{"report_id":"d6a0bdf7-3406-460f-8eb6-e1837d902070","version":0,"status":"done","tags":[],"date":"2026-09-14T18:39:14Z","url":{"schema":"http","addr":"mtoken.me.uk/","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mtoken.me.uk/","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"title":"imToken | Ethereum \u0026 Bitcoin Wallet","dom":{"size":14711,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14605), with no line terminators","md5":"257512e86c6429e023525f4a0befb556","sha1":"67e0aa561ae0540682af02f66793df72b1a56e01","sha256":"50eded8d706a9a1061ca2657b721f1df0511dcbcf0c93a3b05548162add34d94","sha512":"5e845c3fa870982b38cfd6a12eea9a372de8afa380cf81a74569a7cd03fdab97736782638b3ae9c06614a40a9c1fa12d050dbfbede02bf41b3b151e7fd3e1227","ssdeep":"384:U6/IedSlEmx+v8ddtcsFNY9MYPFn/va+V6R:UQdIEmQv8ddtjFNY9MY9HXVy","tlshash":"ce622f63ec15ea2746524ccae073ab7d90d6823eca71ac5c92fc86ca97c0fd98f52445","dom_hash":"domhasha0d25f5ae6e003a556fdcc2665a2a35b","first_seen":"2026-08-01T18:00:42.805216Z","last_seen":"2026-09-14T18:39:20.440274Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mtoken.me.uk/","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T18:39:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mtoken.me.uk","ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-12","domain_rank":0,"first_seen":"2026-09-13T12:05:48.159688Z","last_seen":"2026-09-13T12:05:48.159688Z","alert_count":59,"request_count":59,"received_data":2989202,"sent_data":29103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mtoken.me.uk/","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3df19e441353cb68863ec925536b4b","sha1":"00b66b442661cfa1531e204e3b8b7450358ad4c6","sha256":"b09ffec0df9986f84d6e39e360bacc77dca897b7981cd10b271839c555aead75","sha512":"77d8ee923d86bf91ad6ee782642026b53253a5d8f2e503e61ce899d2ddce9f627f43950f5b57e3192413e902cd21b8d0cb62d1d14662530d4986988274e93e0d","ssdeep":"","tlshash":"23f0c0c1e0342639afe250506dde638f4c7630657000894dc4308fc55c74ac83afe1d6","size":503,"data":"","first_seen":"2026-03-31T14:52:48.782219Z","last_seen":"2026-09-14T19:37:02.695476Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/baiduPush.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bb24a2906b2b7777cf01e648727281a","sha1":"3ec92d0ae833464e696a1f2916857f6c05c81e47","sha256":"5462c841c26c4bc11177c959d92befdd7f9d7c02de5a2bb6d49b33f92189d03c","sha512":"098ea8e99c1dc303ce1d4c1193fff8a05a7bf1816825c439e1060e70eba3abdbd07963b12d951cae7418a80694ece565ef01224cabf2417319bf1943538050f9","ssdeep":"","tlshash":"44c0126d79558534374404bad57bda5df052303855699413c84edc453424dd74419a59","size":190,"data":"","first_seen":"2023-06-26T14:35:54Z","last_seen":"2026-09-14T19:37:02.687228Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/484c840239a025432effd6ecc373d498fa764368_CSS.118394efc85bb3e961c1.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c52964f8a3254cb2484ddb77c0856a9","sha1":"8be27c1d91d79d6d85ced1c49646de0a8bd26d67","sha256":"c1134e3463a8e7c17815dd13c874c721f541e6054a0d25ba8eae0245401c9063","sha512":"b55e758c8691373f027b2f5b74aa6456bdbd886f9862abe5f206934a1e180ba123d4490fe7f75863c99e0bca147cb8a61212b13612bbc0e9eeba91f361b2453e","ssdeep":"","tlshash":"4ca002a710017c9aa8fc42c827a3a7b43c48001c1f00dcf81b199071b071d0faaa01c7","size":70,"data":"","first_seen":"2023-03-10T12:36:26Z","last_seen":"2026-09-14T19:36:45.656337Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/main-8151490efdf97440a17a.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b970ae78f33918cbef06cb859959bb9b","sha1":"9bb0949dfbdd7fa03f28fbfe1e9248a446c97c35","sha256":"126339554462e3a26bf9ebff853b05a396cca65a18d38888ebb629b755d1e281","sha512":"ac268198d7bbdd0c6ce569f005c93d5b2a6c1b10d9a7acb40bdaa8d2bbf81273b9be3297c2aac2c09051d016449720b79db8f94d9ae1f5967b3e58d0fb633f04","ssdeep":"384:X+laOqpTcr+3u+NtL+JyIKuWLnr+tCTruuL+vIQY6bMyld6SnhF/AT:ulMpIr+3ugtL+JVWL+CTrZ+pld64FYT","tlshash":"5cd2c8ddb6c6f02203d33134903f610bb37b2958a84d8454a759e9e67c7a94ea227f7c","size":28565,"data":"","first_seen":"2024-08-22T17:17:34.030065Z","last_seen":"2026-09-14T19:37:02.67741Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/24d5c77af3764ba53b59e4eb9084ad0db77fa666.b68303f7b559851a7150.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d94b2b2e4ceb3a8d3ffc54c28cca396f","sha1":"ce358f05fafd16a6131bdeed8419d087fe74d8a7","sha256":"641584ae9a8a6f63cc13b74de0502adf40d06224b8e44717c0c16716e6dfe1b9","sha512":"c69eb7c93e139050fa407943ec6811e94dda5a3c5d3c44a0d90999690f275f180f19cbfadf28c294bc251e65f5d3988d0d7d4039cddc7153d294c076561b3a26","ssdeep":"768:TlfughpHOCJlIx4/TTdCR1/f28NnOkJlIx4qfCxelhUtCe:ZdpuDyT0Xf49W6hg","tlshash":"6103939cb1d3f06643d22264802f210af27e5959b44ec485f729ecd2b97894fa237f79","size":38861,"data":"","first_seen":"2024-08-22T11:11:22Z","last_seen":"2026-09-14T19:37:02.679614Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/aec7d165.15f05aecd792e476c6d7.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87176dcffa419147a6f9c4e1ba9a72e6","sha1":"59835a44be3f43788c2662906fda25ad8505f299","sha256":"81d1c0630f70d1831ac13e2e4f212b532052be907ceded265f49bb8ae934a54d","sha512":"26890c42b28d16e4d7690d68c203ee438c0f7ab487d5e40c2a798a5b2a84c5f6f754cc22a4e9c7121a6e4c8b08969fbe3faa7798a35ea1c0acbec960a3f3535f","ssdeep":"3072:9OPs5At4sA10x5rTzcck1I2cbwHYS8cbRmMrye3LgbxKGyJHgJxmjwKeYHAXAOhe:9OHjUHYeHJw9XZG3XqDUFmkMtEFcA","tlshash":"feb46628c51482bc9dba5ba88d325075a65e91ff71e14325e36eccb073610dcf7aacc9","size":494383,"data":"","first_seen":"2024-03-29T05:20:17Z","last_seen":"2026-09-14T19:37:02.684463Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/pages/index-06bfbdeb1b030a5142cb.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f2c89baeec86c74ec36538f75a291e2","sha1":"fd790f6aedc1e9aa4d1e48155319fdf2993d250d","sha256":"019e367df6252f903624feb5a2c88bcb2eaaf5e280277c331ee1dbbb133614d1","sha512":"3b1f7a463c3c7e8986b112e3ee04b9def3540957869a60c0e7285161156abe95b1fc1d88a3b93fdbdd300128a619fa2d88efde6ec779b06cbdb1eef6c8518431","ssdeep":"1536:gRGUGF+M+wTRGUqY+M+VnRGUk7+M+loY+esBrxRGUmr+q+wrUGx7gimUFwnH2JT6:gbZ3Ab63FbB3geubTtwrUZ4Gj3/5","tlshash":"f59323c4f7dda857821171284c3f94cda17da4bb9a9888efbe58e09428e443dc379d78","size":94191,"data":"","first_seen":"2025-01-14T11:39:47.145236Z","last_seen":"2026-09-14T19:36:45.649415Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/framework.a0cc4416b9424a5588b2.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f52502ac9007133582fe44e8c7b70136","sha1":"6f017871e79d3b5e08aab7db5080e287fc2212c5","sha256":"275ca0ad51cab700a7c66736740557494b815a03fc464577b9c0fdfaf9c41441","sha512":"cec19cb62a3e74b2d9be8d0049597049d6b0d53754c2d6f24d5d422b59a16998fbb33ecfd5cfe53af0f1437f98056517e44e2a16adae3e1865a1fab6609d01ff","ssdeep":"1536:U4v3hV6X5JRGNeG4XFmkXdKwDSuSdDp7FktuGhR8XvCi0AHlk:nfhV6TZ1YwKt7gRwCi0AHlk","tlshash":"e7c3f8d93992f5626bf311b7109f1813733d161b280c4960a212fddeb9bd05ea12bf9e","size":129218,"data":"","first_seen":"2023-09-20T16:39:30Z","last_seen":"2026-09-14T19:37:02.68878Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-14T19:42:47.369774Z","times_seen":434397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/common.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f82ea3f9225dd45fec3eebd6e63c954c","sha1":"2d6886dbbb8be31c4b2e4da073ce5230a6bfeb2a","sha256":"59e2227be4a47a7fb1d43287da5e2df66f60a6dd98e606b7ec6995c46a14126a","sha512":"0d22f8b10915b50abc1e4ea28be4765384afa8f08fd08b1a87af2072ed2933b311d5da5fc1176c6cfdaa4a3895084d7093e6c1838ead3e709cf93917d43cdec1","ssdeep":"","tlshash":"f451118e72c9b5b766eb1dbd11af379c793a118bd80c8011647ac8d95a701858033eef","size":2743,"data":"","first_seen":"2023-03-13T01:47:10Z","last_seen":"2026-09-14T19:37:02.686233Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544_CSS.ff5578978733a40a67a3.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b54e11e9a03640be21a29dcee2e7436c","sha1":"49e578b58377bbe697aefa5ee7b278cde8beafd7","sha256":"a324955b6aaeec85e72d8160f86a6f1cbbafe0eb3ac848ca832b8ad2f158f3d6","sha512":"932e86a4440fb2efd0754b82e870eb4bd62b8fb4b79e71041ae3335a2ddeb7eb234117a75a96664128dafce247d8b7164993c18af287cfecbd6972f459596a65","ssdeep":"","tlshash":"f9a0026710117c9aa8fc024827a3a7b03858401c1f00cdf81b159071b071d0faaa01c7","size":69,"data":"","first_seen":"2023-03-07T15:16:04Z","last_seen":"2026-09-14T19:37:02.685686Z","times_seen":372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/styles.8644ff0f5a975963f94d.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de9d77950776a69ffa50f7234df7190c","sha1":"483ede0c4f7ab5df20cbd9ff21e83feb7ee4be5e","sha256":"60a1d40c6f02c26f052e84e5e2992893a59d08fa2d3d4eb486cd518711828d0b","sha512":"32ae10a4e27c502c1d1ddde36638a1b1c8a3945485bca60d892d912b04fe7d3ddca07fba3fed7018053ba2aea01396230b9c723294e14bd1e40e8b08bdef9f91","ssdeep":"","tlshash":"2cd0420839a03577a5e621e4215b31d81ca6121e36fcfc9817f4c19adb3278e145398e","size":256,"data":"","first_seen":"2024-08-22T11:11:23Z","last_seen":"2026-09-14T19:37:02.677977Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/YOz1gQVypx2fvdmmbu1RN/_buildManifest.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c8a8b0f0b27c4d042081326b8459750","sha1":"01852002dd199069ac3fcac3c1f9f88a3eb2ad9a","sha256":"c78b42b5ba39311ed2c9a39b7a0ec73285e4b97853a2e491a4394a4a25728db0","sha512":"f54c153e1b03bd818ff9d4fa7ded49b9e25dd5b6ab6511c6918cc1a4f6742c752b5bc3b6480838122b988aa3bef4858fccd1e0d9bc7bd6305528afbe7525c079","ssdeep":"48:JrI7rapUm3hgnD0gj8EVL+o8camiFxeGVzmT+2ujpA6ZKSsjf9md:dYGpB349xVLxr2FMCLOmKSs0d","tlshash":"f081ac421d33bf452ed3fc496cbdaf3d45d015b1e9fa06a382ad482ec9804349f79695","size":4156,"data":"","first_seen":"2024-09-24T14:50:12Z","last_seen":"2026-09-14T19:36:45.60673Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/scrollreveal.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"126cb7c432914f6c726ff146110dcb75","sha1":"e5358bdb7769288dc7c2dc10508e98387e85b6e2","sha256":"fd08659fe0f20fd14dcf4c3c5acdde64de96028174f59b0b3dc776b62be789b9","sha512":"005fd83d6e18b49ad8bc8e46c853e03eb34808c7913aa6df836e6f57a4f41a1256c901b78697c85e6001ddc6c5870dc46f1f3cb500fe74fe69f9ddddc980e4ae","ssdeep":"192:zjBEC60RtRcCT+Ytnvm1uvb/E3aQ6ZvxrTZ6fNrb:zNE312Ntnvm1MbEIZvZTZ6fNrb","tlshash":"cd12d68f3e1274339b5349d5e2df064f773849da2a0b9484b2b4d0bab8b101d6243f6d","size":9095,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-09-14T19:37:02.694916Z","times_seen":1627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/39b70e0b8818b2ed38d7d3012b8680c74b29b775.4c728255a8c13b372e67.