,"received_data":55226,"sent_data":2920,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.mevsplit.com","ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":0,"first_seen":"2026-05-15T17:14:18.605513Z","last_seen":"2026-05-15T17:14:18.605513Z","alert_count":0,"request_count":35,"received_data":954647,"sent_data":16954,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bakkt.art/assets/vendor-7265dc44.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c157c5b892f7d8cb9c3f682d4098fba8","sha1":"21b977efd627db50955123eea5a3f7fbc4f256ad","sha256":"62cafed0166ea0da43055523ad6a750957bd9d1751b4792e63043760db9b183e","sha512":"b9b91bc40322ff20f15b29eaee917e1b49184d3aa16b8b2157c1fc4c80a0e65ee9a83d6d96194d2ecf1a938fdb14054392e12bd7214c6e3e4481fd24d8dd8d58","ssdeep":"12288:JDLgPDVUpZQaADivX/GXwjKcrTvGl2wLupA46B1:JDLgPDapaO/gUKcPM2wqi4E","tlshash":"a0a418d931d2f02253bb24e6007b0006f33e5e59780ec594f169e8da3d7a99992b7f2d","size":479875,"data":"","first_seen":"2026-05-15T17:14:37.705198Z","last_seen":"2026-05-15T17:14:55.603611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-05-15T17:14:55.646183Z","times_seen":628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"db4ca412ecbc40b34fd50590b9b305ab","sha1":"e9c3076ea1126674992554fe0e429c076f802cdb","sha256":"85377866888252944d002973bb170a223590c72759557ed5bd6aea01b5cd3000","sha512":"49af373997cd963ba6e4ec0ea1dd54f1eeef05e191dd86506bc5c674b6dca54c82f575e4c8240496ded8c755f9dd99cf47f3a8638b323df6fe62bdecb06be803","ssdeep":"","tlshash":"00c08cc4a0c22d20261a681120af28e4a024402a70481b068dd5dc4d2e634b08233e99","size":148,"data":"","first_seen":"2023-07-09T14:24:47Z","last_seen":"2026-05-15T17:14:55.655139Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-05-15T17:15:24.777968Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-f915e7ac.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71131dec267bc3463692f67786e49844","sha1":"d1400da2a2bf7172cea394786d166adfad18ae20","sha256":"1f9fb3d6f30405a18716fb73261b0cdefb1ebc1d7d24fe6d4a19a8364a227d8c","sha512":"1b27dd6e78827aed9a515444bfcd7ec15a5dc4325387c80364f9bef0d19b159560a5ecc1e91f57c67bf373ef66ee4caaacbdd10146c68e028a5c6ecb12199dff","ssdeep":"1536:xXMQazKctWFBiRSx9/fTs3BhRdkvY4EHY77DhExtTb5H2ni:lMQazHRSx9/fTs3PsLEHY77DhExt5d","tlshash":"aca36c89640a0fff68fe084c795a4950206c0f9759ccc8d3f6aeae5627f9dd1a34d329","size":98378,"data":"","first_seen":"2026-05-15T17:14:37.759479Z","last_seen":"2026-05-15T17:14:55.602189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-05-15T17:14:55.650501Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-05-15T17:15:27.196165Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-05-15T17:15:27.186111Z","times_seen":964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1f0b11a3b52ef1818e06906d230ebe0","sha1":"01663baf5a4f16feb34171155868eedfecc6078e","sha256":"b91239c2aa9e85826a729a962d567f2c6a24a4f96a3100f7f94e92d506e64bf2","sha512":"ad442081ef9af7e4c9c3c6d990dbf7e5f6493a4be22d4abec5b37393b45de0999c04640e6840b51b1d28a978d343ba632786dbab241314121aacf96b1aacd046","ssdeep":"","tlshash":"d611abfe291a60296313804f976b7811643650a9000a184177cc9b9dbb9abbdd0cfb8c","size":1048,"data":"","first_seen":"2026-05-15T17:14:37.784039Z","last_seen":"2026-05-15T17:14:55.644948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-05-15T17:15:27.220066Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b8b4463eeb70169eb4d12cc33b462574","sha1":"6f657730148df2cec4f884d75e43ef6844210bdb","sha256":"53707d38ae6834679a798d5f30d498032b2331fec12dbaa1eb5ba04715a16219","sha512":"147cde5cdd772c813dc519a88ceb611e74b086895ee3b3ef1e7189667b50d3daf36b5a8bd5361745ab874eddade45c99708daa4475dbb9602462e2cd1b1f9742","ssdeep":"","tlshash":"62c08cc5a0c26d009612645019af35e4a0348426744c1b538da4d8483ea20b08233eec","size":147,"data":"","first_seen":"2026-05-15T17:14:37.785367Z","last_seen":"2026-05-15T17:14:55.651945Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-05-15T17:14:55.648398Z","times_seen":482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-05-15T17:14:55.649091Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-05-15T17:14:55.654304Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-05-15T17:15:27.18379Z","times_seen":1270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/en-60e98932.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"344455280303dbb4cdd18711ef328a06","sha1":"8e0d27606ae92ecfd6e41d3b4e8bc5bf5c746bbb","sha256":"332375002393bf7ea21bc14edd77ede25d662c694eaee063488b9911b07647cb","sha512":"b7cece2a0f254844a23b431b78878169bbf4614b298e2c907bad3fe359886db088d5fe10d73a987f166a2e0fd67def9f1a74f14aaf3ac94e9b24c916b6a038f2","ssdeep":"768:+GtZcEw/o7rFOuAFsiLAMCzrAaAMVl7oP6+6sPGsW1mBO6fpk7aOLnu:iponFOue8zrd37LsPZWrLnu","tlshash":"ba03d6893e1a989a04f35376b4ce6e1124f60ac18255881f4fedc9fd53e2b67a363734","size":40605,"data":"","first_seen":"2026-05-15T17:14:37.765395Z","last_seen":"2026-05-15T17:14:55.637387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/charting_library/charting_library.min.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-05-15T17:15:27.14342Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-05-15T20:26:01.898918Z","times_seen":34017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-05-15T20:26:01.89939Z","times_seen":36943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-86d3fbad.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"787b473b08de4fb9997286414e66cf36","sha1":"caee0f0c6fc041fac727df1f76606fffb7200cea","sha256":"09a675e7f118065b2d3a7124ba4e5f08cc5044803fa2ba0d424de5c57f1b2bb3","sha512":"42ec309c1cd77008848ed782ddb57c9e18070145c2ea1a4752b7d43585c242e1c7aa436a6b76f0f9e3e4e5ae6338397c0d491b08e78cf0a49a4ca123177ac468","ssdeep":"384:Mcww30gtIpvXgaQWVAJK9FSjfAs0GLdfvEk7o/bM/thQC294MCS4SB:MY0rpXHXSjfAScMIC294MCS4O","tlshash":"1962c859f606a63cf1379465408e0410b23e3fde600d89e1b5fc2d466bd2facb76a728","size":14644,"data":"","first_seen":"2026-05-15T17:14:37.707914Z","last_seen":"2026-05-15T17:14:55.592213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-05-15T17:14:55.649786Z","times_seen":496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-15T19:08:31.597097Z","times_seen":5244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-05-15T17:14:55.661643Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/currencyItem-9641df21.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"47e2a8bc8fd68c4556bdf8a5e93a85cb","sha1":"a6956fca24395830f9cc97489d51dca2bdd460e2","sha256":"17a8b28bf0f3ce259cdecbb4e6ac5f308f25a3bbd58560ac314c0e83cb450ba7","sha512":"0ffc5176937e9216b2665a94abd71bd3aec3786cf4835a92725fe61308799f42f5342d0a65b6963b4c3fcfdfd4f32c5b1c633264d03fcb1b9547f593ad97ab64","ssdeep":"","tlshash":"3721b19d5a02c7b5d6bf5422847c1428a35d7fc7b02085c0eeee554937865bcd339e72","size":1314,"data":"","first_seen":"2026-05-15T17:14:37.704279Z","last_seen":"2026-05-15T17:14:55.566921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-05-15T17:15:27.222456Z","times_seen":848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-05-15T17:15:27.180001Z","times_seen":3393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/filters-56d83b61.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4fea8b64c7b0403f14d209944bda19ff","sha1":"934a8237e6040dc00e9558d4e236659e074430a9","sha256":"af4f73da05bc72e89dcca560889cda08a12c7165132f29c20d189ff5551cd7bc","sha512":"d49ea2b725f73f8a47750f1ad6a06fc15b8f3a32f141749488e5379d3abe5c1cd493d56ceff35a4ddbe7e1e6758177124f938c23cdb967f130e83daf4bb7f25e","ssdeep":"","tlshash":"805134fefcd3a13356ee6df944288514728ebe20686e0a4df55bd0416a73888d07f768","size":3073,"data":"","first_seen":"2026-05-15T17:14:37.706116Z","last_seen":"2026-05-15T17:14:55.569499Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-05-15T17:14:55.662425Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-05-15T17:14:55.646969Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/#/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-05-15T17:14:55.644169Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-9032c7de.