Report - restore-your-vault.free.nf/?i=1

Report Overview

Submitted URL
restore-your-vault.free.nf/?i=1
IP
185.27.134.227
ASN
#34119 Wildcard UK Limited
Submitted
2024-04-24 16:48:16
Access
public
Website Title
MetaMask Notification
Final URL
restore-your-vault.free.nf/?i=2
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
restore-your-vault.free.nf	unknown	unknown	No data	No data	3.0 kB	12 kB	185.27.134.227
errors.infinityfree.net	unknown	2015-04-18	2022-05-27	2024-04-18	434 B	2.9 kB	172.67.71.120

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	restore-your-vault.free.nf/?i=1	Crypto/Wallet

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	restore-your-vault.free.nf/?i=1	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

restore-your-vault.free.nf/?i=1

185.27.134.227

448 B

URL
restore-your-vault.free.nf/?i=1
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
HTML document, ASCII text, with very long lines (838), with no line terminators
Size
448 B (448 bytes)
Hash
90f995e4d6b38a7dd2dbbe1bcc0d242c
a391fe958d031e03452cfe5bbdbe16af62c36f46
fafc3e9c00981f74dc9e845508c3a377574d6441e537962fb5af0e37618d450a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
PhishTank	phishing	Other

HTTP Headers

GET /?i=1 HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 16:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Content-Encoding: br

restore-your-vault.free.nf/aes.js

185.27.134.227

4.9 kB

URL
restore-your-vault.free.nf/aes.js
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
ASCII text, with very long lines (13733), with no line terminators
Size
4.9 kB (4874 bytes)
Hash
fc66e046447092c606f2587837f96874
fcf354a8044f494ee1f9fe868dde3f570f50e593
5069425b121346b36f730910d05402d50920fc2178b01e0c878b71af4ef1eb96

HTTP Headers

GET /aes.js HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://restore-your-vault.free.nf/?i=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 16:47:49 GMT
Content-Type: application/javascript
Last-Modified: Sun, 15 Oct 2023 16:32:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"652c1415-35a5"
Content-Encoding: br

restore-your-vault.free.nf/?i=2

185.27.134.227

2.5 kB

URL
restore-your-vault.free.nf/?i=2
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
HTML document, ASCII text, with very long lines (1399), with CRLF line terminators
Size
2.5 kB (2454 bytes)
Hash
de4b8532e1687b5c0fc55f6393f11c4c
b903997e48f1c9112715eb110f14deccb9f71484
bd549f25d7fada8d551c56843ead0622710aa1a06c035d0f74d6e3112ed3b56d

HTTP Headers

GET /?i=2 HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://restore-your-vault.free.nf/?i=1
Cookie: __test=e52d0ba49e66189a8c0e8df58ef39709
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 16:47:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Expires: Wed, 24 Apr 2024 16:47:49 GMT
Content-Encoding: br

restore-your-vault.free.nf/MetaMask_files/index-rtl.css

185.27.134.227

227 B

URL
restore-your-vault.free.nf/MetaMask_files/index-rtl.css
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
HTML document, ASCII text
Size
227 B (227 bytes)
Hash
062083477478aac3073dc04e65b37ca7
23384c8e312715b238ad2996f9bd2b020e3d55b7
924f0f4dea114255f599c39bfe3ed86330193e32d9f43563c6159c10f465193b

HTTP Headers

GET /MetaMask_files/index-rtl.css HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://restore-your-vault.free.nf/?i=2
Cookie: __test=e52d0ba49e66189a8c0e8df58ef39709
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 16:47:49 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 227
Connection: keep-alive
Location: https://errors.infinityfree.net/errors/404/
Cache-Control: max-age=2592000
Expires: Fri, 24 May 2024 16:47:49 GMT

errors.infinityfree.net/errors/404/

172.67.71.120

2.3 kB

URL
errors.infinityfree.net/errors/404/
IP
172.67.71.120:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
2.3 kB (2308 bytes)
Hash
ad88a54fb62017400e5efb3d07a19f88
b5003541d95668eff481872fe60da87615a441e1
05eac83958e073be266f9b1b8af877c1296dde1cb0ce322d735af3648866d2f8

HTTP Headers

GET /errors/404/ HTTP/1.1
Host: errors.infinityfree.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://restore-your-vault.free.nf/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 16:47:51 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36EWRulKBoko6NXFVCffjC36Minj5hzEKA2tJI%2FdociDv8EH69%2FiXpRaII61Y82yEgW%2F7nm%2FtkDvtpjfesF%2BgMza%2FPk4IRapz2%2F9wqJUwyVB69yd7gFvErzybF8ut3jqKHDkSxr%2FOH6x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879793d96d5556aa-OSL
content-encoding: br
X-Firefox-Spdy: h2

restore-your-vault.free.nf/MetaMask_files/metamask-fox.svg

185.27.134.227

1.1 kB

URL
restore-your-vault.free.nf/MetaMask_files/metamask-fox.svg
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
SVG Scalable Vector Graphics image
Size
1.1 kB (1107 bytes)
Hash
c06f3a3e804ebc7343949fdca3fdd7f8
d96957b5a42c4f69e11a55e388234a26daf4a039
b855851451c3eb7220bc7331d6cf7f19dad4580ebc35610211f028848ba7fc34

HTTP Headers

GET /MetaMask_files/metamask-fox.svg HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://restore-your-vault.free.nf/?i=2
Cookie: __test=e52d0ba49e66189a8c0e8df58ef39709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 16:47:50 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 23 Apr 2024 18:37:49 GMT
ETag: W/"c9f-616c7d9d99410"
Cache-Control: max-age=0
Expires: Wed, 24 Apr 2024 16:47:50 GMT
Content-Encoding: br

restore-your-vault.free.nf/MetaMask_files/metamask-logo-horizontal.svg

185.27.134.227

1.6 kB

URL
restore-your-vault.free.nf/MetaMask_files/metamask-logo-horizontal.svg
IP
185.27.134.227:0
ASN
#34119 Wildcard UK Limited

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1615 bytes)
Hash
0c760855136dbd1c863e65b85cfa0dd7
ba62d751be08247f8671b56a94986b3561af2366
a2779239ae69999a04e2e98ee5be8a282a21b41b7b4c6ce00c881ecc82fcaa50

HTTP Headers

GET /MetaMask_files/metamask-logo-horizontal.svg HTTP/1.1
Host: restore-your-vault.free.nf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://restore-your-vault.free.nf/?i=2
Cookie: __test=e52d0ba49e66189a8c0e8df58ef39709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 16:47:50 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 23 Apr 2024 18:37:49 GMT
ETag: W/"139c-616c7d9dbc690"
Cache-Control: max-age=0
Expires: Wed, 24 Apr 2024 16:47:50 GMT
Content-Encoding: br

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers