{"report_id":"bc920ad1-8ac0-4e24-9e32-bc3ed536a8ed","version":0,"status":"done","tags":[],"date":"2026-07-19T04:47:36Z","url":{"schema":"http","addr":"cc-metamask.com.cn","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cc-metamask.com.cn/","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"title":"MetaMask下载 | 小狐狸钱包官方丨一键安装","dom":{"size":1494,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9d71a3e57d33e16de7bcfaf5c6d62b8b","sha1":"d3a40be27f9ba763dc3e81800ae9cc215bed10dc","sha256":"b947115b2b3bd23ef42fedb9226b9356dbd96bfe03e89065af42ac4a403d94c8","sha512":"256cf9573b8fcc7c8e57473ab24176c13e50ee669da63785ff088ddffe83ac627beeae71ce3d4c2aa83a2430de42c1b2c930bc2b192399f6ba370e3170ff5a51","ssdeep":"","tlshash":"6931aebbd1145c1ae3248b506a8af64983b4c755a83c1c70e9d9b9ae09c6bdf40f3615","dom_hash":"domhasheb841e059ab7c57aab02628a83bd8ff3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cc-metamask.com.cn","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T04:47:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cc-metamask.com.cn","ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-28","domain_rank":0,"first_seen":"2026-07-19T04:47:36.862411Z","last_seen":"2026-07-19T04:47:36.862411Z","alert_count":12,"request_count":12,"received_data":43011,"sent_data":6037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-14T14:48:37.544814Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":475,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/news-security.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.211Z","timestamp":1784436422211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/news-security.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXO%2B3aXpLz%2BaW0PtEo%2B8YGAhiJC499zyTiGRsvxeDwL%2F8aQiTwc9l86P4pJ%2Bl2hmsOqMWprBm25rtfooooeORlmhbXEQ5qRRFieu8MyXs%2BC%2BGZNTOnzdlY3WWkr6WeDgCbOHRSA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-378\"\r\ncf-ray: a1d715f6cba9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":888,"size_decoded":1126,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e484400d31f7f2a99df75898e6cc0ebb","sha1":"ae82639639e1d86d4aeb90f3460b72956883a5e3","sha256":"0d12d1dd69c19d5f6aff86575e215dac4d780eba928eef2d30f56731974dd9d5","sha512":"ab191ec7cb8dfc6917365b7968f8e7bcdacbf5f82ede6afdba48ae12dad04a0a96483cb2dd8352788633938f80590df0634c588db0777c3d4e9e522f37929153","ssdeep":"","tlshash":"95117a2452cd4a28e7348a4dfb2d38a1239ed5c846568cc4fc51317b508999fdceb24c","first_seen":"2026-07-19T04:47:39.828094Z","last_seen":"2026-07-19T04:52:54.573716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/news-snaps.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.212Z","timestamp":1784436422212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/news-snaps.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YksGHg07%2Bom0NuJ7SGg9YcJFZoAbo%2B%2BtvSE8%2BS77AGXr8FTOWPp%2FcppQ5vCRwLL2M85SWJPoP5oL7NsCpHmlgKvWUAV1vRgtLgQnA4hxIfmVglbSTy6ibn3p8rzayi9b8NVzdAQ%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-356\"\r\ncf-ray: a1d715f6cbaab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":854,"size_decoded":1133,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2f66938e1eb41b18f7fa51442afddb3","sha1":"8fe038cf9f8d00545654b8c0373996025194b55d","sha256":"e7c868b9984435e5d20b027cf36e2f63dba4f96320d6b0c68ba44d0f43fab573","sha512":"05a4aa37d51d55d1f19e1ea26de7a4eff1b4d46341c3c189e9e19cd8420749928a6209eae6a23fb79aea8c80bbd3dc2e60cbb0d39410dd28a9a30081b49f9b5e","ssdeep":"","tlshash":"ae016ff4a3cc581cd7118a4d7b0cbe863356d0dc4a19c944f945325ba441ddbece710c","first_seen":"2026-07-19T04:47:39.828998Z","last_seen":"2026-07-19T04:52:54.57447Z","times_seen":4,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T04:47:00.727Z","timestamp":1784436420727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 08 Jul 2026 09:51:14 