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e4f27331dc9b9f293c3cf3dfe8ed8721","sha1":"011fa69f37ee66c192532031977b9af19bafd731","sha256":"548dd52d68d70f4f3373f37293600701556785842e9750307968abc9ae5be5bf","sha512":"07848ca22d04c61de55612a62dea4ddea785962b36b693ffe5c8e1103311f835003ed39b35155e2c8138e9c239427aa7ae9cfff30402926bbeb37018d0910d29","ssdeep":"96:UiRn/55zi12g3tnYfqD+wEiPcp2AXAb8r2tZlxkIEf0I3hvli3MVlcKzookvjR3:5Rnh5ziog3dYfqiwEikpVAbHM0ohvoMo","tlshash":"6eb18448e80386baea63509108555420308c3fbaa119c8f2febe5d2dabb88b9d755731","size":5452,"data":"","first_seen":"2026-05-15T17:14:37.7374Z","last_seen":"2026-05-15T17:14:55.561808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-eb0ac8cb.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3a0155ae2ab75a24541480c617c0e15a","sha1":"d285453e4c86196b74d5aa9f5ca3ae0cdcc6e62c","sha256":"b944278116aa3d340074b93e7be762e940f07dd7f1f80cea88485fb55941cf1b","sha512":"cc165d3a7f17d32a6a9cb11acbd9e2a880c9f62c989dce7548eed745b7b62080d13e14733f8fab0cbabd07f56bd2993047dad776b1775322377b195cbfae8612","ssdeep":"","tlshash":"6c01fdf8fc19cebb1f620a4002902600140a1fddfa1415f1a8877e661be4940d7de32e","size":772,"data":"","first_seen":"2026-05-15T17:14:37.73634Z","last_seen":"2026-05-15T17:14:55.565828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bakkt.art/","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T17:13:52.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Fri, 15 May 2026 17:13:53 GMT\r\netag: W/\"6a06b44e-15d6\"\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5590,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1162), with CRLF, LF line terminators","md5":"2bdcb7b9b50a0adba228da77cdbea9d6","sha1":"88121a0d74dfa629f9e7dbf6007f98bb3d0fc5bf","sha256":"921f5e12db0d266725421251d672606b5433d8d8cc73255840de995e6015d8dc","sha512":"1b7a544b430c2289584c21fd0ae948576206b11d3658f96928ac5a9045e976d3bfc8df247dc212669f1995d652979ddad8b3b9717b20ebdd94630b1ef362b353","ssdeep":"96:+r82QnMSf53uSPE/xnRist/MRr6TCZydHRH/gT2mUsGKAiowGwuB1niHriHMH/2:+FQb9PEpzKZCxf22nfD3bwuB1niLisf2","tlshash":"67b174b75da0882a2371052beed7f018df301193850a8850b4cd50ee8fe6fd684dbb7a","first_seen":"2026-05-15T17:14:37.700929Z","last_seen":"2026-05-15T17:14:55.635723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1723,"timings":{"blocked":651,"dns":159,"connect":2,"send":0,"wait":420,"receive":0,"ssl":487},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/vendor-4403ead3.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:53.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/vendor-4403ead3.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: W/\"6a06b44e-16c33\"\r\nexpires: Sat, 16 May 2026 05:13:54 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93235,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"3f2c7c11bc75e1c780824010f462b032","sha1":"0acc763f04d5838b2b029b341b5104a89ee0c585","sha256":"4403ead3789b29ab48a876aeffabd2dbbae4822829cedabe40430d5365d0f6fb","sha512":"63db33655374dbf69aa50bd7f88200ff2ffb5f4272eca9ccd54787d715f7bedb42158711908985c0ee887bcfc3d6dc1d1556be767966f4665b38012d989413aa","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Lb:BnNIClDsIxuVS83b","tlshash":"1a93d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-04-27T17:20:10.611354Z","last_seen":"2026-05-15T17:14:55.563982Z","times_seen":4,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-bff4935c.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-bff4935c.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-1538\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5431)","md5":"5b99ac6fd32d0ad0e97f5f2d62a5c2c5","sha1":"4753ae3ed764f99d3f0424559e101747ef5fdc78","sha256":"bff4935cb7c98e6ed0790b4802ca9dd7661314f76b136bb2e8b35c0ad5890d03","sha512":"ae596f2d7726b552900e8480ed1d6fe741232d35848ca90cff2418869dd5e59ae96ca37d548f111d8f438b94d205ae78dc06e9f2e2f3e8cded051848f3877669","ssdeep":"96:WH0/zfsds7HT/GjCXJd74cyajHSoEdjSdQg+chAqB0UphHurZm7A42HwhU:Suzf17HT/FJdW6HsKVB0UpRuNgA42H/","tlshash":"33b15729ee47521e7837c6967cb3ca8df018d621a5878dc8fb6713f14d8b2cf1a25158","first_seen":"2026-05-15T17:14:37.702984Z","last_seen":"2026-05-15T17:14:55.59552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/currencyItem-9641df21.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/currencyItem-9641df21.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-522\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1313)","md5":"47e2a8bc8fd68c4556bdf8a5e93a85cb","sha1":"a6956fca24395830f9cc97489d51dca2bdd460e2","sha256":"17a8b28bf0f3ce259cdecbb4e6ac5f308f25a3bbd58560ac314c0e83cb450ba7","sha512":"0ffc5176937e9216b2665a94abd71bd3aec3786cf4835a92725fe61308799f42f5342d0a65b6963b4c3fcfdfd4f32c5b1c633264d03fcb1b9547f593ad97ab64","ssdeep":"","tlshash":"3721b19d5a02c7b5d6bf5422847c1428a35d7fc7b02085c0eeee554937865bcd339e72","first_seen":"2026-05-15T17:14:37.704279Z","last_seen":"2026-05-15T17:14:55.566921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/vendor-7265dc44.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/vendor-7265dc44.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-75283\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c157c5b892f7d8cb9c3f682d4098fba8","sha1":"21b977efd627db50955123eea5a3f7fbc4f256ad","sha256":"62cafed0166ea0da43055523ad6a750957bd9d1751b4792e63043760db9b183e","sha512":"b9b91bc40322ff20f15b29eaee917e1b49184d3aa16b8b2157c1fc4c80a0e65ee9a83d6d96194d2ecf1a938fdb14054392e12bd7214c6e3e4481fd24d8dd8d58","ssdeep":"12288:JDLgPDVUpZQaADivX/GXwjKcrTvGl2wLupA46B1:JDLgPDapaO/gUKcPM2wqi4E","tlshash":"a0a418d931d2f02253bb24e6007b0006f33e5e59780ec594f169e8da3d7a99992b7f2d","first_seen":"2026-05-15T17:14:37.705198Z","last_seen":"2026-05-15T17:14:55.603611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/filters-56d83b61.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/filters-56d83b61.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-c01\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"4fea8b64c7b0403f14d209944bda19ff","sha1":"934a8237e6040dc00e9558d4e236659e074430a9","sha256":"af4f73da05bc72e89dcca560889cda08a12c7165132f29c20d189ff5551cd7bc","sha512":"d49ea2b725f73f8a47750f1ad6a06fc15b8f3a32f141749488e5379d3abe5c1cd493d56ceff35a4ddbe7e1e6758177124f938c23cdb967f130e83daf4bb7f25e","ssdeep":"","tlshash":"805134fefcd3a13356ee6df944288514728ebe20686e0a4df55bd0416a73888d07f768","first_seen":"2026-05-15T17:14:37.706116Z","last_seen":"2026-05-15T17:14:55.569499Z","times_seen":2,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/TRX-copy_20260422162314A002_20260510173030A006.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/TRX-copy_20260422162314A002_20260510173030A006.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:30:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10467\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"3fef701e393bbf2e5b71c7997c903721","sha1":"4c727e4acdd50e82b2ad4bb5a289a58633c782cc","sha256":"55138b468fd270ac073529567db1bf6bf1dbfe8ae7f8dd551c31821e51d23ed1","sha512":"d2cb6fecbdd9ae303ceb0792592fd2f02ef5c2645916c75f0e1d874ef58e3d7ce8ddf3d2700d0543962d5e2c37392d2290c576b63ff539d93144c746ad6f9aa9","ssdeep":"192:yaq+mKyq1M3Vt985Q1R0biLtUhi4VUCvsdjx+A+KJAvgyISCL5JxQf2WXs3Ej/:jqDeED9gFGLtUdRqx+ArAvgVHJxe83ET","tlshash":"aa22bfd9e61d6d234d136aa0c1de4859ecdaaa9c593a58b8c5463b0ff23520cc61ce3c","first_seen":"2026-05-15T17:14:37.706993Z","last_seen":"2026-05-15T17:14:55.626926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":565,"dns":67,"connect":4,"send":0,"wait":411,"receive":1,"ssl":486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-86d3fbad.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-86d3fbad.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-3934\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14644,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14643)","md5":"787b473b08de4fb9997286414e66cf36","sha1":"caee0f0c6fc041fac727df1f76606fffb7200cea","sha256":"09a675e7f118065b2d3a7124ba4e5f08cc5044803fa2ba0d424de5c57f1b2bb3","sha512":"42ec309c1cd77008848ed782ddb57c9e18070145c2ea1a4752b7d43585c242e1c7aa436a6b76f0f9e3e4e5ae6338397c0d491b08e78cf0a49a4ca123177ac468","ssdeep":"384:Mcww30gtIpvXgaQWVAJK9FSjfAs0GLdfvEk7o/bM/thQC294MCS4SB:MY0rpXHXSjfAScMIC294MCS4O","tlshash":"1962c859f606a63cf1379465408e0410b23e3fde600d89e1b5fc2d466bd2facb76a728","first_seen":"2026-05-15T17:14:37.707914Z","last_seen":"2026-05-15T17:14:55.592213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":994,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3869b625c03422c9f3371d8a37deab88","sha1":"87e2e4e1f24b00f920f237a50ed30a6e85d99336","sha256":"9a820e886b91fa2dcad2535ebe6f292e5f3914fcaf5495373326f8c62f17b32f","sha512":"762a0b9fe2add277935e2dd2d0d0482fbe67ba9ea3d3ec810e57d226e57c6544e95d20b077e989d8efd8a430e6240b14f86cd5ff7aaf69b42211d932003d784f","ssdeep":"","tlshash":"fd11340b183cceb9080499c769c8fcca9a9e2683e6618c30a66bcf6c81f15760b0b604","first_seen":"2026-05-15T17:14:37.708907Z","last_seen":"2026-05-15T17:14:55.576648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getAllSetting","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":1527,"timings":{"blocked":597,"dns":84,"connect":2,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getCoinList","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":1488,"timings":{"blocked":573,"dns":88,"connect":3,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(1)_20260423222938A067.