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3671c7c9f419eb8ae66b0278e5875025","sha1":"cfce1cd0af151b59e103f30ef4c9559762a31a66","sha256":"6e49887c6a270ff031878e05ddcad3e23761a00d16687c40479623b363fe7883","sha512":"8d3dc94cc246502d115a8ea4a286dd07acfc31e9749c6de5141becf5d5b4e6117ece10c9d578dadf2be8766b2066d1bf0e498359a570632af82d966f36760960","ssdeep":"3072:SAjJvvYt0QXos88JJS06/65PrI50/eEFUR5vBLeL6KJKPHZXXbse47xZ8BIUJQnR:t5Yeg+k/eFg4RXQnMh/8L/U0d4ASnQ","tlshash":"5a34a60fd7355eb7086b51cd1dd96ffce8d2030641c8d87ac7ea55891b4c9beaa23a02","size":252443,"data":"","first_seen":"2025-08-30T07:44:58.098816Z","last_seen":"2026-09-14T19:36:45.622124Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/484c840239a025432effd6ecc373d498fa764368.bee599c337280fe21dc2.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5698d48f2349dcbaf2357ffed90642dd","sha1":"6b69369abe7fa5d26bbd627788d00bd176bd6b2d","sha256":"3543430b71eaba3a08df061cc4af243dbbeba19813f37de40da8346908942cf3","sha512":"5d5823c9c944e2bf22b50156039794ce20888bb026ffa4a42f7b7b27b88f33bd87a3113ebd3f5042008d954989e31d7b6e4fcf596bf35c39a9a9e52696a1c472","ssdeep":"1536:SbjtAYCvF9OWnpxoxYDquqy/D0hcmkIZqAXDyzWT:ZIDfT","tlshash":"f553d7a871d1f4b552e350a6402f150af3762d6c842db880f3b1c8f4be7a65e5627f3a","size":65571,"data":"","first_seen":"2024-02-27T11:11:02Z","last_seen":"2026-09-14T19:36:45.643309Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/help-zh.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"540bdce1a4de261ab7a227bb501ca319","sha1":"900ababb41b2dbf10245edfa16f495c355b3e425","sha256":"243fc598e4b794f61da4a8cead8f39d876148d347c11545cce724d385f5243f9","sha512":"0b5878027aeea7d9f7f58ea8937435b0288e67645469abfd522026a880458de3820c21017356d317aeef6ea264e383ab1e198556d9b3c9270f9e7cf9146a82ec","ssdeep":"","tlshash":"04f0ddfd7906b824877391e5a3afdb0c76d76201a98548c2d58bccc0b43cd5b050fa49","size":647,"data":"","first_seen":"2024-01-26T16:54:53Z","last_seen":"2026-09-14T19:37:02.682867Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/webpack-22eaaa575d3c455933b4.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2019297a9ccffe0e261600bad1b1f98a","sha1":"a7af96e8e11cadb4f053e78cc91cd7c531f1e877","sha256":"75fa1c4760ad6194a99710872e3612002c84c4df8339a57be0cb4aad1bde794a","sha512":"931b78e601e346f1ae773b8321cdf332b8dcc1fc2345d76f2a187c4c331f30c9f328ef72435b7302293d28b5ab1742685e5d89ce174c0af9c73ede3a9afff1a4","ssdeep":"","tlshash":"193131d536a4fcac53821d5d083f7006f2291d65127cf5c19384e8b2bc6488e9166eaa","size":1539,"data":"","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-09-14T19:36:45.658111Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/YOz1gQVypx2fvdmmbu1RN/_ssgManifest.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abee47769bf307639ace4945f9cfd4ff","sha1":"c0a0dc51ee8a2852baf5ff30c33b1478ff302585","sha256":"653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479","sha512":"2b074799106698df69a28fcd8255c3cfd1ccf40fd4c1bf5d463c42e63b32856f801e066706fbd960a0da4ebe645c070c398dcf01bd722dc4fa592266361ae81a","ssdeep":"","tlshash":"d4a001a0903cdc60aa63dd1c126013168fa05062651d28938afd2054c0341410300d50","size":76,"data":"","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-14T19:51:52.848042Z","times_seen":17975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/commons.3563e86951c42a3cedc3.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8cfea2bb1577c5e0c431cc92cef9e0b","sha1":"cba31c9e3d0b79ec958595668cad4ce3c18339a1","sha256":"17d84657d02e74b9bc1f511e05473159531d2c86ff8de697e614986fc6ed3f4b","sha512":"e3b04deea299fb26fe1f025d73751bb94f5949905c2fc0befa2b0395240c18672e1810f70fb83b545218b9d9637c4bd1e469ec46b2f1f6feed6261dad958f6b6","ssdeep":"384:2EXRdmhT+b3C8zlDqUfLIJ0X4auaHKdxrQG21561sO2oXD9zs:9hdmhT+b3Rzlhi0oauaHUQj561Zps","tlshash":"26725ecab1c7b1255793f1b4002f160af62f98a9384f89a9e565d5c2bc7884dc037fb8","size":16971,"data":"","first_seen":"2024-01-06T17:59:56Z","last_seen":"2026-09-14T19:37:02.693292Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/29107295.6d4b8f5c00e5492aea21.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d8225dc49f0ef650c322d2a4964177e","sha1":"8704bb7a8a5cd075068c6d79e7d4b6c9aa08645c","sha256":"03babc01567b1d9af291b4de0a070ef189685c333c948136a31aa08e7ed51a5a","sha512":"5dc846622a7be3961ea31724b6ad89aec34a0f9935b8ac89e5dbc15b70ae4255956e0fa4ad412dcaf1edc0ee025572ef596cfddaa0e6bc3f448fc79942d72078","ssdeep":"1536:xhdVA1ObQbCbmExG502EoIWYwICTJSIHg:z7/mE8502EPWYwICT/A","tlshash":"b3734ec83ec2f016576760b1007f048bf13eaeb269ad9554d0a1e4ec7cb851ee6b7e18","size":73852,"data":"","first_seen":"2023-03-13T01:47:10Z","last_seen":"2026-09-14T19:37:02.686699Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T19:52:57.280328Z","times_seen":128089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/analysis.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97330450853d21edf4badf5b384ca25b","sha1":"bd48c020be1b41d9386cd30d10c8a81bb27a8a97","sha256":"96e39b302859f25ccc60a28271e00c51a73c4d8f7ae40b93c61320f17097df7b","sha512":"3283e67ca75264203c67053a049a0345185df2a96de8a68892d9d8f497da9e6a99d80fb275b1f254b425383c3fee40659ada7df0b263377a2d322290e3ede5b0","ssdeep":"","tlshash":"f021118e35591a747fda1bef2377d71c702360187920ea1246dfccc8602aed250276cd","size":1202,"data":"","first_seen":"2025-08-30T07:44:58.125982Z","last_seen":"2026-09-14T19:37:02.687708Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/pages/_app-ed560fec44d29c99d1af.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d64273a1db46e38f54989e3c9bcf7de","sha1":"0b3557f37d77a4b2bebf2768e705fe8f98c852ae","sha256":"56d7cda8e785c97251fbc282b63646253a91a0238fe2127d28ec0f759ad518c0","sha512":"0e4c75809281ffbd0669238f3b5c47bccc56d69c17e546ec33b8ade182d75b47a05ea43bf29c920787713b3614a03fcedc6f557d2149846930928e16c2282a0c","ssdeep":"192:Rd7N1IZN0MQaZwCplOb3asz95NSXuxopz:RxYZeauCyb3ashSXuxez","tlshash":"510283897191f09517fb91f2503f510eb3f2692da499d4806762c4f89efa9ae4323f1c","size":8369,"data":"","first_seen":"2024-08-22T11:11:23Z","last_seen":"2026-09-14T19:36:45.653287Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544.724b3e4d54c037e5a62b.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d3fc7fd99e1d4459a40e10694e15e6a","sha1":"c092d8c3f9cd79bf630519bc00557a8705363886","sha256":"27735c6194ccdf74f77e3ec21dbe8d5c7e171061513b078edd88921d82d59ed7","sha512":"f5792a07b494348eda75c2ecb41ab293be281ef0752eb218fc75d5722221dd70d60e45883240871d510ef67025f5c4abade098f6db5ca9fcdccdf0a45ee341ba","ssdeep":"12288:isJ1xoG0KTfTCZDzZiRxMXK5jnhFcLSUa:isJ1xoG0yfTCZDzZiRxMXK5jnhFcLSUa","tlshash":"1ed43c4abae260309167b1bd4b6fa405b134841f0d99fd043e8c92a99f1c43da7b6fdd","size":647753,"data":"","first_seen":"2026-03-31T14:52:48.778611Z","last_seen":"2026-09-14T19:36:45.654419Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/19f24c842955fbbab397f79015225d5d350aa544_CSS.2640c564.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.500Z","timestamp":1789411122500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/19f24c842955fbbab397f79015225d5d350aa544_CSS.2640c564.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-3aea8\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaKHxBQYvjbTd4OdXR56T%2BfmfoIK9dtwqsj286EEk5aFTLIUOM8r7AESvgtSz3N91Xd6SlL2iN5gDRSx8qHpJ%2BkEwRqgP8MzxNBrAd3JT1%2FvsZmTv%2BZU%2FtXaGA2DHKI%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b1829bb9295865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241320,"size_decoded":32536,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1cbadc929fdbf62a67d75dbc75758a2e","sha1":"3871a21aad35918097020e5d44a02fb3afb9c181","sha256":"509c2d2341380abc5c6189d6efc50f605aae70bfc8cb7eecdb05d5b4815b6c63","sha512":"65d4a4982e19c65b001d00f83d791182b339da663b18621886a38296219b2f9ee433510e2e7814f52b05b7b9307894459aabf98cfec7b209d1cdcc7883842a31","ssdeep":"1536:gBzfkfXfkfuf+fyf+f80vaYGOxTOR9EOXor12HF:0fkfXfkfuf+fyf+fxvLdiEOXR","tlshash":"7234b99165d1312cba6fc727b6e49889a7204523d36f9dfea131329dcf85287239370e","first_seen":"2025-10-30T01:19:28.216508Z","last_seen":"2026-09-14T19:37:02.688232Z","times_seen":38,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/imkey.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.546Z","timestamp":1789411122546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/imkey.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-3423\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uBhn1JM4TXVUJefjv7bxE971SPp6fKhbNnGOaQ%2BpyNYeEPfSXjqwUguH5vm52oJCwmz7FH98cyTAKO%2BqBb%2FWLzt06WlUh5L0hKl%2Fa22Cyk%2B4QmQi3vM%2BvEm898Oams%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09445865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13347,"size_decoded":5242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3fd6cd4340f73f2f44388e97964f3eb","sha1":"694e8d4a2dfdd16c8f3444e77fe5d58c8ff1e907","sha256":"ef070fb21fd2892969662d3f1d08792aef524bd34a1c437a8e4129c3f99bbf69","sha512":"4962daa17f6fad3aa449210f0ad381083b9a8c524dd539c592feb3cc3fc96d08f8b26ac24296634c2d3a5c557eb56086e45bcd1bb1a42937f22d7ac5d698a294","ssdeep":"192:WFDb/y/y3W0o7HYkS53bOz9cJnJ+ujFNg8znwtjuo+jco8aBP:cbPmYX53bZPNnzwtjuo+jcoL","tlshash":"925279dc2f1867e894c053daaf2a50fdac2bd0ee6688d514c6042f1d788947ebc775ca","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.675687Z","times_seen":1759,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-consensys.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.552Z","timestamp":1789411122552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-consensys.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-c180\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0RQWNi1xoHMyItYsD1Aar0PPnrFNcNff%2FwgOCWvll6VHbKhN0uAplMytcTlWWSaPZUESQD8Ipv3ouKl5syYmy52gwRR1wZBqzqcJCkoljkiVtkzYtOPjgTiblwxpCo%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c094c5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49536,"size_decoded":19484,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6c8c3635e46cc20c06379fb68fa638c","sha1":"8b1ecdf3c884347449e8eb40802a78e8d8c8e258","sha256":"7d39b719ac59dba8e899accd2c2cdcbcc4cfccdb8ac7a05f74d8c866373034d4","sha512":"9306f5982803f40f8981f5685d2087d53b955961d7fdc3760047e9fbfa96bbb128137aa9787a3cab9d0118d3104d07b206dc539cd86a657c150d7eb4703b2031","ssdeep":"768:rG7JFv8hva55P71WPJ9WsUAKFhTw7bAvk2goGW0AUK7dfj9sae7:rS8izPIPM3wPAvktoGdy7e7","tlshash":"b72351d0377686e8b845b2fdcb3ea5e238226cdd35018999d3b02c19ac8167d4d9ced7","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:36:45.623734Z","times_seen":1655,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/img/favicon-16x16.png","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.952Z","timestamp":1789411122952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\netag: \"68c197bb-234\"\r\nexpires: Wed, 14 Oct 2026 10:29:18 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 29364\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ra6noaAkWVsk4Z%2FK%2BLyDqUFvpHVU1zz3sBsBAAgebEKO9AiHHt5ihYQ14t%2FFplke4eTVmQKhM6JfMUk%2BXM6h9YPWR6AS%2Fk%2Bki0%2BOu1CGhWeS724lGo8cuz4buFykr%2F8%3D\"}]}\r\ncf-ray: a3b1829e89725865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":564,"size_decoded":1357,"mime_type":"image/png","magic":"PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced","md5":"a9e72fde9756f0477fbdfce7b2725020","sha1":"cb8208cd7824a287db8d97e8750cd0b0c7b9704c","sha256":"d292c48434ad9c30f4220e220c5cb53f8221acdf0e93e59de5659f7b4e735af6","sha512":"507bfabd7f58d15d72b68a73565f019da129aa5f2d6e4ddd650dc41401bf844ac6ba402dfe020c5e60ba3174ab1c5a676149434a49d481d4b5798225c831e9b6","ssdeep":"","tlshash":"cdf096cae6286d7a2758900a69360770fc370b9344c151be01e43321f53ac316a8b8bc","first_seen":"2024-04-19T06:46:35Z","last_seen":"2026-09-14T19:36:45.620295Z","times_seen":877,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-cosmos.