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LtRfXnLaGk3FhZvShTEZCtshgwoln9Bd%2BemOJS07YcOar6ok8jx65BkPO4BOWyzGpwor6mb77PeNpwRUBwqJnXP%2FRoPbHIcGgOTRyfiNjy1ozH8M8GkJIhH%2FgQAVVxEF8M5SUAI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1d715ef6b7bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14033,"size_decoded":5022,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6cf88e44e565d7ffe3e425a135dd7660","sha1":"fe7a36ed187506eab416cf02878e57e0ce4e5175","sha256":"442919217ad5221e29e298b28930e29f27a12c5e8cbdc279fdeada38cc4b644d","sha512":"9084ecf6b26e14001a3bf4dd808fb04df33720c44ed4e3b9cd7619b915faa38044e4f941fe9f82ab654a05b5176681ff93c47b9ae1aab668c59496e7fed8dd88","ssdeep":"192:erO14Kx/wfGCBtLZeC6zP1i0HCuPmKPy8FPC3LClgKqbEBIIoL4MESQYHPiisc7D:erO14Kx/wfGCBLmp27UBIIfMEip","tlshash":"2e522f3990f52c7b526791952ba6135a2bb0c343cc5e2914b7ac6d5c4fcbe9f4c1324e","first_seen":"2026-07-19T04:47:39.829846Z","last_seen":"2026-07-19T04:52:54.575299Z","times_seen":2,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":288,"connect":13,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/css/common.css","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:01.915Z","timestamp":1784436421915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Jun 2026 05:49:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a40b5ed-1c56\"\r\nexpires: Sun, 19 Jul 2026 16:47:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TfkPhzcEr%2FUSG7%2BTPgdDSt%2FLxH3wH7m1cwcvGEXAwCttEizYt9x6EdzvpMMubu2nSst7snnJTQjByOf6UVFHGrDBL3TcrkDxHP2EJ9MTA3nYDuAOWp4DU2AoWqiZToxAoGRPw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d715f4fba1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7254,"size_decoded":2942,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"97088d15d48390418f2c549bde18a39d","sha1":"35ab1f8ebc13f8a24b969a2d66000aafc223810d","sha256":"d474707efe5b8a2f1c1784f11634d494b8cb3b791765edfb971fe9c0f4e53386","sha512":"2a4cafb1d3545b9b52086a7912b3e77616377ce709bb3d1b0caa275419b3ece29d065b88a40dd378fdc0a40fe2cb7627e66e43b40f2987b763513dc9134dc169","ssdeep":"96:HODHehWQNUEX9i3Jfin+43TQv9yWASYMQzl/F8rVeNDQJc5mGZbbJ0QLN7XNPkLb:HLiYO32l65oPKy+iI","tlshash":"86e1554ca72950756637efb4bbd64b19f7e890524e0243aebff41004a2c52bc6261fcd","first_seen":"2026-07-19T04:47:39.830747Z","last_seen":"2026-07-19T04:52:54.576073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/js/main.js","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.198Z","timestamp":1784436422198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 16:47:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPcS06RlfbYLYj%2FklCsnz3tSNy%2FV%2BqozzY1CMdTFoyWi%2FxNyLDKHFtq5qPk2K3XhpxFasHVgTULnbqRx5jCk44OPT5dmGCpDMOyLP2T0JMpTbSwZQXwD2ihQbijKEVXYoV1OFho%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-290\"\r\ncf-ray: a1d715f6bba3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":1112,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"12c5c9216a873d4ff4638cab62c04b85","sha1":"04add4c691bc2192aaebfda8272655dc6282d37d","sha256":"3fd106ec1cd62c53b633eca1bdc6e14eb237e7886771b8ff804041bc74bb65ad","sha512":"9aee7c60bd75b019c89e82b5b36ccf3b079e1d4e76e3ddd92305e8817c505e5a5cf9fc893d02b05cca153fc5da59fd06da3781208aff9f8a9556d5abcc055e16","ssdeep":"","tlshash":"b8f0261775a12076c9766b75c39a62a9f43700672005c212bcacc40a2fb09891b7acd9","first_seen":"2026-07-19T04:47:39.831644Z","last_seen":"2026-07-19T04:52:54.578014Z","times_seen":4,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/browser-extension.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.208Z","timestamp":1784436422208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/browser-extension.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a40b5ee-4de\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVHMx3OVmYxj60owzFN6bPD735QxansbvLzWP1S74xEocXjBrCD7fdzevF2%2FJo6IwK7kRwkkBLXoPjVRiZQalgplAIdHke6KNdlU8Qm2UDBvhs4tzxRh%2FAxZOsocxkcm2z7A5pg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d715f6cba6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1246,"size_decoded":1299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ffc60174a222d60fd4fb4c1d683c8dc","sha1":"d1db5e7580de7fd13b79b225e99ce2f5300be728","sha256":"7aef879f952950901f40ef48458b231b18b1aa3400b55cf1e5f076eb86945000","sha512":"ee04d02ffd841a0e7008196f03bdf2a06363b53f17b0b9bf8655555a923c592bec1f83377d170f545c132e4aa411e412cf772f71bdf93e89ced4ed711998a217","ssdeep":"","tlshash":"f6217da071cc140ed7648a0ca30f7ad363cef1ce8a1a8b14f45174276a42adbbddb315","first_seen":"2026-07-19T04:47:39.832583Z","last_seen":"2026-07-19T04:52:54.57182Z","times_seen":4,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/news-update.