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(1)_20260423222938A067.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:29:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1068\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"df7bffa8b78a35f65920f3ae46c53b63","sha1":"8753bb2d765a55b78411423e3efed02e4d92e6fd","sha256":"7c068a8efb77daf563651f8b24baa6796a7d8d4ae4611ebf64b25663e91410b0","sha512":"ce2fee936adc429e2bdfdd963c1719361e5526701aa31584aae7d0a68b8e5eb390877a4c406d88e2898f1cbabd96f72dfc95f49d37f52d7d5d9013543b7aade6","ssdeep":"","tlshash":"2e11b5b1b3639f958a8ecb14707b0a94e1cfc3aa408918baa5a7d72173b6144c865822","first_seen":"2026-05-15T17:14:37.710413Z","last_seen":"2026-05-15T17:14:55.593739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(3)_20260423222958A069.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(3)_20260423222958A069.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:29:58 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 514\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"715247e568b2e928a4bced828ea1a134","sha1":"afb2575f3a9f20d77d415595e7ab9854714a9914","sha256":"b5242845cd057b317a5e1a8938267e89cf174a2861bcb86f785a48fa1672ef5c","sha512":"8970c98991d3dd2f1cf16244d6b7d5d3e3582a70b3d5e79006e92d3486b53b258bb4b4c5f823abc449f8378c1a2209d8032e4da34cb6301fefb7cbd240080531","ssdeep":"","tlshash":"e9f054c2f7d5a55dffca807cc069d0f32c0210442b013304b873c40c9219f54c641abe","first_seen":"2026-05-15T17:14:37.711345Z","last_seen":"2026-05-15T17:14:55.591001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/resource/fonts/DINOT-Medium.otf","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bakkt.art/assets/index-7d73ce4b.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/octet-stream\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"65424d19-11d88\"\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 73096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-05-15T17:14:55.620857Z","times_seen":917,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/type/defi_activity_type","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-05-15T17:14:55.634791Z","times_seen":635,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/platform/dev/logo_144.png?2.0.1778824270425","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1778824270425 HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: \"65424d19-b5c\"\r\nexpires: Sun, 14 Jun 2026 17:13:56 GMT\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2908\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-05-15T17:14:55.614372Z","times_seen":265,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/user-db29c4c3.png","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/user-db29c4c3.png HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"6a06b44e-1b86\"\r\nexpires: Sun, 14 Jun 2026 17:13:57 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 7046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b8ff82e6d6230882d1be53583d7613fb","sha1":"c64f6de60855d708df4711c73b9e2a43b674ab38","sha256":"db29c4c3b83a8357843292fa2ac03a964af85dcb2e66ea8cabe8e3c3ddfcc63c","sha512":"38c4425be3aedb453251b11debcaa24331f20553faf3859995d3f69e0087c5683ab2c57bfc663b2bd76143c7ca7aaa0713253d451c17e13f92874d056d062670","ssdeep":"192:Jrcf6ggncGn/I7GFYPsZEzBaoId6sVAEWNeODD/5zZ:Cf6bncGnQ7AUsZEzEoc9AX1Z","tlshash":"eee19e80671e6ad83cabd927a418ca572fcb48c413d80df5fa3f889a1146cdbb4063e1","first_seen":"2026-05-15T17:14:37.713921Z","last_seen":"2026-05-15T17:14:55.583382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getAllSetting","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-bc011be9.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: \"6a06b44e-18d\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-05-15T17:15:24.710612Z","times_seen":672,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(1)_20260423223314A075.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(1)_20260423223314A075.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:33:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1545\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4f8f77d6675cd102606d10dac1c43896","sha1":"9c5131abf3e73ba87bfb04269fc8260a8384552b","sha256":"11f43b230cc5d668fdc10f3e28cedaa10d829ce16e655b8b9afc0aaf79a8414f","sha512":"10ba7347a594d0f43d87a9b8df574ef2b29186a97772a526d0d97cfd60c540a7ceed99a2921f9aebc68477685b7272272259e65c391c853ec475bd05c46c9356","ssdeep":"","tlshash":"f8310ac3bcb1591dc55a9b635a8220c0d5f317cc113c572c0fde58696362cacdc428f5","first_seen":"2026-05-15T17:14:37.728569Z","last_seen":"2026-05-15T17:14:55.57404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/resource/fonts/Arial.ttf","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:54.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bakkt.art/assets/index-7d73ce4b.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/octet-stream\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: \"65424d19-ff9e4\"\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1047012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-05-15T17:15:27.116602Z","times_seen":1273,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/platform/dev/config.js?1778865235163","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /platform/dev/config.js?1778865235163 HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: \"65424d19-18a\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-05-15T17:14:55.578827Z","times_seen":363,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-29b5640f.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-29b5640f.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-3e59\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15961,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15960)","md5":"de4b5afbb2dbcc92086f94cd2fa1edcd","sha1":"926ddaf53baf1c098f5a0902078292690edc738f","sha256":"29b5640f5cf9a9a4e0e11b32f4d41b007c396fc5c71200864f40bcc7ad66330f","sha512":"8c628672f28d90e0ae65dc9f66c0f237fd6b0c3ac5cde1de441e72f4b873ba7a283c92f59dd561a538e5a2077a4658f2b1fb8a7fef80acbf6bd033328e289223","ssdeep":"192:/zP4ExoBFI7PzhICAtEYRhqLSHtAqf5Z5vi9K6V0R2CIMEZL1sSkaYwgLhf:/rERVTaB8","tlshash":"25627338b6561238e833d152bea44accf23dfa02e3878d68eb5ba4675ddb2db4530445","first_seen":"2026-05-15T17:14:37.730947Z","last_seen":"2026-05-15T17:14:55.607518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/platform/dev/favicon.ico?2.0.1778824270425","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1778824270425 HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: \"65424d19-10be\"\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-05-15T17:14:55.56034Z","times_seen":90,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(1)_20260423224510A085.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(1)_20260423224510A085.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:45:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2855\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7538b6b7ab64fda7014b48578e01c77a","sha1":"18db4699f5d1066c9e02f0a31032c415c2e369ff","sha256":"4cd648d1f908bef0fcfa74c6a3bb6292d1d0795656ee35daca3f2fc7787f11a6","sha512":"4731a4e5a5fd8857e846889293d449da84df7ec0a51e71c5991a7f54ae579b0a1f2026edc443a8c3cd5e97e71acc2a8b10266a21d7d86726acb6bd5a5ceedcb2","ssdeep":"","tlshash":"d2512b9737f9ad87005d73646bd21c872a5e80b91f18c6dacfa140644608f849a32de1","first_seen":"2026-05-15T17:14:37.732408Z","last_seen":"2026-05-15T17:14:55.584897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/ETH%20(1)_20260422152429A002.