Report - metamask.grsrc.com/

Report Overview

Submitted URL
metamask.grsrc.com/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 05:49:47
Access
public
Website Title
Metamask | Support
Final URL
metamask.grsrc.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-22	490 B	142 kB	104.18.11.207
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.1 kB	68 kB	142.250.74.163
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-23	510 B	7.6 kB	216.58.207.234
metamask.grsrc.com	unknown	2024-02-01	2024-02-16	2024-04-16	7.9 kB	491 kB	188.114.96.1
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-04-22	1.0 kB	141 kB	172.67.142.245

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet
2024-04-23	medium	metamask.grsrc.com/	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	metamask.grsrc.com/bootstrap.js	151 kB	2023-03-07	2024-04-29
Pretty URL metamask.grsrc.com/bootstrap.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:43:01 Last Seen2024-04-29 20:08:24 Times Seen25 Hash 7138c610defd51b91b7369f09dfc6e33 bbb64daeaadf32f6effcea8ffc4d6527dfe19917 091ef03dce5e2d2b9f3a828cec09dbafce7c8464a18d0658b2228bc959420974 Loading...

HTTP Transactions (24)

URL IP Response Size

metamask.grsrc.com/4.png

188.114.96.1

200 OK

8.0 kB

URL GET HTTP/3
metamask.grsrc.com/4.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
8.0 kB (7998 bytes)
Hash
c710e9a5c39e89136a73edf0a1c99abe
aca40362b7d87533d00250e102ba852d19e2231c
7077eb7da3a6f399014d67a1032ab6d67f099055a1a2594cb4753022b843dc43

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /4.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 7998
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "e4ee44e28565578050e98600aaf47c15"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WDXeFAE%2FU7M4gJ0zy7i4bPzdruFHSrzhfQW8%2FYkZGeDlZqFT9cIPRiNUMIpvaJjWIY4l37dGkJ%2B3kmC9JbOnsMnIvmmkLtkpZhQiufuTCuYCWWwZhU%2FAQDQVjJnHOhfV79pPryI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba056ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/hero.jpg

188.114.96.1

200 OK

32 kB

URL GET HTTP/3
metamask.grsrc.com/hero.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x400, components 3
Size
32 kB (32221 bytes)
Hash
237005e35d5f43d6ebd5770eab183046
fad8f7e7d40eb00c3dc0a6d15ea62c627ff41926
41f2a2489fa5885f10e97dd2cd3e636276744c19db9235f3b831bcd0282aae1b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /hero.jpg HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/jpeg
content-length: 32221
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "ae57da582c214268a5635a17367ca914"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BbcuBlAl%2F8Gm%2BHSWcIL05hAMTWfBVNf%2FdR0Y0HroMWqsTPAUKL5D6uc741LPIOUNx9Ar7tcLKuWZ628Yl3pZddWZAwaZsiidMkUffONAJSYN34zigdvQEih17w85Mcy2RAXl7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf427b9156ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/5.png

188.114.96.1

200 OK

6.9 kB

URL GET HTTP/3
metamask.grsrc.com/5.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
6.9 kB (6852 bytes)
Hash
720871ca002e89a10d26e5c516066311
8648fe12645cd5c3473a73faba1d42cef78de444
f0d7356ee903d26301b8960783f70c108efc0382f20c804e0d09872a5443ce96

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /5.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 6852
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "0e623ce711feb8b7fc36b073e0567293"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5UJlxIjz%2BRF6gErXNJSgwkhug4795EaXS4zmeqc6fUrPEORMAGduxTIFOqrZIxt5%2BFALMXJv%2FJ%2BaAVoGkoDov%2BkItOSbN5o94iZlBGPyXLproeFwgBnCh5CQ7n7Jb7Fvy3cFVs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba156ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/2.png

188.114.96.1

200 OK

43 kB

URL GET HTTP/3
metamask.grsrc.com/2.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced
Size
43 kB (42713 bytes)
Hash
5f662391fe3ddc927134ba8e15263eaf
ab5ea7aacdc8c97238247f59761abc02033b2a67
7faefc7f99e94d6251527c95794a5fdfb3e644baf25ae56f4e13afd125246421

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /2.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 42713
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "5f91788c5de549cbb3e5bcabe7df3a78"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rXrOCpdEbOjEwTwJxtVXL%2FsU1IB29dPpkg7%2BcApcUtDFh0h1uYiOyH0t%2FBIFYQAdztpLtj%2B2Qhgglhcew8cI%2B9o1KW7GLmfsnvYgDFWfdjyry2gSsep%2BifTtvDR9z6P62EHNKtU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428b9a56ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/1.png

188.114.96.1

200 OK

14 kB

URL GET HTTP/3
metamask.grsrc.com/1.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced
Size
14 kB (14347 bytes)
Hash
521a00d54b7fe1cb1d7712b655ca54a6
8c5aa52335bf25183781e62843ede770bf6877ba
506d6d9d5ad22253976f2906bbf141c94d19eb15466ed62b8c6cfb887bf07b55

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /1.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 14347
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "a820dbc81262e9222e4edf94745891e9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ettHiyMUnAolqWVrg0VImdxuTtCWuyu0dTr9D67Ro8ZPvSToHDjidr53Gb25osPIFDHAK2Hw6Kr5bTLIOW0CkT1vcR4ca%2FDzn3q0PQFZ5xa27SNEVxt3ohChutBU2%2FP72urYgk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428b9956ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/3.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
metamask.grsrc.com/3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
11 kB (11355 bytes)
Hash
3818f9cfccbd94fad91a10d3c5ee356c
7c6af849177aa8bf6ef9bcbf801dc375e1997900
20a34c84f82590d99a060210ea362878975f21cfd65c3a70c54e7fb99dce1f76

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /3.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 11355
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "ea443f5b717d6fd57e04e928914843ea"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=32SqBstX3PzLkVhO4Yjtgvy70yAT2JR3UUjijxhekz9lcFly8OFTCt6Hrsesg4QOEzrOt1qZIjP7u0Hve%2Bg%2Bo9hZ5EuPfp1x%2Bp2izSo32sjWVW3jaeA8zyTe1BQeP%2BzbeGyEklM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428b9b56ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/6.png

188.114.96.1

200 OK

6.5 kB

URL GET HTTP/3
metamask.grsrc.com/6.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
6.5 kB (6533 bytes)
Hash
f82776f839cec899c9c87a680226aabf
43f5dedb6216cb02ee568fcb66cb19fc296c3a85
c62a1f30cdb6aff5eafdfccb45383032e61bf70aa0573572a4428347a1b5b116

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /6.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 6533
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "3f43a837e2d21bb641e9dd41ad3138bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BVnKri1p4AMkyDaNgK8vylzBomdMW6XQ%2F2lVHBsSUXiVA4X56uM%2BB31ktkik2KMJl2wNw%2FxSDp9vYvKAlJLQxyirv5k%2F3YoeguD5U7Y1DYp3MGbxtLYoRUzpPbveg92kv4EMdOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba356ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/7.png

188.114.96.1

200 OK

6.8 kB

URL GET HTTP/3
metamask.grsrc.com/7.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced
Size
6.8 kB (6840 bytes)
Hash
b9f7c0fd11c34c044799e673947103f8
491baab057af39b2b24bf0c671d0eb05454b8c48
29db12a282df5639db8fa232831bbe9a7220884eecf79f1776f1b27237a4597c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /7.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 6840
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "da9904d57b15ec1dc2c2ceb86f8357da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zYMVaW3JD4MAqwk7slelz875yG%2BgmsisN6kjC4La8%2Fdf1UofeEf0%2FzBvWvq3faxfB9xjgFJl5fQcVXguaJt5pi%2Fe2t%2B%2Bp3uIYDPBsuzGTf9FzC3rvQoZxdlDKHcrJIFFXOlWA8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba456ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/head.png

188.114.96.1

200 OK

72 kB

URL GET HTTP/3
metamask.grsrc.com/head.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Size
72 kB (71610 bytes)
Hash
c0c483d27727c1982d58cf46ef82de07
3581728deed6928c9543d7ea1fa30492d969493b
4a4844c8e02daceb92e219ead97dee0c03a6c606b2d69ca1ce8ffdc5340b2613

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /head.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 71610
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "1c29d934363c72d36a12a7afd93885ac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D6vkUHsBNxhCb8Wl8SC2g%2FRVNGoJXhHTRyl2Bnnc9NXWtbBKYBnRfZUpCHgOMasplpKFP00xUyUlChcZ%2BKXJwqz985f9m7yRsk1JnX1BpKue9TeYp201gkuL4I%2ByOTUvsN0INmM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba856ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/8.png

188.114.96.1

200 OK

10 kB

URL GET HTTP/3
metamask.grsrc.com/8.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
10 kB (10268 bytes)
Hash
1948962ad395727d902bd6b5fcd01807
f7e85e096b084ef6d9f550afbcd702fd889031a5
ad0237265584181a6797c454ca123aa5d3df08001ae39b27bddfc66856b6751b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /8.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/png
content-length: 10268
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "420e724ef72c8e648cd84677ebc681e5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ywyH%2BUszdjGc9qoMyz7Gp1RRljmnmpvIDYyWHGpy0izjmiRrt85M8kUsVh4Rk%2FS4kNOGcblzigPIDgceMTfjfbriY4eB9s5WlTswCXD6v5KZ5JEyeYeRcbwP5ca5NAmUVqby0iA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf428ba556ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/bootstrap.js

188.114.96.1

200 OK

29 kB

URL GET HTTP/3
metamask.grsrc.com/bootstrap.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
JavaScript source, ASCII text, with very long lines (620)
Size
29 kB (29380 bytes)
Hash
7138c610defd51b91b7369f09dfc6e33
bbb64daeaadf32f6effcea8ffc4d6527dfe19917
091ef03dce5e2d2b9f3a828cec09dbafce7c8464a18d0658b2228bc959420974

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /bootstrap.js HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"61ba1272ce776aebe7a3558a3069cb08"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qQIfqh%2Fd1XBfORx%2Bt33XK%2BX3L0Ey%2BIPrhYUumtY3zJXBGNPaQzfzJ%2BnaYPNOUmPu4rw0OKTBHiSalChVt0bUmG2ePRF%2B7u6AQ0X5Yg8g8zZZ8%2F%2FEr%2BfLLp1%2BSD72SySABZP7LC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf428baa56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/bootstrap.css

188.114.96.1

200 OK

59 kB

URL GET HTTP/3
metamask.grsrc.com/bootstrap.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
Unicode text, UTF-8 text, with very long lines (560)
Size
59 kB (59430 bytes)
Hash
e89d59e5864d3cd4590e418b62d57ed8
5a5bfeb2236864258b77822806d7f0f42b442b33
b47ac9ceacf2d1c784408de1370b67d4686904c940906ec3d8d44528eb512e64

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /bootstrap.css HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"15fcd1584ab3e9e1fe9b86255eb7054b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9hfyfdNT3Pa1E%2Bqmzzf57fb1epiP1Sziv46GsyQMl8G6d490E8Hol6kRn1fWs91fc4MsyujLD5BJwKHoZULpmP9k%2BveRd%2Be%2BIkLW0KA6%2F5usBC5Vpev0QwzLkb147DD2iRRsrtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf426b8956ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/laptop.svg

188.114.96.1

200 OK

44 kB

URL GET HTTP/3
metamask.grsrc.com/laptop.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
SVG Scalable Vector Graphics image
Size
44 kB (43671 bytes)
Hash
afeafb6a9f14bd7771c63015be5a05c9
78683c75d81cf80440f083e9fb4bb2987748e290
517c0c6b44ede59070fb138aab7e875b9c230a227295f9612c32dabb9b0bdb13

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /laptop.svg HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"6134253d571eed060b3bd54dda137272"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQVh7Xb1KpunQ%2FOwnuDbX7fgETIyFvgXck3kyZQL8IdYc6z9Z6U4KOV%2Fkna00O2gsZYMWif7XA7j%2FyWY2XqtK04vaEBByZ1hSxWlOD0nCHmdgKwGUfWMfJ0cMmipR4umLWAsCVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf428b9756ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

use.fontawesome.com/releases/v5.15.2/webfonts/fa-solid-900.woff2

172.67.142.245

200 OK

80 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.15.2/webfonts/fa-solid-900.woff2
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 80252, version 331.-31327
Size
80 kB (80252 bytes)
Hash
9ae050d1876ac1763eb6afe4264e6d5a
72344eab2e7431eec313caa21f266cbfda7caf60
6c916669cf923b4f1b2db5c5107c83b6ca205e7ad0dcd840b251e63f0c8d28a2

HTTP Headers

GET /releases/v5.15.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metamask.grsrc.com
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 05:49:22 GMT
content-type: font/woff2
content-length: 80252
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "9ae050d1876ac1763eb6afe4264e6d5a"
last-modified: Fri, 22 Sep 2023 01:45:21 GMT
vary: Origin, Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uh7Tm8xYunvPSzS5ipbsvDyaMaLkqd9n35EZ1nhdTzLDpKp30U%2Bwt0upHHtKCnOgYsMD4UQ%2B8P%2Fjlx6IHfAZ0u48DJPIdUt%2B05L%2FnRpTdEBDxXSZqPsgnG9l2yUeAChSAh%2BgM1Mr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793cf44ed8f56af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

metamask.grsrc.com/head.png

188.114.96.1

200 OK

72 kB

URL GET HTTP/3
metamask.grsrc.com/head.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Size
72 kB (71610 bytes)
Hash
c0c483d27727c1982d58cf46ef82de07
3581728deed6928c9543d7ea1fa30492d969493b
4a4844c8e02daceb92e219ead97dee0c03a6c606b2d69ca1ce8ffdc5340b2613

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /head.png HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:22 GMT
content-type: image/png
content-length: 71610
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "1c29d934363c72d36a12a7afd93885ac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D6vkUHsBNxhCb8Wl8SC2g%2FRVNGoJXhHTRyl2Bnnc9NXWtbBKYBnRfZUpCHgOMasplpKFP00xUyUlChcZ%2BKXJwqz985f9m7yRsk1JnX1BpKue9TeYp201gkuL4I%2ByOTUvsN0INmM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793cf465e3356ca-OSL
alt-svc: h3=":443"; ma=86400

metamask.grsrc.com/logo.svg

188.114.96.1

200 OK

9.4 kB

URL GET HTTP/3
metamask.grsrc.com/logo.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
SVG Scalable Vector Graphics image
Size
9.4 kB (9402 bytes)
Hash
51bcea2625eb2c6e9268a7377a792c86
5eeb306e6584eed1747c36c11724f193711d430e
5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /logo.svg HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"60eb7446a63210d2afe5dde637992f63"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dqKLluycfDMBeFkcxuQBXhLDm5%2BjDJ4luhRJQtUrXSRuPVAnOv4DxV8N4SFueVkfDZN%2F5%2B2lKYYmG7gdLMUN3BuO4CWrr16R1HbtvQsK1mISmgHVwbE6K%2Bxd%2Fs4VTvDiYeVBePc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf427b9056ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css

104.18.11.207

200 OK

141 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65324)
Size
141 kB (140936 bytes)
Hash
04aca1f4cd3ec3c05a75a879f3be75a3
675fcf28f9fbf37139d3b2c0b676f96f601a4203
7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11

HTTP Headers

GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
Origin: https://metamask.grsrc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"04aca1f4cd3ec3c05a75a879f3be75a3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bca33dbed7ef17c39281dae69ea12b20
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8793cf429d5056a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

metamask.grsrc.com/style.css

188.114.96.1

200 OK

5.8 kB

URL GET HTTP/3
metamask.grsrc.com/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
ASCII text, with very long lines (6655), with no line terminators
Size
5.8 kB (5845 bytes)
Hash
d5cd0e0bc9e8296382069bb3c3cfea01
77921252594b1d8c01a91e2e542bc381e7d8ced7
9808a0721e8b7c01bbd941c67731b155b95af1429a6a06350af5d141f9412ee7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /style.css HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"16ee9907a6afe74b49d61243b6c18608"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j9KVEaQKcNT7nher5WGDlV1DvxInRL6vtlQ%2FHUpFrjUg%2F3i0w1OwhooBwIe6SLJkc0VRV9tO4D4cOApJyEcw8K6ZrJH%2FNn5Qy58c2%2F98E862in%2BRKPfo37I4jnQudwlw2v7tf3A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf427b8f56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

142.250.74.163

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://metamask.grsrc.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metamask.grsrc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 02:20:35 GMT
expires: Sun, 20 Apr 2025 02:20:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 358127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

142.250.74.163

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://metamask.grsrc.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metamask.grsrc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 02:20:35 GMT
expires: Sun, 20 Apr 2025 02:20:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 358127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.15.2/css/all.css

172.67.142.245

200 OK

59 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.15.2/css/all.css
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (59158)
Size
59 kB (59344 bytes)
Hash
c4af24ce595437830af0a401897698b2
06b7f92dd894a9edb0aeb9d040b489460ecff593
d1fb8d8337cd22568295b0ed998c85c58f0b4cd083af0b0db21cb0af80002f2d

HTTP Headers

GET /releases/v5.15.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
Origin: https://metamask.grsrc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"c4af24ce595437830af0a401897698b2"
last-modified: Fri, 22 Sep 2023 01:45:20 GMT
vary: Origin, Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G393HmP52ejpw1WgeEpdyCaonvNaXkdJ7e71oElL2HWTB57E16MCVd6uIPcYyyBQusinjG7gyxZUCVYHYFEFbmWDQ0oVwFVr0L69PxhxtRCWiHPDWdRR3RrPrAB%2BhWNaP7d%2FdW0%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793cf429b5656af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,500;0,600;0,700;1,800&family=Staatliches&display=swap

216.58.207.234

200 OK

7.0 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,500;0,600;0,700;1,800&family=Staatliches&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://metamask.grsrc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (7140), with no line terminators
Size
7.0 kB (6980 bytes)
Hash
acd052f8dfa76ff123be362c4d1740d7
edc9ca44814627d02e82c7c3d7441682eea41f52
9e6d58dceed0fb99a0c817e91fade07dc5f0e4127e55a610f0dfa6792df4f4a3

HTTP Headers

GET /css2?family=Montserrat:ital,wght@0,500;0,600;0,700;1,800&amp;family=Staatliches&amp;display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 05:49:21 GMT
date: Wed, 24 Apr 2024 05:49:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

metamask.grsrc.com/

188.114.96.1

200 OK

10 kB

URL User Request GET HTTP/2
metamask.grsrc.com/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
HTML document, ASCII text
Size
10 kB (10202 bytes)
Hash
4c086318f4a16b4f1c6f80310a8fae3b
1e202308e5dbd333ad211014b918d8cabd3ad1df
53902394fe0023bf555dd2968dd2f3478e2c58db12844b7c833f6c45a69c8301

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=THS8S%2B574H9YBMArjCCXXek%2BmDxasFuLehBdn%2BOesxB8gyNkzd64xq2zmry2al2WaSsO6dixocP1UtFswroZ7pGkGFtd%2BiHT3dNuEJkfv2qQWlU4HLr42AJ4bpLUmMCtGzqqovc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793cf404f705695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

metamask.grsrc.com/girl.svg

188.114.96.1

200 OK

37 kB

URL GET HTTP/3
metamask.grsrc.com/girl.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://metamask.grsrc.com/
Certificate
IssuerLet's Encrypt
Subjectmetamask.grsrc.com
Fingerprint4C:1D:68:0D:27:AF:01:CC:60:03:D8:69:55:8E:F1:A7:24:5C:78:2C
ValidityMon, 15 Apr 2024 15:42:18 GMT - Sun, 14 Jul 2024 15:42:17 GMT

File type
SVG Scalable Vector Graphics image
Size
37 kB (36835 bytes)
Hash
46fb450c5ecf6da758bca0975551f056
629157e884b450ecf5a94d38d736db3c7428245f
8ba2b37fd4f2f3c19c10109bc6111d3d71692c78f9351f1eb2a8cab5231b77b5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /girl.svg HTTP/1.1
Host: metamask.grsrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://metamask.grsrc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:49:21 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"70edc0e650d6ab7527f8d6944e346bef"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RX%2Beo72qzJxnIG4tPyYW89dcrODHzCix7%2Fqp8qnMldWEissCqGEfrvb1aZwfQtElkE%2B6%2B1VR8WCsd1DJkzRiLVOeq3%2Bspm7tCSAdi7BS8gUT9%2BNtaTW2Xy0PqrivGsnEksdOrR8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 8793cf427b9256ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type