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.210Z","timestamp":1784436422210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/news-update.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RI5oKZW1kwYkxMjQ53vJx0g9Fy3kBF3eqJCVZIVquaKPvvebQeuyVjiKo%2FG2aC3gC08aZDXbTJnvGth5lUkycIdzIO5SxYvw9hiFkw1FGT%2FqXZgsUeZHaoj9ZYsvdinlAeLkkFc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-3a3\"\r\ncf-ray: a1d715f6cba8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":931,"size_decoded":1175,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f39337d8e85837c7a9f0103b140d0f0","sha1":"550b102d08cf89846d1809a4c88f5636da1d08fa","sha256":"4085307717f4d39e2811cb624e0ac6ceef2f44a5db5654d1dc982046a8797503","sha512":"8db8fe108f0a377cd52f3e925f3e1ab67384bf0a5ca92ee3e2ffe0772eb6af02acfa555183cbd40c8a9c78731963421998015bca519045bb81a69c0a66771517","ssdeep":"","tlshash":"1c11edb4e1cd4424c9788b549baf34e3665ed4ca08528965f87f60132c894dbbccb614","first_seen":"2026-07-19T04:47:39.833531Z","last_seen":"2026-07-19T04:52:54.572629Z","times_seen":4,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/logo.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:04.082Z","timestamp":1784436424082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:04 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4e4iYn3K3Q1ShCXl2kp3JHZFAIanoBQFyyaao2oowXUTwmL6cap4WMJFUJ9Rmc0Qvm53cANCf7RVPTRCesdAnJModYqE1Utiq3vrjIFB8wbrZMj3j0VGi1SbH6JdtagoN4PUPQ%3D\"}]}\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-3c5\"\r\ncf-ray: a1d716028bf1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":965,"size_decoded":1171,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c78e2a329938c496637f781ed4dd9788","sha1":"915fcaa84a428042a5239f4ee1a6db349611cdb5","sha256":"8f0f6d3ddc8f63247454601645b0fb3d8bf64d98e4187b92c0eed76c7956eb51","sha512":"0927fc1ca80438b6b6b8c8b45def23d91f281d3d28ca66da9ff87b9d3fc03bf92d17385461315cb689afa87fb2f2514564dd6bb27ef9085fe4a1defa16ff5d35","ssdeep":"","tlshash":"b511d01166cd491ace341364bf3cb8d2594fd5c340d50151b456793f76134f67c6bba0","first_seen":"2026-07-19T04:47:39.834708Z","last_seen":"2026-07-19T04:52:54.570998Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/css/home.css","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:01.958Z","timestamp":1784436421958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /css/home.css HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Jun 2026 05:49:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a40b5ed-ccf\"\r\nexpires: Sun, 19 Jul 2026 16:47:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5FdV%2FdLtuQsl6MTZEhADu74FffpWkuOU9ve6YHeB3KPjqy4ZS1Gu7zygDL84bs77yweNR3IYooeDKhn6vEhuScFob74hkwLsXXMxThnBE1IJ37C6zE45sV5K69Ah8f%2B6Mq6ThM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d715f53ba2b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3279,"size_decoded":1851,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c1133c1f4b9eedee9daf72e66042f3dd","sha1":"f89695c1ca4f0d5e2d68ab7f0d8b3d03d3e309fa","sha256":"dbc7c560eb4b3f68e8a7ece03c914c57edab87c6a8163a8f562180ee5331cc4e","sha512":"afe4a567237561e5f929bd579beb713b7f0d5474250c0ae41d5f6ce864a1c1e5dc24c1b4070704f96b77d7a4796a54becc1f7e64cf2c79401915a21ba3dbe5f6","ssdeep":"","tlshash":"9d61bc9d6719517a573bfe74e7929b08f6c040614e0a13ed7af45004b2c84fe5269fcd","first_seen":"2026-07-19T04:47:39.835613Z","last_seen":"2026-07-19T04:52:54.576827Z","times_seen":4,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.194Z","timestamp":1784436422194,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T19:25:14.667088Z","times_seen":17401547,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/logo.