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/ETH%20(1)_20260422152429A002.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 07:24:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9454\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"41ff25ae153d1be8feaecbfae350cf2d","sha1":"aa82aa615e837859e0d6ee567225ec19f2283a39","sha256":"61938315b746ee5bd8165ea329417addb01a80ac25f35dbe42eed10a35bfab3e","sha512":"198cd6d3b03e1ff96a56df35034c66fd41260d620b3b9b6581aa895e53637b088145b79080e21bc84c98ab6dbdbb20ad65e65af80aa813dfebab63701135b1de","ssdeep":"192:Qq5k04dOGwP6ueix192AWeKLDTM5nqc8eMZljWeNsgKLUMSnm6Q:Q10XddeircLDghz8vlj0gKL2nm6Q","tlshash":"3e12bf15ff28dbc662d7d78ae903234303a95d6605cb6368028cf67032591b565bfb4a","first_seen":"2026-05-15T17:14:37.733336Z","last_seen":"2026-05-15T17:14:55.575335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/xrp-fill_20260422153801A007_20260510172905A004.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/xrp-fill_20260422153801A007_20260510172905A004.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:29:05 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f8f85b78e45737a3235c8a2f17acaa32","sha1":"8a5131d1fb599e26aa8c26b4c4a6b31eaac02a34","sha256":"4afa469b2b0f327cd6b968a2d1ae184fa5a07fe9319a40af385790d94c8278b4","sha512":"818e50c9ce96ed17c32ce6318d6bcaa449cdb2f2d599bd119ee26713c7e9afa00e062459db562a5bbc07aba3b6ce132a8e4bdcc9c5166b9718d65d6c71b41939","ssdeep":"96:IUYr7k3k1PDnt+2WCzm6mTXgjwqO9b8L9OfOwCfvkGbpBh0yEo+p10Jn+0tGLaOh:IH70qPTt+JCnNwqKbGwfFkvkGbpPEoc1","tlshash":"21b16bc0261fcdb2c124a0fb612337c900306a9aba44a950f06fb4a9da401fa4bc3c1b","first_seen":"2026-05-15T17:14:37.734254Z","last_seen":"2026-05-15T17:14:55.585779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1620,"timings":{"blocked":578,"dns":70,"connect":4,"send":0,"wait":460,"receive":0,"ssl":503},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/custom_service-cb5ec6cd.png","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/custom_service-cb5ec6cd.png HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"6a06b44e-841\"\r\nexpires: Sun, 14 Jun 2026 17:13:57 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2830e4706d7e7b207f3339b42b9a4c35","sha1":"b7d4e1d57101e5c3b58e130a79ac9b9fa43c104d","sha256":"cb5ec6cd46bba05177cd88c7e9f71e54fe7ea468d5e3217ebd233cf41f918ce1","sha512":"c005dd07430fcb7627d54f79eb06acf718129c8c8aa5f6e89dc9b7b1c1c098950e791420e415c2d35797c24a2402a515da81619204e8e36869f133965c0d8beb","ssdeep":"","tlshash":"0041194ab3e7aaf909dca5527b3de5c30f3a214f220217cd06ee64597822c3c0661e03","first_seen":"2026-05-15T17:14:37.735235Z","last_seen":"2026-05-15T17:14:55.60432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/TRX-copy_20260422162314A002.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/TRX-copy_20260422162314A002.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 08:23:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10467\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"3fef701e393bbf2e5b71c7997c903721","sha1":"4c727e4acdd50e82b2ad4bb5a289a58633c782cc","sha256":"55138b468fd270ac073529567db1bf6bf1dbfe8ae7f8dd551c31821e51d23ed1","sha512":"d2cb6fecbdd9ae303ceb0792592fd2f02ef5c2645916c75f0e1d874ef58e3d7ce8ddf3d2700d0543962d5e2c37392d2290c576b63ff539d93144c746ad6f9aa9","ssdeep":"192:yaq+mKyq1M3Vt985Q1R0biLtUhi4VUCvsdjx+A+KJAvgyISCL5JxQf2WXs3Ej/:jqDeED9gFGLtUdRqx+ArAvgVHJxe83ET","tlshash":"aa22bfd9e61d6d234d136aa0c1de4859ecdaaa9c593a58b8c5463b0ff23520cc61ce3c","first_seen":"2026-05-15T17:14:37.706993Z","last_seen":"2026-05-15T17:14:55.626926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-eb0ac8cb.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-eb0ac8cb.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: \"6a06b44e-304\"\r\nexpires: Sat, 16 May 2026 05:13:56 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"3a0155ae2ab75a24541480c617c0e15a","sha1":"d285453e4c86196b74d5aa9f5ca3ae0cdcc6e62c","sha256":"b944278116aa3d340074b93e7be762e940f07dd7f1f80cea88485fb55941cf1b","sha512":"cc165d3a7f17d32a6a9cb11acbd9e2a880c9f62c989dce7548eed745b7b62080d13e14733f8fab0cbabd07f56bd2993047dad776b1775322377b195cbfae8612","ssdeep":"","tlshash":"6c01fdf8fc19cebb1f620a4002902600140a1fddfa1415f1a8877e661be4940d7de32e","first_seen":"2026-05-15T17:14:37.73634Z","last_seen":"2026-05-15T17:14:55.565828Z","times_seen":2,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/currencyItem-9641df21.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/currencyItem-9641df21.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: W/\"6a06b44e-522\"\r\nexpires: Sat, 16 May 2026 05:13:56 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1313)","md5":"47e2a8bc8fd68c4556bdf8a5e93a85cb","sha1":"a6956fca24395830f9cc97489d51dca2bdd460e2","sha256":"17a8b28bf0f3ce259cdecbb4e6ac5f308f25a3bbd58560ac314c0e83cb450ba7","sha512":"0ffc5176937e9216b2665a94abd71bd3aec3786cf4835a92725fe61308799f42f5342d0a65b6963b4c3fcfdfd4f32c5b1c633264d03fcb1b9547f593ad97ab64","ssdeep":"","tlshash":"3721b19d5a02c7b5d6bf5422847c1428a35d7fc7b02085c0eeee554937865bcd339e72","first_seen":"2026-05-15T17:14:37.704279Z","last_seen":"2026-05-15T17:14:55.566921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/vendor-7265dc44.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:54.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/vendor-7265dc44.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: W/\"6a06b44e-75283\"\r\nexpires: Sat, 16 May 2026 05:13:54 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c157c5b892f7d8cb9c3f682d4098fba8","sha1":"21b977efd627db50955123eea5a3f7fbc4f256ad","sha256":"62cafed0166ea0da43055523ad6a750957bd9d1751b4792e63043760db9b183e","sha512":"b9b91bc40322ff20f15b29eaee917e1b49184d3aa16b8b2157c1fc4c80a0e65ee9a83d6d96194d2ecf1a938fdb14054392e12bd7214c6e3e4481fd24d8dd8d58","ssdeep":"12288:JDLgPDVUpZQaADivX/GXwjKcrTvGl2wLupA46B1:JDLgPDapaO/gUKcPM2wqi4E","tlshash":"a0a418d931d2f02253bb24e6007b0006f33e5e59780ec594f169e8da3d7a99992b7f2d","first_seen":"2026-05-15T17:14:37.705198Z","last_seen":"2026-05-15T17:14:55.603611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-9032c7de.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-9032c7de.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: W/\"6a06b44e-154c\"\r\nexpires: Sat, 16 May 2026 05:13:56 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5445)","md5":"e4f27331dc9b9f293c3cf3dfe8ed8721","sha1":"011fa69f37ee66c192532031977b9af19bafd731","sha256":"548dd52d68d70f4f3373f37293600701556785842e9750307968abc9ae5be5bf","sha512":"07848ca22d04c61de55612a62dea4ddea785962b36b693ffe5c8e1103311f835003ed39b35155e2c8138e9c239427aa7ae9cfff30402926bbeb37018d0910d29","ssdeep":"96:UiRn/55zi12g3tnYfqD+wEiPcp2AXAb8r2tZlxkIEf0I3hvli3MVlcKzookvjR3:5Rnh5ziog3dYfqiwEikpVAbHM0ohvoMo","tlshash":"6eb18448e80386baea63509108555420308c3fbaa119c8f2febe5d2dabb88b9d755731","first_seen":"2026-05-15T17:14:37.7374Z","last_seen":"2026-05-15T17:14:55.561808Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/currencyItem-d8f62701.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/currencyItem-d8f62701.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-b28\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2855)","md5":"bcf860aa863b39d241301ded060afe0c","sha1":"f7a2151036c08f1edd3a3d466939571d71acb285","sha256":"d8f627012c0dbb903b34903ee654c062f610c6033c8198883979f35cda0913c8","sha512":"27e2f1bfc336efa7d5ea82b8b56e4e6864302e43ff4d419b04411c21284900c04535e0f6fb1ef61a9ae45d8133449619ee5733c1c5ce52b833cc37daf021df9c","ssdeep":"","tlshash":"41512fa1630a4227ec3ad487fd94059d90393fa3b10306cce76f8e532ec7ae31a30925","first_seen":"2026-05-15T17:14:37.738421Z","last_seen":"2026-05-15T17:14:55.570246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/resource/svg/dark/mengbanzu12.svg?2.0.1778824270425","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1778824270425 HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"65424d1a-306\"\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-05-15T17:14:55.618197Z","times_seen":245,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/LTC_20260422153807A008.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/LTC_20260422153807A008.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 07:38:08 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 6915\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1de328001ff7b7843dda7695d45dc356","sha1":"42015b271549b8dbe24676d22cafa074aa929e76","sha256":"d141c031da7496917382b8dfa3f3f8f0120354d453673b1f86d523aa2d64eac7","sha512":"25a420e6e2c30265aa563b38d399b7bda5f120117fd64b8b9b1930e455c02c9db8d956480bfbb08533fa7142ef84dba7af06d6eedcdd3e573d841e88eb34c00a","ssdeep":"192:mIt090oHxbu3CCRtd0RDo7k105ULgOV6i1o+Zr+Kr/rIAZ:nt090E9apgBLgOV6iG9AIq","tlshash":"5ae1bfd7b50ad42cb8d6f65af2f05761c233b8f570f2c544e3e3c1296a53c6c06a4991","first_seen":"2026-05-15T17:14:37.740371Z","last_seen":"2026-05-15T17:14:55.598954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/BNB%20(1)_20260422153814A009.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/BNB%20(1)_20260422153814A009.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 07:38:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9496\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"c13229790cbfe8c2849e28c1eb5da2bc","sha1":"c51055690486cba0be435e6a1817fd28d5a2d432","sha256":"73b545ffb3d3ecf7ecf11abac41d7bd0291e58b50febfe5c8ebea8fef574aef2","sha512":"74cef891a54a264a4e33f9e9a6d7f089b12f2f9744cb70f06c19a9d67d86356323d6e4b029c01f51565a8bcb8f65d047ad94e2d4378f4625e79bb2294731f1cb","ssdeep":"192:bW57aYQl4/ijq21jgLsKW1Q8LcXJvSj/4CjzF5NccnGEIVZFIj52x8qL:bW5OY3ijq0jgOBIXJo4gzF5fGzVZFBp","tlshash":"5212d094e8c167e09eaf4b64b9751531499606fe066cb823d175fd3c088225ec05fbeb","first_seen":"2026-05-15T17:14:37.741319Z","last_seen":"2026-05-15T17:14:55.571293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(2)_20260423222955A068.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(2)_20260423222955A068.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:29:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 485\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"5471b9bd8cccc72bf7bed2ee8c0c20d4","sha1":"7c7b5c8ca86d9a4f218f3fdf2e040fcb4c9f9097","sha256":"4edc9b4e3b6ab8b36bae0f6b227158c5fee0d610876576c573756a74e5d01201","sha512":"d4579371a1da1c53fb75475d7528c325b7635eae7219b182f3903044a6daed7cfaf86df3da909e38a52d72864c5124386d8fc004b389f75766c0769f69e7748f","ssdeep":"","tlshash":"5ef054a8fb409d48d5d0d4fc208ef023b93215c183d0de41633c1c48c40580cb4d03a5","first_seen":"2026-05-15T17:14:37.748134Z","last_seen":"2026-05-15T17:14:55.572614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(1)_20260423222534A065.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(1)_20260423222534A065.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:25:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2344\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"582ae5642dcef4d5b5961c7819b415d6","sha1":"f06af89b20a9f55f0f65b0a889a741cc115e1d0a","sha256":"6374920f13910fdebe64946705eabb1d6f548b55a5e751a18beb5420428b6a9f","sha512":"fb55b582463786b742b18662fb6c07de05f0e462b7238ecf1c47b2b1536d840a0733d28a3697d13f28b797f2e80ff98864b4db55f9670e6c2026cb0edbb494f7","ssdeep":"","tlshash":"4d413ae7432c23be181d862a15ed2bfba14362c9788d360e0dba9804344dd0ac4a4f07","first_seen":"2026-05-15T17:14:37.754482Z","last_seen":"2026-05-15T17:14:55.633255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame_20260423223311A074.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame_20260423223311A074.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:33:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1390\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"ed468972418a37d8cb7045f8550c8475","sha1":"9812157730da7076f8f0fb89979ab27231d69820","sha256":"d96bb924e86b213c2498170db514fbcb016ea5abb2be32c538b44bac6fc31a00","sha512":"a2a724b3a0c6bcabe612a41ec5f498000018c27c12c0514c61bf51a7682c93e83f1aaa4dad2b8cde18ee633761fe2da8d9305e1af6d423de0e462c55aa4a0296","ssdeep":"","tlshash":"bb2183dc7c270ad79d94fa85423fbf60b36373569b1a0a7b3901c110aa786a442a2f61","first_seen":"2026-05-15T17:14:37.757408Z","last_seen":"2026-05-15T17:14:55.590085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/BTC_20260422152424A001_20260510172805A003.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/BTC_20260422152424A001_20260510172805A003.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:28:05 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10396\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"2c15c056f49879f7c1a7274520797746","sha1":"a169bea3e4ea8bc7ecaf81e4da133c948e347310","sha256":"240b94ee6eb907ba4e882fc81d667de0dee33743d2842854b3f3c0f109c693ac","sha512":"3a0072d2da2b6b3c4cff422ba1dd1bbdb845d49e149f3b484ad91db3fb984db76953777f783720e0278cb0a48536a1c1ce5b2c7b5adf7974097e3819a2592a73","ssdeep":"192:j3Tq74L6/VZvd9ouB9NPWuEGOXgxPjqHPzPbR8JgpVjOGJNXhsKfa:j3Tsg0Zv9jXPjqHPWQXqEa","tlshash":"8e22b034ce37fcf60a4391ca590352f1689a874fc6701d83831af26bdc69858d690f6b","first_seen":"2026-05-15T17:14:37.758442Z","last_seen":"2026-05-15T17:14:55.609451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1631,"timings":{"blocked":579,"dns":72,"connect":2,"send":0,"wait":470,"receive":0,"ssl":506},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-f915e7ac.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:53.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-f915e7ac.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: W/\"6a06b44e-1804a\"\r\nexpires: Sat, 16 May 2026 05:13:54 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators","md5":"71131dec267bc3463692f67786e49844","sha1":"d1400da2a2bf7172cea394786d166adfad18ae20","sha256":"1f9fb3d6f30405a18716fb73261b0cdefb1ebc1d7d24fe6d4a19a8364a227d8c","sha512":"1b27dd6e78827aed9a515444bfcd7ec15a5dc4325387c80364f9bef0d19b159560a5ecc1e91f57c67bf373ef66ee4caaacbdd10146c68e028a5c6ecb12199dff","ssdeep":"1536:xXMQazKctWFBiRSx9/fTs3BhRdkvY4EHY77DhExtTb5H2ni:lMQazHRSx9/fTs3PsLEHY77DhExt5d","tlshash":"aca36c89640a0fff68fe084c795a4950206c0f9759ccc8d3f6aeae5627f9dd1a34d329","first_seen":"2026-05-15T17:14:37.759479Z","last_seen":"2026-05-15T17:14:55.602189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-7d73ce4b.css","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:53.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-7d73ce4b.css HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: W/\"6a06b44e-4ea22\"\r\nexpires: Sat, 16 May 2026 05:13:54 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322082,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"1cc34c5b78f675b67c39b2945256f4b9","sha1":"1cff5f63d13258e00623a73e73a663e19130fcd9","sha256":"7d73ce4bd134542b2c7ccd33cec8c86695c2f2b0a97fd29a15f4779cac6a770f","sha512":"4cd764b25e80df3099a8fd952cf8975e19a8200c4bb785a7be3484a9b067bd0c5e80a679aeb011dff7b58dbe3eef829c42660f8825d11a518bc6f69a8cbb36e0","ssdeep":"6144:nGvxsaTJ03EkZ8w71ZACkFDS3vyf58rBeV05Tkl2G:Gv1+3dZ8w71ZACkFDS3vyf58rBeV05TM","tlshash":"8264d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20120094fc7ffa1363617","first_seen":"2026-05-15T17:14:37.760483Z","last_seen":"2026-05-15T17:14:55.625423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.mevsplit.com/ws/a3b99448-4060-4658-8696-56920e8712f2","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /ws/a3b99448-4060-4658-8696-56920e8712f2 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bakkt.art\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FvQHTcFobMfsIklAar/zwA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://bakkt.art\r\nConnection: upgrade, keep-alive\r\nDate: Fri, 15 May 2026 17:13:55 GMT\r\nKeep-Alive: timeout=60\r\nSec-Websocket-Accept: of6xMnWCz7SSngp9ZiYV0wWTWj8=\r\nSec-Websocket-Extensions: permessage-deflate\r\nServer: waf.bi\r\nUpgrade: websocket\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nX-Xss-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":2417,"timings":{"blocked":0,"dns":753,"connect":753,"send":0,"wait":419,"receive":1,"ssl":1234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/logo-b69d9d75.png","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/logo-b69d9d75.png HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"6a06b44e-6ec8\"\r\nexpires: Sun, 14 Jun 2026 17:13:57 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 28360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1776 x 504, 8-bit/color