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.549Z","timestamp":1789411122549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-cosmos.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-169e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqR1DSeolMnvgH07lxdO%2BFCkZl6jLwGUbkPNNCkne116i%2FFgeJ7O8if1P86Z4lJqD7nbypB4rTLU9OYz7iqqWL5IGu3HgSk79kcuQsn6S7ues8zq0YAdEphf6RAjQ3Q%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09495865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5790,"size_decoded":3495,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24b422095f45e55762ce124560f2e32c","sha1":"03bc60748c888a58c7ccf555903a2c90d4f44ae1","sha256":"6d5e008c7a2f9daf1ecc2d5558657820ea5743c9d8f990351fe2122eb5441502","sha512":"e8d317b675e20a790264f0430042a6efd7c192a6e632db5e4ac3b78b5ac3c367a7566d27e9116cdc196ea1f8a64b31eeab24c9f4bba9280d992c2b3345396d8a","ssdeep":"96:U8wi56sbKbFTDWjm6iyinXKd7ycdZg4z3KA7zIJcckwHWtGH27T9B4k:U8rKhnWjRiLO7yw+tcckwmGH27TH4k","tlshash":"b7c1b7fc777562f4b842d1fecb2051f83a51aaebb8020924d3a80e0e9c8197c5d59dd7","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.694358Z","times_seen":1259,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/19f24c842955fbbab397f79015225d5d350aa544_CSS.2640c564.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.205Z","timestamp":1789411123205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/19f24c842955fbbab397f79015225d5d350aa544_CSS.2640c564.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mtoken.me.uk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-3aea8\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29365\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mk77OdwEvFSJwly871RqYAqrDNbrCtxvt%2BF1Ti5OfnC%2FYKRTjYA6EVT3%2FbDr89KFZX054gjrlzO3CJm4xZ1AP5fFL3IWYnd%2BRAJjhqa0r8cK3QmljNcTCZSnpNuBHzM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3b182a029875865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241320,"size_decoded":32534,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1cbadc929fdbf62a67d75dbc75758a2e","sha1":"3871a21aad35918097020e5d44a02fb3afb9c181","sha256":"509c2d2341380abc5c6189d6efc50f605aae70bfc8cb7eecdb05d5b4815b6c63","sha512":"65d4a4982e19c65b001d00f83d791182b339da663b18621886a38296219b2f9ee433510e2e7814f52b05b7b9307894459aabf98cfec7b209d1cdcc7883842a31","ssdeep":"1536:gBzfkfXfkfuf+fyf+f80vaYGOxTOR9EOXor12HF:0fkfXfkfuf+fyf+fxvLdiEOXR","tlshash":"7234b99165d1312cba6fc727b6e49889a7204523d36f9dfea131329dcf85287239370e","first_seen":"2025-10-30T01:19:28.216508Z","last_seen":"2026-09-14T19:37:02.688232Z","times_seen":38,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544_CSS.ff5578978733a40a67a3.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.521Z","timestamp":1789411122521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544_CSS.ff5578978733a40a67a3.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwKx%2FY4CTYiDuO%2BdRqqGQbA8aqFpTyTb5hBkkJWVZc8eq1sR5%2Bh9mSSLLOaJlgwYLSTDvjh7AnUX0xyuHsHxmAJTD%2FGwJKJvnWWIR8K378Rehq8Cx4Ui%2F04SkSYt4mA%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-48\"\r\ncf-ray: a3b1829bd9375865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72,"size_decoded":845,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b54e11e9a03640be21a29dcee2e7436c","sha1":"49e578b58377bbe697aefa5ee7b278cde8beafd7","sha256":"a324955b6aaeec85e72d8160f86a6f1cbbafe0eb3ac848ca832b8ad2f158f3d6","sha512":"932e86a4440fb2efd0754b82e870eb4bd62b8fb4b79e71041ae3335a2ddeb7eb234117a75a96664128dafce247d8b7164993c18af287cfecbd6972f459596a65","ssdeep":"","tlshash":"f9a0026710117c9aa8fc024827a3a7b03858401c1f00cdf81b159071b071d0faaa01c7","first_seen":"2023-03-07T15:16:04Z","last_seen":"2026-09-14T19:37:02.685686Z","times_seen":372,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/484c840239a025432effd6ecc373d498fa764368_CSS.118394efc85bb3e961c1.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.524Z","timestamp":1789411122524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/484c840239a025432effd6ecc373d498fa764368_CSS.118394efc85bb3e961c1.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whgarh1t5OwKrwtWBed6IcKIjB07v4tHqLjZxHq%2B1BLqRnHycY7E9dW2XOdjynbEa9Muub7q%2BE0yabeSKrmtxhLWiZQZLMzgZWGBal0qHMag7k9yVvViwqCQHJq16Qw%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-49\"\r\ncf-ray: a3b1829be9395865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73,"size_decoded":840,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1c52964f8a3254cb2484ddb77c0856a9","sha1":"8be27c1d91d79d6d85ced1c49646de0a8bd26d67","sha256":"c1134e3463a8e7c17815dd13c874c721f541e6054a0d25ba8eae0245401c9063","sha512":"b55e758c8691373f027b2f5b74aa6456bdbd886f9862abe5f206934a1e180ba123d4490fe7f75863c99e0bca147cb8a61212b13612bbc0e9eeba91f361b2453e","ssdeep":"","tlshash":"4ca002a710017c9aa8fc42c827a3a7b43c48001c1f00dcf81b199071b071d0faaa01c7","first_seen":"2023-03-10T12:36:26Z","last_seen":"2026-09-14T19:36:45.656337Z","times_seen":898,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/header/menu.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.541Z","timestamp":1789411122541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/header/menu.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARj6H22mT%2BKqlO0tu5vKMyr4%2BT43M3OSQ8pTRElnA9oQExNMnwOuJw4uO0IczogTDSc%2BwB8wmibIXjRLJIl5awJQuzWj6KVdUxto%2BrH6tn8nladzBC0H33cMTdOF98A%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-134\"\r\ncf-ray: a3b1829bf9405865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":308,"size_decoded":872,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c52b54d3fc658ed091ce44072ec8434","sha1":"d6fbb339e3640970de1891495a30d8854481449f","sha256":"468f795384b4e22c4f2f1f5f5a42000e031823b8f9eeaa05588500d455bb7caa","sha512":"776c0d646a21baf8606e986c1fd91e22a908dbf174ddbe638852080afc7930ecf8aa17cb8c3addf57e8733b87b1da6fa494146d5198cadf631c8f170c5a34331","ssdeep":"","tlshash":"5be0c222b59c2719c702db10c66ca599219df9c743190044fb80322e6378ad7acfd27d","first_seen":"2023-05-07T16:57:14Z","last_seen":"2026-09-14T19:37:02.680164Z","times_seen":609,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/banner.png","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.544Z","timestamp":1789411122544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/banner.png HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-228eb\"\r\nexpires: Wed, 14 Oct 2026 10:29:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGoJUEotKyfH5etDNSuy0xVEl428CcfiuCsRpGNC%2BYnBmInGjsrfXst0KKlZaEACV7uyFbZR0uwkvrqhpuIjjZGKMID5Fb4SPZq41I3LRpcCK%2BsV3ZaittZCkyIDEqk%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09425865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141547,"size_decoded":139038,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"31b2b7726829be089d61a1b3238892f8","sha1":"419ba2f64dd5f7bd35c7f440fe993c6d16f764ee","sha256":"44a360e3f1753981cd79609f2a238f58648d2c132b958647f9bda8922d1c507d","sha512":"7dfd577d2ef15783b23e42442d4c8eeccab8a36ae37ff9aadddc404acb70bd1993369f8c028a845b9e699dcfa2b9c10512fd8c8db42285f0aa3740f487e02eb5","ssdeep":"3072:Bwm2VYh1sYAjd/J9EYPfMb8eM07+TyKwSl7mKLBpWcr2oYXE7nmWJAc:BFf1s5xCbBGwsHLBzr2oZ7mWJz","tlshash":"f9d3019939aba65edc1f147ab5b02edd0fc209a086761efd7433609adf4922cb410f1d","first_seen":"2024-04-19T06:46:35Z","last_seen":"2026-09-14T19:37:02.67508Z","times_seen":2264,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-polkdot.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.548Z","timestamp":1789411122548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-polkdot.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-36c6\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QG9AaMo7Y%2BozAM0T9S6jL2PhwcDo3N9E%2FVnUwyz6g2U9fwisxtRU%2Bv3RHrpxu8OyEFXtpW0997b%2BZaBmiU2w2oyZLXTu8KV20eYgvzERJoIeDov8p%2BST2JCPdif9XyM%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09485865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14022,"size_decoded":7032,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43cf963b81e048636c39d1e514ce1184","sha1":"2e604e4e2086cc0c0189d911af4fe4c70694acbc","sha256":"0b486f91fee9220388fa9f7e8a8869105aff8a197582ded63b1078d4001c092e","sha512":"1855c21bbc25300760913bbf689aa6675f2ce99ee5585e6ee305956e75d8aacb2e664867e3de79015ddcfd838ff46242a05fcba648432d1b85142efa1cc0878c","ssdeep":"384:85KRkKZJj+AjA6Tam5cKqez2c/9s57HWqwBjk:85m/ZzTaLtg67zwk","tlshash":"b05283cc2bb587fcf886f0ff9b1110a5784698ff79818a75c3685d08788251c9e45da7","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.693832Z","times_seen":1583,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/tokenfans.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.560Z","timestamp":1789411122560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/tokenfans.