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.205Z","timestamp":1784436422205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjUf47Gv5GbRLkeDydcw9CyTdrIL%2FXczAttsE6QwSl9p9ezf9yDTeYwMaBSH%2B24Svwe5%2BVowRiZdpokkGYqx%2F%2FVX98hRlUZHz3LrnJer1aTUg%2FOOZPpkpjz%2FPJpI1U9368TqKKU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-3c5\"\r\ncf-ray: a1d715f6cba4b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":965,"size_decoded":1175,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c78e2a329938c496637f781ed4dd9788","sha1":"915fcaa84a428042a5239f4ee1a6db349611cdb5","sha256":"8f0f6d3ddc8f63247454601645b0fb3d8bf64d98e4187b92c0eed76c7956eb51","sha512":"0927fc1ca80438b6b6b8c8b45def23d91f281d3d28ca66da9ff87b9d3fc03bf92d17385461315cb689afa87fb2f2514564dd6bb27ef9085fe4a1defa16ff5d35","ssdeep":"","tlshash":"b511d01166cd491ace341364bf3cb8d2594fd5c340d50151b456793f76134f67c6bba0","first_seen":"2026-07-19T04:47:39.834708Z","last_seen":"2026-07-19T04:52:54.570998Z","times_seen":4,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/hero-wallet.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.206Z","timestamp":1784436422206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/hero-wallet.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a40b5ee-990\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jt4qchmO9h%2B1HunKM6mgCCVAn8LE2bVgmg6baYcaTxhB%2B8jtjv2GZg5Ovs02TQbrRTK3FEYJtbctT%2BQ4e044CVJbtGxxOStVY4%2FgM29sSYt5UPQ%2F46LGTlDQ%2BBkQ2lpyaAPMcdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d715f6cba5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2448,"size_decoded":1534,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e6bb0b0c70ac8c306ac9bee6f0e2b6b","sha1":"368f6aecd4af6baf7e0f32599151628a4bfa7e3c","sha256":"23ebb289f1a19363d807ccfd6142388b5616c50f1ba865d9fcd32452d6b5eac8","sha512":"7bc6df05606e06b557134953bbb5fef2267f9f75814bf0a3e72082da66a259addb56d8900e882bd2da7799e301445a72e7076e387692e182463adef727c64ca3","ssdeep":"","tlshash":"1c5160a2a1cc8519cb70ca08b74bb5a3634cd5ca8587ce90f82d765b29c58d79edb324","first_seen":"2026-07-19T04:47:39.837133Z","last_seen":"2026-07-19T04:52:54.578737Z","times_seen":4,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc-metamask.com.cn/images/shield.svg","fqdn":"cc-metamask.com.cn","domain":"cc-metamask.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc-metamask.com.cn/","date":"2026-07-19T04:47:02.209Z","timestamp":1784436422209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc-metamask.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 04:50:44 GMT","end":"Sat, 26 Sep 2026 05:48:03 GMT"},"fingerprint":{"sha1":"6B:4F:D4:FB:B8:B6:E7:CB:9E:8D:46:0B:5A:8E:96:CF:D4:A4:E4:6E","sha256":"1B:9E:28:D2:C9:1E:7D:2F:D2:51:48:79:43:E0:EE:BA:8B:A3:92:32:DE:8D:06:D5:A8:53:70:52:07:58:B0:71"}}},"request":{"raw":"GET /images/shield.svg HTTP/1.1\r\nHost: cc-metamask.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cc-metamask.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 04:47:02 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Sun, 28 Jun 2026 05:49:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucL%2FNbNRphlXAfIyKxQw7BXJYEzj9nOIc%2BsFKwH8vizuWOsK66AEfUgAe8RfPdXEWWoEEJt3Cl6zStWCRE7pkzUGgF9B7JYv4zMdeaRrwpXffcyEkB5GGV7WTap400dEbSA%2FrmI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a40b5ee-265\"\r\ncf-ray: a1d715f6cba7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":613,"size_decoded":1082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88cfe3af856b05dcc07023d2cfd18c34","sha1":"104845384832f27a9218a1966c1ed9048eeaa108","sha256":"ace2cfe954b67dea220b9b41b01f4d59b7930797e0457d8274256b0ea867db0a","sha512":"2ccbc8ec23d7178d075f7dcc124e62eb69e68db485bac92c3c07e82bec38377ab2a4f5c5dcd128fd6c6ea0674808e7d8da0ba1ba94da91f14ec32f5e01c7ff77","ssdeep":"","tlshash":"00f081f5da5c1c8fb82213a49fad71e1233de6d2024401e99c2b28716d1d49fe97bd84","first_seen":"2026-07-19T04:47:39.838177Z","last_seen":"2026-07-19T04:52:54.57946Z","times_seen":4,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"cc-metamask.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}