RGBA, non-interlaced","md5":"987e396d18a9c6dec516eed6a643d926","sha1":"010813f5200bbc148fbc87da1a2d8b6ac10edb54","sha256":"b69d9d75024b0808c24cf99b74aed86c1d717371b2adc78544ff37bb81cc6a3d","sha512":"393ab805fb02f2b5d1f4ac01a54a35d5b3dcb33943773fc91af9e9f435573f6522ebb12bb2f69354734459e255a5c3fcce6ed49bb96a46ce4d8aa10f8a6f0941","ssdeep":"384:mxjD+7n43Y0CJtMcBZz5ag8QmvJcuQ1u6r30n0j1fFytjQUNFtvg+k9n07eXaBJm:mxGnKQZFAvJ5Q4Kd1djUNFKZ1kinh","tlshash":"f9d2e1847d821997f603fb7b330f6fe12f61536ba2acae6e0b815cb586c221350904d9","first_seen":"2026-05-15T17:14:37.761525Z","last_seen":"2026-05-15T17:14:55.567892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/lang-574c8095.png","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/lang-574c8095.png HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"6a06b44e-757\"\r\nexpires: Sun, 14 Jun 2026 17:13:57 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"72240bb2211170bd0cd16bc633ad3052","sha1":"4687391485372617b45559530c22e2537514a306","sha256":"574c8095d45646e5aa9427b93612992a2de43479289f7461a3927e9cf6743fae","sha512":"84d77d2d34f27d8fdb4b5ae6a446e57c389dbb481ce58f8fa1b2559dd577ca4761fe58bb4f72319a71dc768f0aa207a0cc767a93fbf4f4a9ca211ec028c4359a","ssdeep":"","tlshash":"324119affe1d28ed1c548ad1219d196b8e6825c3c2ca200678819ca953104c5838aeb7","first_seen":"2026-05-15T17:14:37.762661Z","last_seen":"2026-05-15T17:14:55.596473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/xrp-fill_20260422153801A007.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/xrp-fill_20260422153801A007.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 07:38:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5460\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f8f85b78e45737a3235c8a2f17acaa32","sha1":"8a5131d1fb599e26aa8c26b4c4a6b31eaac02a34","sha256":"4afa469b2b0f327cd6b968a2d1ae184fa5a07fe9319a40af385790d94c8278b4","sha512":"818e50c9ce96ed17c32ce6318d6bcaa449cdb2f2d599bd119ee26713c7e9afa00e062459db562a5bbc07aba3b6ce132a8e4bdcc9c5166b9718d65d6c71b41939","ssdeep":"96:IUYr7k3k1PDnt+2WCzm6mTXgjwqO9b8L9OfOwCfvkGbpBh0yEo+p10Jn+0tGLaOh:IH70qPTt+JCnNwqKbGwfFkvkGbpPEoc1","tlshash":"21b16bc0261fcdb2c124a0fb612337c900306a9aba44a950f06fb4a9da401fa4bc3c1b","first_seen":"2026-05-15T17:14:37.734254Z","last_seen":"2026-05-15T17:14:55.585779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(5)_20260423222854A066.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(5)_20260423222854A066.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:28:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 954\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"2ae25f3fa1ccca59d7bba314aa79f366","sha1":"e0cd90440f53dcd2010d91cd68553f45c0b307b6","sha256":"c8d81ca045987bcb44ac281c215c3c2374dc64e12936f6b6563ff8b0e24bd450","sha512":"d1f5eb290c11d0baca1f049d080908fa85ace79b1d2e8bb3515375b97a67ade5e0e21e2edaeacbb7eb7e9322ef437feee87ac506c8a2c7904e56963ce6cfe11d","ssdeep":"","tlshash":"4d116189f7dd906ca7a9cf0d4cab13e09a2fef151288251a164d8c5889b74344b5ec86","first_seen":"2026-05-15T17:14:37.763556Z","last_seen":"2026-05-15T17:14:55.587851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20274_20260423222530A064.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20274_20260423222530A064.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:25:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2033\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"cd2ebe3969c91fc8400b24cadb31bb24","sha1":"f5d094d4390a754c14308aedf7613bc8314d1092","sha256":"9e6c7a9c546454ffbda5f559bcf70b6b91d7b9bff9636208a7046884b0a1aa69","sha512":"60871104e76b1416f2a7a40a7fa26965db875acfbc6f34104fb9a13e1b499cff00378b05177b7cf565f29a90b78726586c733a15fffab5009a2acf8ef1eae046","ssdeep":"","tlshash":"62414a46b5c35db58efa022c91aca0215ca252c72a77d05f099c803c2cecfb84877b07","first_seen":"2026-05-15T17:14:37.764515Z","last_seen":"2026-05-15T17:14:55.593042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/en-60e98932.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/en-60e98932.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: W/\"6a06b44e-9e9f\"\r\nexpires: Sat, 16 May 2026 05:13:56 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40607,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40584)","md5":"344455280303dbb4cdd18711ef328a06","sha1":"8e0d27606ae92ecfd6e41d3b4e8bc5bf5c746bbb","sha256":"332375002393bf7ea21bc14edd77ede25d662c694eaee063488b9911b07647cb","sha512":"b7cece2a0f254844a23b431b78878169bbf4614b298e2c907bad3fe359886db088d5fe10d73a987f166a2e0fd67def9f1a74f14aaf3ac94e9b24c916b6a038f2","ssdeep":"768:+GtZcEw/o7rFOuAFsiLAMCzrAaAMVl7oP6+6sPGsW1mBO6fpk7aOLnu:iponFOue8zrd37LsPZWrLnu","tlshash":"ba03d6893e1a989a04f35376b4ce6e1124f60ac18255881f4fedc9fd53e2b67a363734","first_seen":"2026-05-15T17:14:37.765395Z","last_seen":"2026-05-15T17:14:55.637387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/24/Frame_20260424051021A106.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/24/Frame_20260424051021A106.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 09:10:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3005\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f5eae9bd6de1a5a00c0878508b4da529","sha1":"dce2a87058ba808f4cd6d0141e0ad280e47b129c","sha256":"1dc209691cd98c8eb4130121937741a5f43c2c99559bb60657fadf9f9335946c","sha512":"98ce05e5b4aa34b071188cb85d0150d79698baeb2a3a0b8ac152bdc990500868bcf8781df55768166e19c606e0c929501f8430d057f60c75a19df7a85de33a90","ssdeep":"","tlshash":"81515cb343716625cb88e85152282ef0bdc23e260f14604c22e5d4edb40da7dd786f31","first_seen":"2026-05-15T17:14:37.766343Z","last_seen":"2026-05-15T17:14:55.568637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/22/BTC_20260422152424A001.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/22/BTC_20260422152424A001.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 07:24:26 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10396\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"2c15c056f49879f7c1a7274520797746","sha1":"a169bea3e4ea8bc7ecaf81e4da133c948e347310","sha256":"240b94ee6eb907ba4e882fc81d667de0dee33743d2842854b3f3c0f109c693ac","sha512":"3a0072d2da2b6b3c4cff422ba1dd1bbdb845d49e149f3b484ad91db3fb984db76953777f783720e0278cb0a48536a1c1ce5b2c7b5adf7974097e3819a2592a73","ssdeep":"192:j3Tq74L6/VZvd9ouB9NPWuEGOXgxPjqHPzPbR8JgpVjOGJNXhsKfa:j3Tsg0Zv9jXPjqHPWQXqEa","tlshash":"8e22b034ce37fcf60a4391ca590352f1689a874fc6701d83831af26bdc69858d690f6b","first_seen":"2026-05-15T17:14:37.758442Z","last_seen":"2026-05-15T17:14:55.609451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame_20260423223104A070.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame_20260423223104A070.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:31:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 995\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"6f1d3f1f64e1e0c847f4dd30c262fb01","sha1":"f5c5d60778658de9a5d76c5b1bc7ea57b8dae2a7","sha256":"d05ef10928e96f213cd513a12298f7b3f055055a734fe8e3cda65d1dc4108063","sha512":"7f5589661388d885230f66b5d84ddc54eff3eb9386fc7d02c59e99389943487cebe37612370041744ed8b382281c7b4ba7c177a94e29e89961f9b0b510a76077","ssdeep":"","tlshash":"b31165cd76b0c8adfacebaa96569a438511a00d2238029435ab16681dcaec910691787","first_seen":"2026-05-15T17:14:37.767296Z","last_seen":"2026-05-15T17:14:55.600103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/type/defi_activity_type","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://bakkt.art\r\naccess-control-max-age: 1800\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T20:20:42.972793Z","times_seen":15235337,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/BNB%20(1)_20260422153814A009_20260510173131A007.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/BNB%20(1)_20260422153814A009_20260510173131A007.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:31:31 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"c13229790cbfe8c2849e28c1eb5da2bc","sha1":"c51055690486cba0be435e6a1817fd28d5a2d432","sha256":"73b545ffb3d3ecf7ecf11abac41d7bd0291e58b50febfe5c8ebea8fef574aef2","sha512":"74cef891a54a264a4e33f9e9a6d7f089b12f2f9744cb70f06c19a9d67d86356323d6e4b029c01f51565a8bcb8f65d047ad94e2d4378f4625e79bb2294731f1cb","ssdeep":"192:bW57aYQl4/ijq21jgLsKW1Q8LcXJvSj/4CjzF5NccnGEIVZFIj52x8qL:bW5OY3ijq0jgOBIXJo4gzF5fGzVZFBp","tlshash":"5212d094e8c167e09eaf4b64b9751531499606fe066cb823d175fd3c088225ec05fbeb","first_seen":"2026-05-15T17:14:37.741319Z","last_seen":"2026-05-15T17:14:55.571293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1619,"timings":{"blocked":573,"dns":66,"connect":4,"send":0,"wait":463,"receive":8,"ssl":494},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6705fa960b728a585f1188b2999d6fab","sha1":"7930f0ff0b2b44f207e406cce364621c90a5156c","sha256":"386845ee8072ecf7d8c63e8d5479b9611ae924936702cfda21d7c0e1fe373b42","sha512":"ce88157cf7c036cca3a27bcd2c58502d6d8345264b07c784da11674e5813b29ea04fc4605df667dd525bb7bfb1c83e246e47d723acb772e40258de9c8595e8c2","ssdeep":"","tlshash":"25f0be0e0d789ff60d0694c756d8bccc922e2683cea08d30875bcf6c56e15ba1a1aa09","first_seen":"2026-05-15T17:14:37.768252Z","last_seen":"2026-05-15T17:14:55.597203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-eb0ac8cb.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-eb0ac8cb.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: \"6a06b44e-304\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"3a0155ae2ab75a24541480c617c0e15a","sha1":"d285453e4c86196b74d5aa9f5ca3ae0cdcc6e62c","sha256":"b944278116aa3d340074b93e7be762e940f07dd7f1f80cea88485fb55941cf1b","sha512":"cc165d3a7f17d32a6a9cb11acbd9e2a880c9f62c989dce7548eed745b7b62080d13e14733f8fab0cbabd07f56bd2993047dad776b1775322377b195cbfae8612","ssdeep":"","tlshash":"6c01fdf8fc19cebb1f620a4002902600140a1fddfa1415f1a8877e661be4940d7de32e","first_seen":"2026-05-15T17:14:37.73634Z","last_seen":"2026-05-15T17:14:55.565828Z","times_seen":2,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-86d3fbad.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-86d3fbad.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-3934\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14644,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14643)","md5":"787b473b08de4fb9997286414e66cf36","sha1":"caee0f0c6fc041fac727df1f76606fffb7200cea","sha256":"09a675e7f118065b2d3a7124ba4e5f08cc5044803fa2ba0d424de5c57f1b2bb3","sha512":"42ec309c1cd77008848ed782ddb57c9e18070145c2ea1a4752b7d43585c242e1c7aa436a6b76f0f9e3e4e5ae6338397c0d491b08e78cf0a49a4ca123177ac468","ssdeep":"384:Mcww30gtIpvXgaQWVAJK9FSjfAs0GLdfvEk7o/bM/thQC294MCS4SB:MY0rpXHXSjfAScMIC294MCS4O","tlshash":"1962c859f606a63cf1379465408e0410b23e3fde600d89e1b5fc2d466bd2facb76a728","first_seen":"2026-05-15T17:14:37.707914Z","last_seen":"2026-05-15T17:14:55.592213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/%E7%BC%96%E7%BB%84%2026_20260423224147A079.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/%E7%BC%96%E7%BB%84%2026_20260423224147A079.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:41:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2338\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"acc56553b2bfc568339489453f43a314","sha1":"a94e07ffa6f934319e74f80c15880af4f50323b0","sha256":"adea50185fa91fd5d36e38ae89078bcbafd2be0457c8fb2a4bcf5e91c0caff54","sha512":"d6faa85ddefe343e0fe7ab08f85fa75478a29a9a13d15190ccd5d125778c29b7ed78871c84804c17504bb052e863c8cc06d124b78d09620b191bd46e4993f4f9","ssdeep":"","tlshash":"b2411bc6a38fc7ca0e4c25a37e112f0b31d96397568cda9a1f585e1130714dd4db6707","first_seen":"2026-05-15T17:14:37.769131Z","last_seen":"2026-05-15T17:14:55.631785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/Frame%20(4)_20260423223110A071.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/Frame%20(4)_20260423223110A071.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4326\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:31:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1100\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"100b9eee4097556af0c16eb45ce3679c","sha1":"d881330a83983621e16edb5dea1b2163f06a11b6","sha256":"133a040aacdede8e92472bacc01b3a1f1f0336041479b52b44850cba498b14ad","sha512":"96631f4e7a483dd5cb5e6bacb85f95a006f594d7270d0caf73e1b002fcc3671ff1ae85f9c2a1f948a9b44ff308f0913ac7874a269c1d100456c80b0b2c3389f5","ssdeep":"","tlshash":"9711b6dbfee23ceb94439b05dec410199470032934f1890bfc00bbab0904969c0acb5b","first_seen":"2026-05-15T17:14:37.76998Z","last_seen":"2026-05-15T17:14:55.638894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/ETH%20(1)_20260422152429A002_20260510172513A002.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/ETH%20(1)_20260422152429A002_20260510172513A002.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:25:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"41ff25ae153d1be8feaecbfae350cf2d","sha1":"aa82aa615e837859e0d6ee567225ec19f2283a39","sha256":"61938315b746ee5bd8165ea329417addb01a80ac25f35dbe42eed10a35bfab3e","sha512":"198cd6d3b03e1ff96a56df35034c66fd41260d620b3b9b6581aa895e53637b088145b79080e21bc84c98ab6dbdbb20ad65e65af80aa813dfebab63701135b1de","ssdeep":"192:Qq5k04dOGwP6ueix192AWeKLDTM5nqc8eMZljWeNsgKLUMSnm6Q:Q10XddeircLDghz8vlj0gKL2nm6Q","tlshash":"3e12bf15ff28dbc662d7d78ae903234303a95d6605cb6368028cf67032591b565bfb4a","first_seen":"2026-05-15T17:14:37.733336Z","last_seen":"2026-05-15T17:14:55.575335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":576,"dns":71,"connect":2,"send":0,"wait":412,"receive":50,"ssl":502},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/filters-56d83b61.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/filters-56d83b61.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:56 GMT\r\netag: W/\"6a06b44e-c01\"\r\nexpires: Sat, 16 May 2026 05:13:56 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"4fea8b64c7b0403f14d209944bda19ff","sha1":"934a8237e6040dc00e9558d4e236659e074430a9","sha256":"af4f73da05bc72e89dcca560889cda08a12c7165132f29c20d189ff5551cd7bc","sha512":"d49ea2b725f73f8a47750f1ad6a06fc15b8f3a32f141749488e5379d3abe5c1cd493d56ceff35a4ddbe7e1e6758177124f938c23cdb967f130e83daf4bb7f25e","ssdeep":"","tlshash":"805134fefcd3a13356ee6df944288514728ebe20686e0a4df55bd0416a73888d07f768","first_seen":"2026-05-15T17:14:37.706116Z","last_seen":"2026-05-15T17:14:55.569499Z","times_seen":2,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getCoinList","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11701,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"efc16accdc8717dc6da77204134fd06c","sha1":"135b202d64611105a2276bde155260f5742f97ba","sha256":"46971087280791cca2a1ca8a7e40928234b0d7db4f2b6f3e6d0a9a3b5294be7d","sha512":"45742843a29dec76d115f7e02fe3df867c1dee8c3eb6fc5041a91459c6133b8c4228cd77d875ef242782ca9e4c1c653575771bf3b93d9e4b207f8507f58d4c5c","ssdeep":"192:fXlpX1SXr5XR47WX81Xlm/SS+njS9uKhNXsMspY6yMCR9y7MB8GTV7X4ruL2rVVT:81bjnC41BFeOd2n","tlshash":"52320f15553c85f9c079a1d12fffbd12519c31afecca4e1ea3de48988ed8a70a606b07","first_seen":"2026-05-15T17:14:37.771079Z","last_seen":"2026-05-15T17:14:37.771079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getAllSetting","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:56.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13928,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13604), with no line terminators","md5":"62a02ef7852898cefbb84ad3e563ac66","sha1":"c6d53fb149bf945044d35950a17fee4f2621d0c4","sha256":"1182886cbb423040922f84c151d616d2ae0822eae4fbbef03b240e42613135fa","sha512":"6cacb0b3fb9e40cdf69a2e802a42d33bd4ed5efaeec08d2878a21d614dae3ed1d3a21a9a71d76c4561417d27677929e8ca5f1f33cf9f1e34a749160b1ea386c7","ssdeep":"192:cMZLTrYoInOSpQ6WVD+RbIc2h8AHK8octZAmyQzqRotea2KVWSwTQSPXKKQJ8hvS:kZijAc2bTbPaKa8hvUS8aKYA","tlshash":"6d52110a31ecccf992977bc275eb7951a85c35a3f44a580570ffafbc888a671950b10b","first_seen":"2026-05-15T17:14:37.772617Z","last_seen":"2026-05-15T17:14:55.611571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/api/common/getAllSetting","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://bakkt.art\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bakkt.art\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13928,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13604), with no line terminators","md5":"62a02ef7852898cefbb84ad3e563ac66","sha1":"c6d53fb149bf945044d35950a17fee4f2621d0c4","sha256":"1182886cbb423040922f84c151d616d2ae0822eae4fbbef03b240e42613135fa","sha512":"6cacb0b3fb9e40cdf69a2e802a42d33bd4ed5efaeec08d2878a21d614dae3ed1d3a21a9a71d76c4561417d27677929e8ca5f1f33cf9f1e34a749160b1ea386c7","ssdeep":"192:cMZLTrYoInOSpQ6WVD+RbIc2h8AHK8octZAmyQzqRotea2KVWSwTQSPXKKQJ8hvS:kZijAc2bTbPaKa8hvUS8aKYA","tlshash":"6d52110a31ecccf992977bc275eb7951a85c35a3f44a580570ffafbc888a671950b10b","first_seen":"2026-05-15T17:14:37.772617Z","last_seen":"2026-05-15T17:14:55.611571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/charting_library/charting_library.min.