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-6dd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxomgJqplIQ3sQAsYIBDHCgOw2f2bVKdcZWnUThzvF07QSTjzRm12DCkGyPy3EVIld4XbbteZyNaLvHTLBgb3uv7U0lb%2Fj%2F6ahn%2BO%2BunQSRULn31%2FSWhFNYLBDVv9Z4%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c19525865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1757,"size_decoded":1668,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccb9eab093240587905ab16659346d3e","sha1":"d4048ca15d5a35b99f83da664d1a85e2967fce7b","sha256":"2c081b94d2a381db87ba69c0eeec6fb5c5fc0779971e162e322157c2818f8446","sha512":"f12f4aba96a08d3ff4e3c78bb259bcafd55be0e0636f87097674fa2e34529496a4d7c97a732b4210bb19f2b0b5e82d8529b74881876c66565596406e59ad8167","ssdeep":"","tlshash":"58316544a3ece2c8a200a3f44b75ee70362f14a63515c05587996d59ac0151c2db98fe","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.68393Z","times_seen":972,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/footer/to-top.png","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.563Z","timestamp":1789411122563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/footer/to-top.png HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-2084\"\r\nexpires: Wed, 14 Oct 2026 10:29:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QglNKmyZqWE6tJzjm9XGOl%2B%2FbTf%2BhnT%2BoaPHLfX09hAwKuGBssGjUEbyNCNWl8rN8aiQOsrLVcujuUQ1I1UYQp6btn%2FQr%2FNd7GRlCLn8EUUfIIkYaGwRQn0LbIT3UmE%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c19555865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8324,"size_decoded":9140,"mime_type":"image/png","magic":"PNG image data, 124 x 131, 8-bit/color RGBA, non-interlaced","md5":"13eac2560b1b5d187f0632729627c7eb","sha1":"9d767610734797f5f8dd98c82329d072171b67f8","sha256":"64774fdbbbc520f5748ccf6f48ede71a843d30cb3ce4bbc8da64c7f64d95b3ed","sha512":"ac2f7c596a78b4554e146dcf757f23248f8895189ead847dac8884b4e9b2f02cb3812d03fa4c7821e9073042768b06dd567b6ea078f069b1c2853b04473e2bc4","ssdeep":"192:n64wmsnaCQVU/kld8QRX3ok8arbdUK+H4sWt:nLOaNVU/kVz6K+H4si","tlshash":"7502b08242c004a419cf4da444fbef8c9ff73970caaac5693e7c14c6bf2a6991a4f520","first_seen":"2023-06-10T15:14:48Z","last_seen":"2026-09-14T19:37:02.689888Z","times_seen":337,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/help-zh.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.667Z","timestamp":1789411122667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /scripts/help-zh.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcyj1RKLWeydbw0kgRCKqw2OOnO%2FlGYMquCYFugf%2F7bl6LrZKnwaeT7vWFnAhoPeeiHGNsaYHRPDRrfr9SDKRlLoNylQpNjSyy1B%2BTGyJHbDVhPvoG4PKv7%2Fgd88YW4%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-28a\"\r\ncf-ray: a3b1829cc95a5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":1231,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (527)","md5":"540bdce1a4de261ab7a227bb501ca319","sha1":"900ababb41b2dbf10245edfa16f495c355b3e425","sha256":"243fc598e4b794f61da4a8cead8f39d876148d347c11545cce724d385f5243f9","sha512":"0b5878027aeea7d9f7f58ea8937435b0288e67645469abfd522026a880458de3820c21017356d317aeef6ea264e383ab1e198556d9b3c9270f9e7cf9146a82ec","ssdeep":"","tlshash":"04f0ddfd7906b824877391e5a3afdb0c76d76201a98548c2d58bccc0b43cd5b050fa49","first_seen":"2024-01-26T16:54:53Z","last_seen":"2026-09-14T19:37:02.682867Z","times_seen":255,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/webpack-22eaaa575d3c455933b4.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.509Z","timestamp":1789411122509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/webpack-22eaaa575d3c455933b4.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-606\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVg8e0jOTtVc%2BOwPB5kLjDltLbA7YOlNbLwVZl4%2Bzt3X0TdKr1T1XVo5Rsl7nvxjLs7oU2B%2BIHJMn7w5uSBgVY%2BK3euEQ62IeebKtvPstIINqlGWT%2BoyTnwFJLWdmX0%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bc92e5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1542,"size_decoded":1564,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1539), with no line terminators","md5":"2019297a9ccffe0e261600bad1b1f98a","sha1":"a7af96e8e11cadb4f053e78cc91cd7c531f1e877","sha256":"75fa1c4760ad6194a99710872e3612002c84c4df8339a57be0cb4aad1bde794a","sha512":"931b78e601e346f1ae773b8321cdf332b8dcc1fc2345d76f2a187c4c331f30c9f328ef72435b7302293d28b5ab1742685e5d89ce174c0af9c73ede3a9afff1a4","ssdeep":"","tlshash":"193131d536a4fcac53821d5d083f7006f2291d65127cf5c19384e8b2bc6488e9166eaa","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-09-14T19:36:45.658111Z","times_seen":489,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-etherscan.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.553Z","timestamp":1789411122553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-etherscan.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-2bff\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgWNb4HIcV3s7JglnRaYFqGmYAuB9axHA60hL0JpOPUB9o7eKKsL%2F4%2FrGvQU4VjkAK2F5pQviyHF2UtNmblgfR13QDXSitsz29naSxsoyZ5oXvNS9Iblt3By5nN9B8k%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c094d5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11263,"size_decoded":5588,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2396dfee53ab9d34632f6fedd15c47e","sha1":"f2e7cc706a3486b0e8c27ec8ad71a97d671707d4","sha256":"d9c83c68c73cab3ade09c13bd2d323325648c652b28cc92a535b2db8068a92b3","sha512":"c432dd748aed17122a33133a3ea814f445b7529741805857c8b1a5ab8c363baf7cdc50e78ceb36ae4e1e9c258f1d8d11cdcccc9f94a7bcbb906952ab942f581c","ssdeep":"192:U8ENPeQpwC/8tvEY74rBx5IZoLwUqcCvwGPWwBjaQTVgixW05O7oK:TAmQpwC6sD5v39ujaQLW4GoK","tlshash":"023281cc773a46f8bc45f5bec70644ba7802aeaa78414958c3b42d5c2c4482c9dbddeb","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.682348Z","times_seen":1659,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/scrollreveal.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.670Z","timestamp":1789411122670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /scripts/scrollreveal.min.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-238a\"\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ge1919lGUiTWv4HMUdLXZqrPijvvV4QxVNeAEe93%2BpFMMFVhfbOPFJMDivWOgXORUj6NtJ2MgG67EW4lD4XXjkUbJsBkSgKZnm8qbAc1DolV8NykSbLD6cJYd8oMgxw%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829cc95c5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9098,"size_decoded":3928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9095), with no line terminators","md5":"126cb7c432914f6c726ff146110dcb75","sha1":"e5358bdb7769288dc7c2dc10508e98387e85b6e2","sha256":"fd08659fe0f20fd14dcf4c3c5acdde64de96028174f59b0b3dc776b62be789b9","sha512":"005fd83d6e18b49ad8bc8e46c853e03eb34808c7913aa6df836e6f57a4f41a1256c901b78697c85e6001ddc6c5870dc46f1f3cb500fe74fe69f9ddddc980e4ae","ssdeep":"192:zjBEC60RtRcCT+Ytnvm1uvb/E3aQ6ZvxrTZ6fNrb:zNE312Ntnvm1MbEIZvZTZ6fNrb","tlshash":"cd12d68f3e1274339b5349d5e2df064f773849da2a0b9484b2b4d0bab8b101d6243f6d","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-09-14T19:37:02.694916Z","times_seen":1627,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/hm.js?f4b3788b2247dd149fb7fdffe8aece79","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.979Z","timestamp":1789411122979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /hm.js?f4b3788b2247dd149fb7fdffe8aece79 HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tS8QrRbUYtvB8nCM541JVX%2FT17MvfJADycnBPuGwsaUkHabWZPnEwOFZovCFc7f2GtAySiP1Xpt49PMktpky%2Fkje3mQM5qKntndUv6wC1HtN4L%2BCxCpt2s51HXD1%2Bug%3D\"}]}\r\ncf-ray: a3b1829eb9755865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":707,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.205Z","timestamp":1789411123205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mtoken.me.uk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-13c16\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29365\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQ0UIi%2FSfg9W3s%2BeCRjjjkEXRlwFizK9mY%2BwXQ5QLJtLHIDRj8w3rYRzDGdFhaY0xOdbc3V9Fg%2BFH30cHPPvfWtOVktvcoZALdsSOGb%2BY04mrYimsbmR%2Fw8V%2BGHSug8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3b182a029885865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80918,"size_decoded":11005,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"61b293fd330c93321b98f4891e46d465","sha1":"ac5a8393f4b9112b9554ba2f52eefa95bf041a49","sha256":"d0b7a3367c215ac64a9b273bb95499a206f5642ede59be7f4f0f5d31508dc43a","sha512":"126429830f1df4ea9c7e72a8c2a47a60838e18c17cdbb07ab4a5453b601cb962199c62f90d054a61521d1f475f7a65a859116b6771af229f5524e5730111c2b4","ssdeep":"768:wbKwmgzY0vPCuGZfg3byjQWjNc3Ug/WNm14ZsV9:UKhgkACuGZftQE8P/UeOy","tlshash":"cc835a2f2b11211ad2a2df1a66c53b9dd931ea33b179decff6d53c218786e464890d03","first_seen":"2024-01-06T17:59:57Z","last_seen":"2026-09-14T19:37:02.691017Z","times_seen":445,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/orbit/token-im/stick-note-en.json?q=1789411123317","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.481Z","timestamp":1789411123481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /orbit/token-im/stick-note-en.json?q=1789411123317 HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mtoken.me.uk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=zh-CN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIZHBnS3YJN36BrveOtKIfcCWjvs0lcuzTRaHEbqzQJM7ji67taz3wLfvgrM0um8Zapjpz%2FT4Rd1R5%2BSzkBu63ZdN0l38AJaoDcJN4XzCDJbmIh6KrHm7j%2Bq8x%2BPnrs%3D\"}]}\r\ncf-ray: a3b182a1d9a05865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":677,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/main-8151490efdf97440a17a.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.507Z","timestamp":1789411122507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/main-8151490efdf97440a17a.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-6f98\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dL9wk%2FP%2BjHES7W1SEAN7gzAlm9aXTsN%2FfNsiT3XMVMX%2FkFZX98Y2cGCL704ary%2BkCU7YlhqTA9vQD0BYsjGdX6PZfgxNU%2BIN8KtAdEJkmK2i2y%2Bz35iEM99KRjMCV44%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bc92d5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28568,"size_decoded":10556,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28565), with no line terminators","md5":"b970ae78f33918cbef06cb859959bb9b","sha1":"9bb0949dfbdd7fa03f28fbfe1e9248a446c97c35","sha256":"126339554462e3a26bf9ebff853b05a396cca65a18d38888ebb629b755d1e281","sha512":"ac268198d7bbdd0c6ce569f005c93d5b2a6c1b10d9a7acb40bdaa8d2bbf81273b9be3297c2aac2c09051d016449720b79db8f94d9ae1f5967b3e58d0fb633f04","ssdeep":"384:X+laOqpTcr+3u+NtL+JyIKuWLnr+tCTruuL+vIQY6bMyld6SnhF/AT:ulMpIr+3ugtL+JVWL+CTrZ+pld64FYT","tlshash":"5cd2c8ddb6c6f02203d33134903f610bb37b2958a84d8454a759e9e67c7a94ea227f7c","first_seen":"2024-08-22T17:17:34.030065Z","last_seen":"2026-09-14T19:37:02.67741Z","times_seen":250,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/framework.a0cc4416b9424a5588b2.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.510Z","timestamp":1789411122510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/framework.a0cc4416b9424a5588b2.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-1f8c5\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISZKPzYA571A0tV8CFqnw3e%2BVP9sOY9%2Be95npXluWeZVzzLNOJi%2FUZ7ti2FptvKU7PwTIluXVkjYeHGLdvcg6dyPBBVezq37AMa68gzortv7MLWziOWG4tciiGSfMmU%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bc92f5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129221,"size_decoded":41480,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f52502ac9007133582fe44e8c7b70136","sha1":"6f017871e79d3b5e08aab7db5080e287fc2212c5","sha256":"275ca0ad51cab700a7c66736740557494b815a03fc464577b9c0fdfaf9c41441","sha512":"cec19cb62a3e74b2d9be8d0049597049d6b0d53754c2d6f24d5d422b59a16998fbb33ecfd5cfe53af0f1437f98056517e44e2a16adae3e1865a1fab6609d01ff","ssdeep":"1536:U4v3hV6X5JRGNeG4XFmkXdKwDSuSdDp7FktuGhR8XvCi0AHlk:nfhV6TZ1YwKt7gRwCi0AHlk","tlshash":"e7c3f8d93992f5626bf311b7109f1813733d161b280c4960a212fddeb9bd05ea12bf9e","first_seen":"2023-09-20T16:39:30Z","last_seen":"2026-09-14T19:37:02.68878Z","times_seen":333,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/commons.3563e86951c42a3cedc3.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.512Z","timestamp":1789411122512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/commons.3563e86951c42a3cedc3.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-424e\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdNzDaPw7nzVJPZXUWuGOLnk2dZl2QSDWlb2cBo286mPe6bMH35VbSPmd1631JQzxSXA7pvrcLKn4n3JuxF7O17qPMzrCP%2Bk2FWWv%2F8sHy2EcmzIP3AEJpCreSgr9hE%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bc9305865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16974,"size_decoded":6877,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16971), with no line terminators","md5":"b8cfea2bb1577c5e0c431cc92cef9e0b","sha1":"cba31c9e3d0b79ec958595668cad4ce3c18339a1","sha256":"17d84657d02e74b9bc1f511e05473159531d2c86ff8de697e614986fc6ed3f4b","sha512":"e3b04deea299fb26fe1f025d73751bb94f5949905c2fc0befa2b0395240c18672e1810f70fb83b545218b9d9637c4bd1e469ec46b2f1f6feed6261dad958f6b6","ssdeep":"384:2EXRdmhT+b3C8zlDqUfLIJ0X4auaHKdxrQG21561sO2oXD9zs:9hdmhT+b3Rzlhi0oauaHUQj561Zps","tlshash":"26725ecab1c7b1255793f1b4002f160af62f98a9384f89a9e565d5c2bc7884dc037fb8","first_seen":"2024-01-06T17:59:56Z","last_seen":"2026-09-14T19:37:02.693292Z","times_seen":288,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/feedback.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.561Z","timestamp":1789411122561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/feedback.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11dYbk3YJD%2FQxyou0OrJApqLsITZlt8%2BI%2F4zvIBH%2FHCHn285F%2FmtGHMsHD0qE3zdHqDg5qEgpX5Sa0xxyr3BIT%2Bl0zUQBqMFJFRej59WFSZlB2fa%2FShFrZLzHtivB8k%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-371\"\r\ncf-ray: a3b1829c19535865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":1173,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58b754c0f9f2c13b0be845b7ada0602a","sha1":"765e62db886f66d31bbfff3c8f9616b93fd4418b","sha256":"d02703d5c4610bd9bb5ad07df5d714ade9d5dc84286f93adf6d95e1fdf8491d4","sha512":"4498c883e3f4f9f614cfd60084d44012f1c79f22c1b50cf2bf24513eb48571a23cad4dfa31381d7b7943f98c5f930f2ae90c5c12453bb9052271f1c13983ceda","ssdeep":"","tlshash":"5811ef59339c9edc77219b68d382b775326720e3270ee020d9712976ad1462d3d3b6ec","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.679099Z","times_seen":1314,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/YOz1gQVypx2fvdmmbu1RN/_buildManifest.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.664Z","timestamp":1789411122664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/YOz1gQVypx2fvdmmbu1RN/_buildManifest.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-103f\"\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pu4KWb8eiQf5lpWzBD1y14ZOX01PNk%2Fxs6UH%2BF4uxc1JWAAfgMnIKPHhqOsosQ8itOZXY0h3M0yD%2FfzzdQm8IJ3Y%2BDOWgIDMi6kzA0vur9gU3BjBMJ512V7vGmwqP8E%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829cc9585865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4159,"size_decoded":2123,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4156), with no line terminators","md5":"1c8a8b0f0b27c4d042081326b8459750","sha1":"01852002dd199069ac3fcac3c1f9f88a3eb2ad9a","sha256":"c78b42b5ba39311ed2c9a39b7a0ec73285e4b97853a2e491a4394a4a25728db0","sha512":"f54c153e1b03bd818ff9d4fa7ded49b9e25dd5b6ab6511c6918cc1a4f6742c752b5bc3b6480838122b988aa3bef4858fccd1e0d9bc7bd6305528afbe7525c079","ssdeep":"48:JrI7rapUm3hgnD0gj8EVL+o8camiFxeGVzmT+2ujpA6ZKSsjf9md:dYGpB349xVLxr2FMCLOmKSs0d","tlshash":"f081ac421d33bf452ed3fc496cbdaf3d45d015b1e9fa06a382ad482ec9804349f79695","first_seen":"2024-09-24T14:50:12Z","last_seen":"2026-09-14T19:36:45.60673Z","times_seen":260,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/api/v2/help_center/zh-cn/sections/360005311314/articles.json","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.311Z","timestamp":1789411123311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /api/v2/help_center/zh-cn/sections/360005311314/articles.json HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nCookie: locale=zh-CN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8GCuAHKrQtF2QWkVY1QduSUGVXCdLL19nmQr5%2BV%2B5Ten%2F66Bs1yCA%2F5hny0fh2Qq7FBcLKktIoz2o6sRyjTZc7MY%2Fq%2BYBRg1mHko5%2BvvDxytsIM6mpoJX1kViIr5Oo%3D\"}]}\r\ncf-ray: a3b182a0c9995865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":683,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/styles.48026100.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.506Z","timestamp":1789411122506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/styles.48026100.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-8359\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSd6yxRB31siiG5WV7dIMpMWgn8BYa0QpdteCPmJZvSe36xXBLV3cDSre647I%2BpzOCUsEKc4JdJP3SV8Y3DWdZcnDeHP9K86Wo6ynmcCBSsF4xaOBosZLyAj7bYpmhM%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b1829bc92c5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33625,"size_decoded":6130,"mime_type":"text/css","magic":"ASCII text, with very long lines (33622), with no line terminators","md5":"c3b74c24f927e1a7b5f342f6ec6de76f","sha1":"f48eb2288490f9b863bef1ff0b4d98d8c3ba4926","sha256":"7453420a8c98ed97f5ca254057b2f275e10307581b741c53552045e8f9952c07","sha512":"78c4ca5ddeef22ae62cbd4fdbcc01106902611630a47775d801674c7af43f6d210ea994c6f20c02b982589374ff09db65ddfe83f99fdfa97cfef577cf37a8451","ssdeep":"384:oyJX0/4RYtTelIoWDv8Pb58QvymoCSkXhgNvCcRwzT1htmhCW5JX7yW0NMGvpryd:oqWzMPW07pryd","tlshash":"54e287012fd4303f6a5705e6b6457b4c772f6647433b94a8b3b2e211cbe817b062669f","first_seen":"2025-10-30T01:19:28.239892Z","last_seen":"2026-09-14T19:37:02.680669Z","times_seen":38,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/img/imTokenLogo.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.539Z","timestamp":1789411122539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /img/imTokenLogo.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-24de\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tQAjk4VCDCKjR3WVBtTmDCCxyfFG0Sp27GsOtCeSBvnbwgunzIz%2F5NAI296twK8XiWqkTSDjdKxv4nsNrCuOEJL2ZHKfOExPH4U7d78pSwp8tyvz50bLPds9JOBNiM%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829bf93f5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9438,"size_decoded":4933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff362ef3dd8481a8b6507fb545025cf8","sha1":"a728dfb3d393258924ce63dfbc3f638b59d3330a","sha256":"690e08204f91ce6958a804b11ee08546156e4b5dca35f0b1ce00dee6266156b2","sha512":"a25bd09b8e65b5188bc5efcaf54aa7a215217cd53f8e92337c06edc96cf82b3e116e7771ea3ed36ac51f42d869f018178f0429e15044e8a43cfe72126643124e","ssdeep":"192:LJYVRfONtbZ36T9/zp+beh4ciRBi6m/Z1BnMg+K4jnFJibZLI2R9TZx9R:sRfONtbZ36PPiRBivPBMgxKnFJlE","tlshash":"681286f13aa463f59503ebf8de2754746a2b38fabfc54ae7c190ac499422055cdc9cc2","first_seen":"2024-08-08T18:51:51Z","last_seen":"2026-09-14T19:37:02.689302Z","times_seen":2283,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/alarm.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.542Z","timestamp":1789411122542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/alarm.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBeL3fCXhqjqsxglXgytWv%2Be6kgf8qhEhk5GvMU9j81oXJZhBsVx2Q9EXMcbanf3cDXmU7VLTzgFP0tA9N0mbgASEZnNyqqjW1YY01oekDHdGoZwXXqhoLPbowTutKY%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-215\"\r\ncf-ray: a3b1829bf9415865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":1020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b20df3089e50c545541d8ee900863574","sha1":"451b3f7e7fd362deed7642033c480082bcb0674a","sha256":"7c9ca78247b00b98096dc68fc15527fa07e332c5c87c7834e1511786a490af68","sha512":"40eb69a60fe3c221e70659a54d99e80089e6e8ea47994b7460dfb1ca0d03207570de0a7bb03ae32706a2e1c10a9fb791e8216a57bafe0c516f0f48eed0ea6a7f","ssdeep":"","tlshash":"bff05994538c9ebcb6224f24db1172b6207b31373b9d9258d863a43a216411d683f9fc","first_seen":"2023-05-07T16:57:14Z","last_seen":"2026-09-14T19:37:02.683408Z","times_seen":2147,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/common.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.665Z","timestamp":1789411122665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /scripts/common.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-aba\"\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdBspglW4iTGGG%2Ft51mTEKBohIe6yOfwuRlBG%2BDQoKCqdzEeM5zw3gdCEbo3%2BkCxBDbl9rs%2FoDLt%2FoEQAbNDoo%2Bqk8EDqEMqdYeOnam3n9qdc0doVUzmuJGBlrjvD5U%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829cc9595865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":1856,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f82ea3f9225dd45fec3eebd6e63c954c","sha1":"2d6886dbbb8be31c4b2e4da073ce5230a6bfeb2a","sha256":"59e2227be4a47a7fb1d43287da5e2df66f60a6dd98e606b7ec6995c46a14126a","sha512":"0d22f8b10915b50abc1e4ea28be4765384afa8f08fd08b1a87af2072ed2933b311d5da5fc1176c6cfdaa4a3895084d7093e6c1838ead3e709cf93917d43cdec1","ssdeep":"","tlshash":"f451118e72c9b5b766eb1dbd11af379c793a118bd80c8011647ac8d95a701858033eef","first_seen":"2023-03-13T01:47:10Z","last_seen":"2026-09-14T19:37:02.686233Z","times_seen":850,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/analytics.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.981Z","timestamp":1789411122981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr%2FxgG%2FNA9DNdA3qfrzrDFCI1x3t9EY%2BTuVSctvq7S9UxBibRj7mIPTnss%2FS6jmJvLODyPl6U5LfPavxJx2O4qux%2Fmh0MZWBAVrIsPVkfX3lJDRvSrkc1BeZcMy0WK8%3D\"}]}\r\ncf-ray: a3b1829eb9765865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":709,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/484c840239a025432effd6ecc373d498fa764368.bee599c337280fe21dc2.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.523Z","timestamp":1789411122523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/484c840239a025432effd6ecc373d498fa764368.bee599c337280fe21dc2.