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:53.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:54 GMT\r\netag: W/\"65424d19-2a6b\"\r\nexpires: Sat, 16 May 2026 05:13:54 GMT\r\nlast-modified: Wed, 01 Nov 2023 13:05:29 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-05-15T17:15:27.14342Z","times_seen":955,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/index-9032c7de.js","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:55.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/index-9032c7de.js HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 15 May 2026 17:13:55 GMT\r\netag: W/\"6a06b44e-154c\"\r\nexpires: Sat, 16 May 2026 05:13:55 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5445)","md5":"e4f27331dc9b9f293c3cf3dfe8ed8721","sha1":"011fa69f37ee66c192532031977b9af19bafd731","sha256":"548dd52d68d70f4f3373f37293600701556785842e9750307968abc9ae5be5bf","sha512":"07848ca22d04c61de55612a62dea4ddea785962b36b693ffe5c8e1103311f835003ed39b35155e2c8138e9c239427aa7ae9cfff30402926bbeb37018d0910d29","ssdeep":"96:UiRn/55zi12g3tnYfqD+wEiPcp2AXAb8r2tZlxkIEf0I3hvli3MVlcKzookvjR3:5Rnh5ziog3dYfqiwEikpVAbHM0ohvoMo","tlshash":"6eb18448e80386baea63509108555420308c3fbaa119c8f2febe5d2dabb88b9d755731","first_seen":"2026-05-15T17:14:37.7374Z","last_seen":"2026-05-15T17:14:55.561808Z","times_seen":2,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/28/%E8%BD%AE%E6%92%AD%E5%9B%BE1_20260428000441A115.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/28/%E8%BD%AE%E6%92%AD%E5%9B%BE1_20260428000441A115.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 04:04:41 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 438812\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":438812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGBA, non-interlaced","md5":"058d6418808de03c82e4dbcfcc4908cb","sha1":"a562d91411a196fda80e48dbbd69ebb7bfa8530a","sha256":"e6234c3163765dc3983d71a6140f7c08aca639290242d6949cdf9f2ed90943cf","sha512":"5cd90a116da12e0c463bb74e65fef11518be85ba0ffceec9a8c1c2a27ef7dce4e3b4a561923dc375631fa408a024cada3cb2d4575a688da53dedeba62eed87e6","ssdeep":"12288:9gCYCCI1uXC3ex8KIfOZxo7maaK2PALDuBK:9gCNCI1uXISIfOZxo7m02YWc","tlshash":"1894239ee996c5bc76c6c3e91134c34cc942b0a6ffe9da89588412ffdf5867082d2543","first_seen":"2026-05-15T17:14:37.77537Z","last_seen":"2026-05-15T17:14:55.577998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/28/%E8%BD%AE%E6%92%AD%E5%9B%BE2_20260428000622A118.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/28/%E8%BD%AE%E6%92%AD%E5%9B%BE2_20260428000622A118.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 04:06:22 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 382217\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGBA, non-interlaced","md5":"abdd9fe8a5cbcd41df873c6528296c57","sha1":"4abf7b9812cfad1605f9979a976facc83cc177e0","sha256":"e3f052375dc1c2a540002c7cb199bbf89786f9161c1997e854fabfea0109f7e9","sha512":"601ab25a40278a9e1dbea435a34bb6919f13f6159380b8e50cbf313c25da167b29bffd8a09550c1aed98455328644b35dffb0f53952e98d99d428eeff7e2929b","ssdeep":"6144:W4kwLdKdP31hkbXD2K/s4Aot/RO+SO0+GEYZRIpZByDoqq7cGl2u7Rxr+lYLWtdm:W4kjddhkbqMsKg+n0fD4rByDPq7Dl3rT","tlshash":"ec842339ba8e12b6e0f7906b32d6f35d00b4274185d9f724292f3ec116f70f969a18d9","first_seen":"2026-05-15T17:14:37.777044Z","last_seen":"2026-05-15T17:14:55.629017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mevsplit.com/profile/upload/2026/04/23/%E7%BC%96%E7%BB%84%2027_20260423224228A082.png?2.0.1778824270425","fqdn":"api.mevsplit.com","domain":"mevsplit.com","tld":"com"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mevsplit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:50:50 GMT","end":"Mon, 10 Aug 2026 01:50:49 GMT"},"fingerprint":{"sha1":"01:32:4C:9A:F7:D4:EA:1D:BA:71:C0:76:79:90:DB:9D:11:B7:B9:E6","sha256":"61:68:69:35:AA:DD:CE:41:E3:48:CB:CA:28:17:88:B0:D8:D0:D9:04:D6:86:F7:02:B6:4D:9B:18:2F:52:82:A2"}}},"request":{"raw":"GET /profile/upload/2026/04/23/%E7%BC%96%E7%BB%84%2027_20260423224228A082.png?2.0.1778824270425 HTTP/1.1\r\nHost: api.mevsplit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 4327\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 02:42:28 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1959\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"104f69eae2d09e4c51626e9c4ef08259","sha1":"7113d9f400ac0ef7f01e5943a8ca8caaacac38cd","sha256":"c0249af6d480fea9d3b0e78061b66501785b4010e50ae8162d1abeaa7f14f8c3","sha512":"455880efecf805083d53b8033dff9ea15bae4542486542d7833638326de48a695eff04310906d2c5a2fc7852837a80ce6612ddaa69601db4e9c902f1f089a85a","ssdeep":"","tlshash":"e741e8f092c0e5c1e0088eb758f59adfa60be17b124e2a10bcab1719c53ed710c72c02","first_seen":"2026-05-15T17:14:37.77824Z","last_seen":"2026-05-15T17:14:55.616951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bakkt.art/assets/recharge-46550197.png","fqdn":"bakkt.art","domain":"bakkt.art","tld":"art"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakkt.art","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 02:35:50 GMT","end":"Mon, 10 Aug 2026 02:35:49 GMT"},"fingerprint":{"sha1":"7E:F3:C5:CC:1E:C7:BC:7C:A5:A8:BE:41:24:CF:5A:F0:15:CA:42:81","sha256":"79:D4:1A:6F:B1:21:75:77:CF:6A:D1:A1:B2:3B:7D:84:B5:5A:35:BF:0C:E2:AC:54:BE:9A:69:CF:33:56:19:DA"}}},"request":{"raw":"GET /assets/recharge-46550197.png HTTP/1.1\r\nHost: bakkt.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\netag: \"6a06b44e-4de\"\r\nexpires: Sun, 14 Jun 2026 17:13:57 GMT\r\nlast-modified: Fri, 15 May 2026 05:51:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1246\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"e188e007fb7d811080f75130a529e9d9","sha1":"aa64b0017513b7487bbc6806effb5d7a2cdac815","sha256":"46550197cde94bf60b245d45d9660638b243aae2b05f0ed33068973d3358ce5d","sha512":"ab615bfc0ecdd5ad01e0ce1a6425b461a0e281041bb821c70a4d1b73f9e5d9b647eac252d570ec6babb782b7102ff620c8cc438b20859855fa02d4a280abca1c","ssdeep":"","tlshash":"e32174f4f5d42600e72c197f7a071e72fe85568b4d14b4261e6ab032a738c18a59bacb","first_seen":"2026-05-15T17:14:37.779392Z","last_seen":"2026-05-15T17:14:55.599471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"bakkt.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.mevpro.pro/profile/upload/2026/05/10/LTC_20260422153807A008_20260510173000A005.png?2.0.1778824270425","fqdn":"adminapi.mevpro.pro","domain":"mevpro.pro","tld":"pro"},"ip":{"addr":"75.2.97.28","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bakkt.art/","date":"2026-05-15T17:13:57.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.mevpro.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 08:10:15 GMT","end":"Wed, 29 Jul 2026 08:10:14 GMT"},"fingerprint":{"sha1":"DA:E9:DB:D4:3E:A9:E0:E8:C4:57:61:6F:CF:3D:15:AC:A4:44:2E:A6","sha256":"AD:13:19:BC:C1:99:7D:49:08:B0:25:B8:FD:47:60:50:A5:AC:D2:26:C1:7D:BD:BE:72:A1:FE:C7:00:F4:31:4F"}}},"request":{"raw":"GET /profile/upload/2026/05/10/LTC_20260422153807A008_20260510173000A005.png?2.0.1778824270425 HTTP/1.1\r\nHost: adminapi.mevpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Fri, 15 May 2026 17:13:57 GMT\r\nlast-modified: Sun, 10 May 2026 09:30:00 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 6915\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1de328001ff7b7843dda7695d45dc356","sha1":"42015b271549b8dbe24676d22cafa074aa929e76","sha256":"d141c031da7496917382b8dfa3f3f8f0120354d453673b1f86d523aa2d64eac7","sha512":"25a420e6e2c30265aa563b38d399b7bda5f120117fd64b8b9b1930e455c02c9db8d956480bfbb08533fa7142ef84dba7af06d6eedcdd3e573d841e88eb34c00a","ssdeep":"192:mIt090oHxbu3CCRtd0RDo7k105ULgOV6i1o+Zr+Kr/rIAZ:nt090E9apgBLgOV6iG9AIq","tlshash":"5ae1bfd7b50ad42cb8d6f65af2f05761c233b8f570f2c544e3e3c1296a53c6c06a4991","first_seen":"2026-05-15T17:14:37.740371Z","last_seen":"2026-05-15T17:14:55.598954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1536,"timings":{"blocked":559,"dns":69,"connect":4,"send":0,"wait":413,"receive":1,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}