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-10026\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHGDvm1vVjqbbRRC40LnHRDe%2BGAa2fGFAFHx1um8S3zcFV1NdlRza1U%2Fln44sU8z60BgGEZO2h1OBwN0lhadV%2FVTtBtN6eomoZ3k03UiHTeGJVwif15SIvxmDLGzcSQ%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9385865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65574,"size_decoded":16692,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5698d48f2349dcbaf2357ffed90642dd","sha1":"6b69369abe7fa5d26bbd627788d00bd176bd6b2d","sha256":"3543430b71eaba3a08df061cc4af243dbbeba19813f37de40da8346908942cf3","sha512":"5d5823c9c944e2bf22b50156039794ce20888bb026ffa4a42f7b7b27b88f33bd87a3113ebd3f5042008d954989e31d7b6e4fcf596bf35c39a9a9e52696a1c472","ssdeep":"1536:SbjtAYCvF9OWnpxoxYDquqy/D0hcmkIZqAXDyzWT:ZIDfT","tlshash":"f553d7a871d1f4b552e350a6402f150af3762d6c842db880f3b1c8f4be7a65e5627f3a","first_seen":"2024-02-27T11:11:02Z","last_seen":"2026-09-14T19:36:45.643309Z","times_seen":236,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-walletconnect.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.555Z","timestamp":1789411122555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-walletconnect.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-26df\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoJNNlTwfrDi33VZrm4h96232wt2TKVovKVDOvtje1DZgukP5jS1PUPCU7iThbggMOV0a5lCsB%2FG536sgBzmN8IN7MSp9uLxOAqQ1vX1N%2B2QUNkRQCl4hn3H%2BqD5UEE%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c194f5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9951,"size_decoded":8159,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31d494216fb084b7082d4a54a453d75d","sha1":"35853344398fcac7b1b531728806ebf5c01ea439","sha256":"d2ebea36ed0eeaec252edb040f075fb4b342fc3a68650e685387d87aaf33a513","sha512":"07fbe0a9a9e30fd72f31d0a5583c98b6410c905020a2c939a35ef49cb58ba356131f0db73865bf1a9583552445fcc8d2fc0bbc0ae5ba48a180f538f9e7563f87","ssdeep":"192:0twRHkLSifTOOIBCt6vrlFR8VUthiQYXqJcULuQo9ox38:0+VkLdfgECra+hEqW42oZ8","tlshash":"3f22af3536d61c9ec5e6eb8c60aa31824e038b5fa2cc4226f55cb7903a57f0c5d3d65e","first_seen":"2024-02-27T11:11:03Z","last_seen":"2026-09-14T19:37:02.676853Z","times_seen":403,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/orbit/token-im/stick-note-en.json?q=1789411123317","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.330Z","timestamp":1789411123330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /orbit/token-im/stick-note-en.json?q=1789411123317 HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mtoken.me.uk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=zh-CN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wS7d%2B7D%2BppymwZ2LkNYMt6Bl5kxV8U74R2%2FsDT7te7V3C3eUpBjeHvXHCYnAjfjCIhM3htVYb4yj61DQNVGpvVtSiL8W9JOHwFpJlUDYYDz2%2B9X24aqyzWfcYtdNSzc%3D\"}]}\r\ncf-ray: a3b182a0e99b5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":677,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/aec7d165.15f05aecd792e476c6d7.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.519Z","timestamp":1789411122519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/aec7d165.15f05aecd792e476c6d7.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-78b32\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEcG9LSZk7SGxnyaxJuyLX%2BjGbFMzxxwDgOLbTdVpY8dzQXaDbYfn45W9XuZCfwbUKAwyqdg687DLZX9VsqiTwDakB1Iz5ZRXgnssbvb6peA4AAorE4GCqSVTgWGZ9g%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9355865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494386,"size_decoded":152539,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87176dcffa419147a6f9c4e1ba9a72e6","sha1":"59835a44be3f43788c2662906fda25ad8505f299","sha256":"81d1c0630f70d1831ac13e2e4f212b532052be907ceded265f49bb8ae934a54d","sha512":"26890c42b28d16e4d7690d68c203ee438c0f7ab487d5e40c2a798a5b2a84c5f6f754cc22a4e9c7121a6e4c8b08969fbe3faa7798a35ea1c0acbec960a3f3535f","ssdeep":"3072:9OPs5At4sA10x5rTzcck1I2cbwHYS8cbRmMrye3LgbxKGyJHgJxmjwKeYHAXAOhe:9OHjUHYeHJw9XZG3XqDUFmkMtEFcA","tlshash":"feb46628c51482bc9dba5ba88d325075a65e91ff71e14325e36eccb073610dcf7aacc9","first_seen":"2024-03-29T05:20:17Z","last_seen":"2026-09-14T19:37:02.684463Z","times_seen":308,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-eea.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.550Z","timestamp":1789411122550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-eea.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-2371\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2hFi3DDJth%2FAnKcNIFnNoTHjBhAj17zrjJUEuiBrmRo5DRGfCM1P6mni0HExLgjUhk%2Bh%2FePEv9TXpAypu38eONkTPTPQ23bMrZkqzvax8BnHJWb7WvEn80SqQNIsZU%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c094a5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9073,"size_decoded":4422,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53bcfb318f9f0c4154d8e1e62f82b913","sha1":"4a20547c48deae59d13aaee8c20d753f8f1a20df","sha256":"077082d9d65c580cd7ba9d07c6ec91c0938c046d423ae2033acb87408d1b5f1d","sha512":"ecf7fca017c109d84ac5aa21034f2c82f61a17301631b5bff1cffbde0402eb431599ad34e22aca9c2d600d4e0dde6c139c9486fec512b73174b093ae1a00780c","ssdeep":"192:AxgiKqOb40EhtFepr7T6Uuu+YoPl2Xwa3zbI2+8EzJLoH1Mq:agiu4Dhtcp3GPlubHKLoVMq","tlshash":"f912e7d817f581e4fd85e3feea29b099750694ffaa84c744c3e86e19384122c5d4eec2","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.681714Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/baiduPush.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.668Z","timestamp":1789411122668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /scripts/baiduPush.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mjyf1OkGOAj0WVIoSplhNlb0OFzE%2FKcBPTR6ZKCK%2FkQLpCvEtxA6zeJ0ZTCQtxPCHO9o3XzfFsCBaVQXkUVEJg2i7JQBIHCZObiSk1mpqb8BxrT0HZr7ZZ35MMjG4RM%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-c1\"\r\ncf-ray: a3b1829cc95b5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":947,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"6bb24a2906b2b7777cf01e648727281a","sha1":"3ec92d0ae833464e696a1f2916857f6c05c81e47","sha256":"5462c841c26c4bc11177c959d92befdd7f9d7c02de5a2bb6d49b33f92189d03c","sha512":"098ea8e99c1dc303ce1d4c1193fff8a05a7bf1816825c439e1060e70eba3abdbd07963b12d951cae7418a80694ece565ef01224cabf2417319bf1943538050f9","ssdeep":"","tlshash":"44c0126d79558534374404bad57bda5df052303855699413c84edc453424dd74419a59","first_seen":"2023-06-26T14:35:54Z","last_seen":"2026-09-14T19:37:02.687228Z","times_seen":241,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/gtag/js?id=G-3GR90RW2M5","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.972Z","timestamp":1789411122972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /gtag/js?id=G-3GR90RW2M5 HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoXSGo6gqfWmY4YQLFbYRlpBhP2mA65VL6%2FVXGPG4gUlqvWyXUPR5vWGKD49cuyLXID0thmHDQwLe8zsNlMxbgFS6i0oy7svlyn2l8JFLAZIlmBpM7TyAF%2FualizK%2BQ%3D\"}]}\r\ncf-ray: a3b1829ea9745865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":675,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.531Z","timestamp":1789411122531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:38:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdT0TidUqLR%2FjgwLsZKCHDz%2B00hpNm64lJatceX%2BV%2BmyOrK%2Bgynn668ArmxddGbBFVOzA96NOQykaGx4TYNToOuQZ2iqxgz0QwNithsaQhUxAYmXF6%2FfQeYl92qFj4o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\nserver: cloudflare\r\ncf-ray: a3b1829be93c5865-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-14T19:42:47.369774Z","times_seen":434397,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/39b70e0b8818b2ed38d7d3012b8680c74b29b775.4c728255a8c13b372e67.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.513Z","timestamp":1789411122513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/39b70e0b8818b2ed38d7d3012b8680c74b29b775.4c728255a8c13b372e67.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-3da1e\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DF%2F6VjukoKRBfw2bC%2BbNqoVxc8g%2BzTL9cZBRdi09MOuIYvY1weMrqYzM%2Bpaafhg0DK5TcPeMdfmlE1WLXVkVp3%2BVQZ0d09%2Bp2acpb1jDGK6p6ROi7abxqlnEgrreYI%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bc9315865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252446,"size_decoded":77501,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53398), with no line terminators","md5":"3671c7c9f419eb8ae66b0278e5875025","sha1":"cfce1cd0af151b59e103f30ef4c9559762a31a66","sha256":"6e49887c6a270ff031878e05ddcad3e23761a00d16687c40479623b363fe7883","sha512":"8d3dc94cc246502d115a8ea4a286dd07acfc31e9749c6de5141becf5d5b4e6117ece10c9d578dadf2be8766b2066d1bf0e498359a570632af82d966f36760960","ssdeep":"3072:SAjJvvYt0QXos88JJS06/65PrI50/eEFUR5vBLeL6KJKPHZXXbse47xZ8BIUJQnR:t5Yeg+k/eFg4RXQnMh/8L/U0d4ASnQ","tlshash":"5a34a60fd7355eb7086b51cd1dd96ffce8d2030641c8d87ac7ea55891b4c9beaa23a02","first_seen":"2025-08-30T07:44:58.098816Z","last_seen":"2026-09-14T19:36:45.622124Z","times_seen":45,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/24d5c77af3764ba53b59e4eb9084ad0db77fa666.b68303f7b559851a7150.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.514Z","timestamp":1789411122514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/24d5c77af3764ba53b59e4eb9084ad0db77fa666.b68303f7b559851a7150.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-97d0\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QGqJcqYfu7gPfoQxCHbuvdF7575U0PHK6QwmDjNrlsR91X4WYVc2KExFd2mJKg7Ja4zsGYEPBSVU1HzAlmsum%2FMrYNh1IVO%2F7BFRfih9n5n4hY9V6HjZp0bSUPAB74%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9325865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38864,"size_decoded":11928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38861), with no line terminators","md5":"d94b2b2e4ceb3a8d3ffc54c28cca396f","sha1":"ce358f05fafd16a6131bdeed8419d087fe74d8a7","sha256":"641584ae9a8a6f63cc13b74de0502adf40d06224b8e44717c0c16716e6dfe1b9","sha512":"c69eb7c93e139050fa407943ec6811e94dda5a3c5d3c44a0d90999690f275f180f19cbfadf28c294bc251e65f5d3988d0d7d4039cddc7153d294c076561b3a26","ssdeep":"768:TlfughpHOCJlIx4/TTdCR1/f28NnOkJlIx4qfCxelhUtCe:ZdpuDyT0Xf49W6hg","tlshash":"6103939cb1d3f06643d22264802f210af27e5959b44ec485f729ecd2b97894fa237f79","first_seen":"2024-08-22T11:11:22Z","last_seen":"2026-09-14T19:37:02.679614Z","times_seen":268,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/29107295.6d4b8f5c00e5492aea21.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.518Z","timestamp":1789411122518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/29107295.6d4b8f5c00e5492aea21.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-1207f\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FY0IlIvd7V52GX87O82ZiAdDr%2BO%2FVy%2BVyFUnlkLCuKPBAm7%2FRkzgPOWlraaTF3R6aBQNHuZApdWDeyEKGaVdqe94w5rmTXdGjNrwD9%2FlPzahmSiEs8SaBcgSLU9Aukw%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9345865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73855,"size_decoded":25849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d8225dc49f0ef650c322d2a4964177e","sha1":"8704bb7a8a5cd075068c6d79e7d4b6c9aa08645c","sha256":"03babc01567b1d9af291b4de0a070ef189685c333c948136a31aa08e7ed51a5a","sha512":"5dc846622a7be3961ea31724b6ad89aec34a0f9935b8ac89e5dbc15b70ae4255956e0fa4ad412dcaf1edc0ee025572ef596cfddaa0e6bc3f448fc79942d72078","ssdeep":"1536:xhdVA1ObQbCbmExG502EoIWYwICTJSIHg:z7/mE8502EPWYwICT/A","tlshash":"b3734ec83ec2f016576760b1007f048bf13eaeb269ad9554d0a1e4ec7cb851ee6b7e18","first_seen":"2023-03-13T01:47:10Z","last_seen":"2026-09-14T19:37:02.686699Z","times_seen":867,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544.724b3e4d54c037e5a62b.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.520Z","timestamp":1789411122520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/19f24c842955fbbab397f79015225d5d350aa544.724b3e4d54c037e5a62b.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-9e24c\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3I5RkFeFYt5ARbWr8VgaY3djpWHKpAgAi2HHbll0Tke3m12P8nvxAuq0A%2Bb%2FUcTjSyYyEFPQTs%2FOX5te3zM9bZLkoS9li8SQkZyKs8XA1LSWBReatrULsl0eGJ6j%2Bo%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9365865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647756,"size_decoded":123270,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4d3fc7fd99e1d4459a40e10694e15e6a","sha1":"c092d8c3f9cd79bf630519bc00557a8705363886","sha256":"27735c6194ccdf74f77e3ec21dbe8d5c7e171061513b078edd88921d82d59ed7","sha512":"f5792a07b494348eda75c2ecb41ab293be281ef0752eb218fc75d5722221dd70d60e45883240871d510ef67025f5c4abade098f6db5ca9fcdccdf0a45ee341ba","ssdeep":"12288:isJ1xoG0KTfTCZDzZiRxMXK5jnhFcLSUa:isJ1xoG0yfTCZDzZiRxMXK5jnhFcLSUa","tlshash":"1ed43c4abae260309167b1bd4b6fa405b134841f0d99fd043e8c92a99f1c43da7b6fdd","first_seen":"2026-03-31T14:52:48.778611Z","last_seen":"2026-09-14T19:36:45.654419Z","times_seen":43,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.532Z","timestamp":1789411122532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:38:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJDL3b1sJHhG1ZB3y9IorhMMrjByNcm3I81Ef8fZE712eOCeU0VRM8etd2gY5qL2i8GFBedT9UThMsZcwck0NbU0SCAH4hgSksd0LBPm6kH0UI%2BKY%2B3IXZbBNbDoes4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\nserver: cloudflare\r\ncf-ray: a3b1829be93d5865-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4743,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T19:52:57.280328Z","times_seen":128089,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/wallet.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.545Z","timestamp":1789411122545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/wallet.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-1fd7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2LDk30roVCIHKB34n1bgp%2Bju%2BPpbPG9W5ZKvbXKmakG1vwvNrycqY1Hum8xxW7LwCADcyGb1whUf02s%2BIYOy1blsep%2FDU9dLfEYW%2BQ%2B0UBtJknT%2BS8x6%2FdWeP1aGoE%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09435865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8151,"size_decoded":3594,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4a8d60705c4da90ce91d4f8903c235c","sha1":"6ad45ab8c6cb2a8ea097c79c1eb197d4462a01a4","sha256":"fefe0ac8ca8b6c7a2999e3c7923ab67cced26355f9b5eab0bbc7140d578eff59","sha512":"8cf7c7286a422458b80d6e37bc3970afdbf012f69d7307497e7bd78ab526ce6cc800120d8f150dd54038ee3d60bc35710841c6836edca29085ab767fbcb7f0f6","ssdeep":"96:lXSa2PgQvn0Nn5dpwOOzd+f/Y9rQTBNMazWRtt4qsQm9i8g3eybccDjFYDeSp:1SPgLdWOi+/9lkBF357uDeQ","tlshash":"a3f1a6cc23096ef18d80c3f4ef2aa0f4a51751f99a64506ccb706e6e39155ae1c7b9c7","first_seen":"2024-04-26T06:55:29Z","last_seen":"2026-09-14T19:37:02.678581Z","times_seen":456,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-zksync.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.556Z","timestamp":1789411122556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-zksync.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-23dd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsWKOnynkKBuUrPy%2FXnYKu%2FcUSG5WnyntMwM3Kb%2BzNu6q1DTUy6t4FjSJRT%2F%2B3sKn1iKpGDXmODXrysyg%2BeRJr5D5%2FDTW5ocDa3hsB98J9qfBLDmZOcTZXrQWaivYhk%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c19505865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9181,"size_decoded":7384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79339f66e253ea5e708b4af9facb4672","sha1":"6f7aab96e1157aeec0a5d39e56ec8fd2659e82f3","sha256":"9515d5390c2b251edfc6fda424794eb12f08dc8e7960b46d75b216191bae6db8","sha512":"554a4d90024dc3974a75c31e3c7c71efd8732e6b7fb1d074e36940cc28d73c223270daa54b444e5d140a7ad8345ff36501e555947ff222fb039705e01124668f","ssdeep":"192:l0DrQbApthACK4nIt2mwdUB9bGUfXg5+SmBcNSsrmRApgPHHctttttttt:2wYAT4n42fKvbGUfXg5+SmB2riApgPna","tlshash":"a8128d74e10d1c5cd44cd9485edee8a94c298b87a1c9c99ae34491fea4178c22baa73d","first_seen":"2024-02-27T11:11:03Z","last_seen":"2026-09-14T19:36:45.651164Z","times_seen":400,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/pages/_app-ed560fec44d29c99d1af.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.516Z","timestamp":1789411122516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-ed560fec44d29c99d1af.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-20b4\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaRYzAzbW0gNC98VXmaGpmkB5%2Bb1VBI1CNkTjpW9t%2BURwSaBe1D%2FW7sm%2FK%2BPyTqtT9%2B2ve0MhOocwqU2SeiaPMqxnjmwLmBdwhl61NWaxiAiAdBmiw1USj7etz5Jjgs%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829bd9335865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8372,"size_decoded":3878,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8369), with no line terminators","md5":"6d64273a1db46e38f54989e3c9bcf7de","sha1":"0b3557f37d77a4b2bebf2768e705fe8f98c852ae","sha256":"56d7cda8e785c97251fbc282b63646253a91a0238fe2127d28ec0f759ad518c0","sha512":"0e4c75809281ffbd0669238f3b5c47bccc56d69c17e546ec33b8ade182d75b47a05ea43bf29c920787713b3614a03fcedc6f557d2149846930928e16c2282a0c","ssdeep":"192:Rd7N1IZN0MQaZwCplOb3asz95NSXuxopz:RxYZeauCyb3ashSXuxez","tlshash":"510283897191f09517fb91f2503f510eb3f2692da499d4806762c4f89efa9ae4323f1c","first_seen":"2024-08-22T11:11:23Z","last_seen":"2026-09-14T19:36:45.653287Z","times_seen":270,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/business.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.562Z","timestamp":1789411122562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/business.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IepCxP2u5qHHr9x3yBJ7eNAJ977I%2B8Bb9RyVCCz3O71RabrjhKCsz4tgwERrGP5n9%2Fm%2BE5m21W1CU4%2Ft3u%2FB7LjfRYd3Fn2HpBW1f%2FW8OyLrddsXUQA75SK8QQWCgLY%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-342\"\r\ncf-ray: a3b1829c19545865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":834,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5edce84229c2295c6fc6b49a18afcda9","sha1":"8e93ee77317b040d252bea7e41da9a405d76642f","sha256":"f3752af7aab239ede54fdd4f23390750ad0d7719e2a60b63ab35166965b6b9c2","sha512":"5dbcccf0a1050cee5f3eb7347d1fa7d37e531856b9abbccee538ffa6ef787bbcd833e0c0105281b16bf877dfd14aa873f4056cc7c2587650d14b3e7865eea666","ssdeep":"","tlshash":"0601af65a34d193cb31393a4d6063770222a5c611716b21486722cb694f710dbabb9ea","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:37:02.681174Z","times_seen":1317,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/scripts/analysis.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.671Z","timestamp":1789411122671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /scripts/analysis.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-4b5\"\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BQszaSGNLJZcJLT%2FCrcQOH0xnWuAvKB95EFNmsrns1JXV%2B0AkVGTlxcPTMRx3T4QX1iE6LfHlZqqLNWjThXS5GREG0wtPe%2FBa9WYu%2B%2BLOwb%2Fl8tshuwiE2Zj4QFfSw%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829cc95d5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1205,"size_decoded":1406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (701)","md5":"97330450853d21edf4badf5b384ca25b","sha1":"bd48c020be1b41d9386cd30d10c8a81bb27a8a97","sha256":"96e39b302859f25ccc60a28271e00c51a73c4d8f7ae40b93c61320f17097df7b","sha512":"3283e67ca75264203c67053a049a0345185df2a96de8a68892d9d8f497da9e6a99d80fb275b1f254b425383c3fee40659ada7df0b263377a2d322290e3ede5b0","ssdeep":"","tlshash":"f021118e35591a747fda1bef2377d71c702360187920ea1246dfccc8602aed250276cd","first_seen":"2025-08-30T07:44:58.125982Z","last_seen":"2026-09-14T19:37:02.687708Z","times_seen":43,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/styles.48026100.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.207Z","timestamp":1789411123207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/styles.48026100.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mtoken.me.uk/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-8359\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29365\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jz93cAJgnmCm1WLOknoCn8O6s2WrR%2FTfyyXDPQy%2Fxmg0Jw%2BoKXHjnDybUTNLfUmekTSBGuAXGGF7d0D4CPp4s3WyBGRRG5gnHQ9noORTeUDEBeo2AzthNNfalJmkSh0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3b182a029895865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33625,"size_decoded":6134,"mime_type":"text/css","magic":"ASCII text, with very long lines (33622), with no line terminators","md5":"c3b74c24f927e1a7b5f342f6ec6de76f","sha1":"f48eb2288490f9b863bef1ff0b4d98d8c3ba4926","sha256":"7453420a8c98ed97f5ca254057b2f275e10307581b741c53552045e8f9952c07","sha512":"78c4ca5ddeef22ae62cbd4fdbcc01106902611630a47775d801674c7af43f6d210ea994c6f20c02b982589374ff09db65ddfe83f99fdfa97cfef577cf37a8451","ssdeep":"384:oyJX0/4RYtTelIoWDv8Pb58QvymoCSkXhgNvCcRwzT1htmhCW5JX7yW0NMGvpryd:oqWzMPW07pryd","tlshash":"54e287012fd4303f6a5705e6b6457b4c772f6647433b94a8b3b2e211cbe817b062669f","first_seen":"2025-10-30T01:19:28.239892Z","last_seen":"2026-09-14T19:37:02.680669Z","times_seen":38,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.504Z","timestamp":1789411122504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-13c16\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCrLdTxx4omAgxZCfj9%2Bc19D3LGenJSatVhpghuN%2F2Htco6HoGk6xlJjFageJczhMxoCeBeJHwNuqVOiQmtBG8oDnARMtzt7vy8uHVjyqQXN07RR1Ah%2BBmA41oouNnA%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b1829bc92b5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80918,"size_decoded":10997,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"61b293fd330c93321b98f4891e46d465","sha1":"ac5a8393f4b9112b9554ba2f52eefa95bf041a49","sha256":"d0b7a3367c215ac64a9b273bb95499a206f5642ede59be7f4f0f5d31508dc43a","sha512":"126429830f1df4ea9c7e72a8c2a47a60838e18c17cdbb07ab4a5453b601cb962199c62f90d054a61521d1f475f7a65a859116b6771af229f5524e5730111c2b4","ssdeep":"768:wbKwmgzY0vPCuGZfg3byjQWjNc3Ug/WNm14ZsV9:UKhgkACuGZftQE8P/UeOy","tlshash":"cc835a2f2b11211ad2a2df1a66c53b9dd931ea33b179decff6d53c218786e464890d03","first_seen":"2024-01-06T17:59:57Z","last_seen":"2026-09-14T19:37:02.691017Z","times_seen":445,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T18:38:41.877Z","timestamp":1789411121877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 10 Sep 2025 16:09:48 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlxkwIMc7cjz323aVaumFxOrVTGBqnktWQTtp4tWhMq9dhhBykf3Olbwa%2F4QmRg5XVGETporFVoAd6HZagUHKY0FTBdI24mlKT9qvwvVxFQDViNpfhrmTTHE0msJPus%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3b18298491f5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15450,"size_decoded":4934,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15405), with no line terminators","md5":"4959650ce628704e059168f496ddc0d3","sha1":"6463dc0e7cd56408116c811bad1fdfab015792f9","sha256":"ab89ff24245574f12712946745ff85dddde04fa515496bf8cd3de8da8c8b0822","sha512":"131f1e04d3ef8e7c4d63104e3bb8b3a6922e83ef7992aa9d7d1f25c3712ac63433a12900424c8ea3d3dc10c8e99802a7da5f5904c03d150e0a180d41df47410e","ssdeep":"384:I/IedSJ8+Mx+c8ddtcsFNYwMWIOFn/vulg7iS:Cdw8vQc8ddtjFNYwMWHHagV","tlshash":"70623323ac15fa6706528cc9d476eb6dd0d6563dcab5dc0c92fc86ca97c0fd9cb22806","first_seen":"2026-03-31T14:52:48.770678Z","last_seen":"2026-09-14T19:37:02.692789Z","times_seen":17,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":22,"connect":42,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/pages/index-06bfbdeb1b030a5142cb.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.526Z","timestamp":1789411122526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-06bfbdeb1b030a5142cb.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-16ff2\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NruZmQxezEfFkCqdBRFezYyIzOxTGMZa0mvKIGx3K%2FctRan%2FOlyo556NIRc7oKzzNE0inGLQfCUqWjIFEb8nOpZUfGj0FrX35rkOwWg5eZGcm3V6uA2hH0rNsPEmAos%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3b1829be93b5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94194,"size_decoded":20294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (337)","md5":"6f2c89baeec86c74ec36538f75a291e2","sha1":"fd790f6aedc1e9aa4d1e48155319fdf2993d250d","sha256":"019e367df6252f903624feb5a2c88bcb2eaaf5e280277c331ee1dbbb133614d1","sha512":"3b1f7a463c3c7e8986b112e3ee04b9def3540957869a60c0e7285161156abe95b1fc1d88a3b93fdbdd300128a619fa2d88efde6ec779b06cbdb1eef6c8518431","ssdeep":"1536:gRGUGF+M+wTRGUqY+M+VnRGUk7+M+loY+esBrxRGUmr+q+wrUGx7gimUFwnH2JT6:gbZ3Ab63FbB3geubTtwrUZ4Gj3/5","tlshash":"f59323c4f7dda857821171284c3f94cda17da4bb9a9888efbe58e09428e443dc379d78","first_seen":"2025-01-14T11:39:47.145236Z","last_seen":"2026-09-14T19:36:45.649415Z","times_seen":192,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-ethereum.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.547Z","timestamp":1789411122547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-ethereum.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-25d0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ezd4msWRKZqtAWWRy3pNdslL3rzknRPr7bPZUgAtV%2Bbpp21rmL8sbVh9zs0qhpmY4cUJP5qJ5MG%2FLiO%2Fkbgf6kdBxhdbn8OL0aLyBqnfJxt8bGUvVJTaczkulCLco0g%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c09465865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9680,"size_decoded":4809,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd8f57a32cd521ec6f4d6faf2932bfd8","sha1":"f31988b4e991a56351f6f833775f3fc277a3f0a1","sha256":"9e5ed3658d4df3fb2782c7714d3db670600b9b59572df69100a22ebcd18bb7fd","sha512":"53647d6f897cb39f2f6d05111ec3d63af410283235d9ec5196340f3931facf35a6b4c2cd14200ae999a8f55c1a9f89feeac689e588fb50f5e869665c13a28c2b","ssdeep":"192:oFyM0Jy+wEq+/E6YE07UOdihOahHBggiUNGIeyZLSSqKXF0:mCwEvc6YEgwhOjgUIeEMKXO","tlshash":"ca12b6dc6f3385fcb8c5a1fedb1554a835549cee780686a9d3782d046c42928dd0a8e3","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-14T19:36:45.644626Z","times_seen":1254,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/images/index/partner-slowmist.svg","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.557Z","timestamp":1789411122557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /images/index/partner-slowmist.svg HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68c197bb-23e7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXjESBP4UpC9EaMMPImpovM3tWLfqBBpjPGrXMkEbOU7b6QL%2Fja%2FlQQ3FLq5QyXogcMiypxGk7miR5j6yhgB2SBY9BY5NBiIGtDvjk0hfUWO%2FY%2Fg2%2FerkS%2ByyUguT2U%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b1829c19515865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9191,"size_decoded":7631,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd1543d84d6df21421d32250cabff94b","sha1":"89d96677e7c5228a075a97cc92f965b6c34ed875","sha256":"68a63273a5b96f112d1d41a2d3a480d99b49a4f45468b05fa4b29582720f9f5d","sha512":"49ab7676cf5749c2d2df94e4627c749fbe2d97146782641e5ec84918bc23316a82801d799a15534a176c1a868dda8a7d5e71da0e9bc66f364e94be5c5a53f2b8","ssdeep":"192:WIwCjw3Sl0qzcBwEcL8DOunWttGf1o0ekdQALQyqKLxpA:pzYbq4gBuSe1Dd4vK9u","tlshash":"6112bfb7265dbc5a4ea44318603ca5469ced1a8b951cd77fefc820db0c63ca32e944ac","first_seen":"2024-02-27T11:11:03Z","last_seen":"2026-09-14T19:36:45.645758Z","times_seen":402,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/YOz1gQVypx2fvdmmbu1RN/_ssgManifest.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.663Z","timestamp":1789411122663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/YOz1gQVypx2fvdmmbu1RN/_ssgManifest.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdOTUdGTwLwtGhBkk1EGvGnak54hriwdTDq5JYQsWJFUSV6boWsaqouHfvNM0OCMHZR89dS4RyOnpt67J%2F4cT24df96uxPiCnyOnD19rZEMER8hnNzB3BTD0dthBggs%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-4f\"\r\ncf-ray: a3b1829cc9575865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":829,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"abee47769bf307639ace4945f9cfd4ff","sha1":"c0a0dc51ee8a2852baf5ff30c33b1478ff302585","sha256":"653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479","sha512":"2b074799106698df69a28fcd8255c3cfd1ccf40fd4c1bf5d463c42e63b32856f801e066706fbd960a0da4ebe645c070c398dcf01bd722dc4fa592266361ae81a","ssdeep":"","tlshash":"d4a001a0903cdc60aa63dd1c126013168fa05062651d28938afd2054c0341410300d50","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-14T19:51:52.848042Z","times_seen":17975,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/v1/business","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:43.450Z","timestamp":1789411123450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"POST /v1/business HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 62\r\nOrigin: https://mtoken.me.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nCookie: locale=zh-CN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":62,"data":"{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"market.getList\",\"params\":[]}"}},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:43 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DxikpILKCOVNWrL9Zsu2qD%2BR015zJzuT%2FRX4uo92q%2BHVkF6V7sbQzIM1OpzCTQZDfhQg6x7ZzvHMzhe%2FSP2EA9KnAc9hNDQpDiDZiboI6mYjj%2FNPu3hD%2Fos9iUyvr4%3D\"}]}\r\ncf-ray: a3b182a1a99d5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":681,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-14T19:40:54.853161Z","times_seen":559396,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/styles/swiper.min.css","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.498Z","timestamp":1789411122498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /styles/swiper.min.css HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c197bb-4d42\"\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29364\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKxEHWfq2%2FsvmDn76ngbflT%2BqzigGGtoEg5yKEpGsoUprb8QywbEoxHS%2BATKuJaIxrM8CLcxM%2Fpp0uC3HZswTg3%2BNOextyTQwXBhyYyDrxntJh8hXf9fYCnJRP4GsAw%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3b1829bb9285865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19778,"size_decoded":3893,"mime_type":"text/css","magic":"ASCII text, with very long lines (19513)","md5":"13e3477e9b99b8653e80def106e569e7","sha1":"34a50a5848aea3d3b6345a2a29fea97d0b48e8c4","sha256":"cbd3907ccf320bf09a971e16978df6d2293228febdbcffd158ce25011a6d68a1","sha512":"54776d5f9ef56af29d4deeef3884c7385bdc0419698694a6c63481b53e17fd4af3c8ba89d95284944b23778cf66810b0ec705e9b757e7c798da15e7957398bcf","ssdeep":"192:dWaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:dWa1/lS0Cifi5o/mXOGJ5c","tlshash":"5592612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T20:39:57Z","last_seen":"2026-09-14T19:37:02.67449Z","times_seen":1737,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtoken.me.uk/_next/static/chunks/styles.8644ff0f5a975963f94d.js","fqdn":"mtoken.me.uk","domain":"mtoken.me.uk","tld":"me.uk"},"ip":{"addr":"104.21.75.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mtoken.me.uk/","date":"2026-09-14T18:38:42.525Z","timestamp":1789411122525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtoken.me.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 19:51:44 GMT","end":"Fri, 11 Dec 2026 19:51:43 GMT"},"fingerprint":{"sha1":"D7:03:37:5D:CE:D4:DE:44:B2:02:B7:6D:E3:E7:A3:6F:56:9B:9D:92","sha256":"67:78:38:AD:3F:09:0C:3E:5E:E4:C9:65:7A:36:7A:53:4A:78:DD:8F:3C:F8:D3:28:01:69:81:21:A4:02:37:CF"}}},"request":{"raw":"GET /_next/static/chunks/styles.8644ff0f5a975963f94d.js HTTP/1.1\r\nHost: mtoken.me.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mtoken.me.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:38:42 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Sep 2025 15:22:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCSXAOnbrAikOZafViOidBoy4BYcC9WJBYxsXJHMp%2FhDXmxPYk9O%2B002qSPcqXXzPQxeKd4QW4lpOkVpOdymIu395DdK1oInfW3k6LaWo5ZTB%2FucEsotWDvUpXZPN4o%3D\"}]}\r\nexpires: Mon, 14 Sep 2026 22:29:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 29364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68c197bb-103\"\r\ncf-ray: a3b1829be93a5865-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259,"size_decoded":912,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"de9d77950776a69ffa50f7234df7190c","sha1":"483ede0c4f7ab5df20cbd9ff21e83feb7ee4be5e","sha256":"60a1d40c6f02c26f052e84e5e2992893a59d08fa2d3d4eb486cd518711828d0b","sha512":"32ae10a4e27c502c1d1ddde36638a1b1c8a3945485bca60d892d912b04fe7d3ddca07fba3fed7018053ba2aea01396230b9c723294e14bd1e40e8b08bdef9f91","ssdeep":"","tlshash":"2cd0420839a03577a5e621e4215b31d81ca6121e36fcfc9817f4c19adb3278e145398e","first_seen":"2024-08-22T11:11:23Z","last_seen":"2026-09-14T19:37:02.677977Z","times_seen":273,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mtoken.me.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}
