302 Found 0 B URL User Request GET HTTP/1.1 IP
Certificate IssuerLet's Encrypt
Subjectiimsrv9.unl.edu
FingerprintA3:8C:2E:6F:E6:9C:ED:1C:E4:55:43:61:19:E2:3B:14:7B:AD:26:33
ValidityWed, 11 Oct 2023 03:13:27 GMT - Tue, 09 Jan 2024 03:13:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
OpenPhish phishing Crypto/Wallet
GET /mymeta HTTP/1.1
Host: go.unl.edu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 09 Nov 2023 12:21:53 GMT
Server: Apache
Set-Cookie: gourl=af4d51d4ac82cc266f22e7f787b50f5b; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
200 OK 21 kB URL User Request GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
IP
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1843)
Hash d2f1d3befb08e3a10aae2dacc2e3ba89
4ff6d5bcf23a9c709ac5d3b777cd21b6bba4a05b
4db8ad6681e53db9aeba14f45a93366eca5e374398c3d47f03f5fd15eac1a27e
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
GET /ams/metajs/meta/metamask.php HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/normalize.css
200 OK 7.8 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/normalize.css
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Hash 4951cc88307c632cf285d3ba988ab283
031d58bc40b4242b27d8171a01bb0ecb5f9d22d7
5c4a6fe64efc5d07833c35af9630d0f9b3d4d09a63f9358e441374e9102c9e81
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/normalize.css HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 7772
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webflow.css
200 OK 39 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webflow.css
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (2587)
Hash 13fc860cb6eddbf469d986e1a6b6480b
6bb85ecdc704734f59d4984d202f75b02048a58d
ba6716203b5a6f128eab828aef79dcdfeab87ec1ee605392e4a9d6955de30842
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/webflow.css HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:48 GMT
Accept-Ranges: bytes
Content-Length: 39109
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/plx.chock.js
200 OK 3.4 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/plx.chock.js
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Hash 5acfeead7d13511cdef767305b87e3f8
ec5337e62f1e64d3aaba3bf41a41b5f876964922
b9417c5359a2259bb564852a1ebd2b743b79ac06efdee42dc53456f8445ad246
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/plx.chock.js HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 3393
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/css.html
200 OK 684 B URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/css.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Hash 147429fb2ddc3861e2ae0f473f17d78e
f2bdce63e15b9f3b90c8c3b153deb75b28eb69e3
25d501d70fcb9835f935fd47e045502700dc5f862cd7e763a49bbc7316396f2a
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/css.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 684
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webfont.js.download
200 OK 13 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webfont.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (2134)
Hash 7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/webfont.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:48 GMT
Accept-Ranges: bytes
Content-Length: 13188
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/tag.js.download
200 OK 22 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/tag.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (21652), with no line terminators
Hash e2ee8a9cd68c3d310a4c62fdb4b5c93a
67eb5f9547f1d9de0a8b143c3b50511c26281399
145d14bb73e5b03cc73062c2a78c392125b891c62b1cc9d542e5adba762f04e7
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/tag.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 21652
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/analytics.js.download
200 OK 50 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/analytics.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (1325)
Hash d40531c5e99a6f84e42535859476fe35
a901817d77b2fe5259c298c91bc65c54d7f8a1a9
a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/analytics.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 50205
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/enterprise.js.download
200 OK 1.0 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/enterprise.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (1008), with no line terminators
Hash d07e7630bc23cbdd7520d0a4f086c922
b50685923a96d55109959fdf21f369d902971b2a
15c0f679abecff8fba48dbe673343f3e0f2a07c439d3f631722fccd2af2e1df2
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/enterprise.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 1008
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/jsonp
200 OK 278 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/jsonp
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 278 kB (278382 bytes)
Hash 7efac8c0fa8e30db7a423500ef59abab
be73717f776f24dd31498c27a1b02b784570d5bb
102411780270584690575675e14e574ef8a16cf6fdd5700d5682e68a8d2cc00d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/jsonp HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:42 GMT
Accept-Ranges: bytes
Content-Length: 278382
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webflow.js.download
200 OK 601 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/webflow.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (50020)
Size 601 kB (601104 bytes)
Hash 9758f7e3aa0c79ea7a3cadb16d10087b
07f3c4e552e28eba6172f53d6dcf981a55f42031
0bb0c326dfc33136ad88e7454f06d22398a75f57f5eef79a30b218c171136f0d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/webflow.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:48 GMT
Accept-Ranges: bytes
Content-Length: 601104
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/loader.js
200 OK 333 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/loader.js
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Size 333 kB (333171 bytes)
Hash a7bad8ca8537d205efe096529a6fc224
f286d365468bb0197b57ba7df9d47f2731e6ebee
ee7c93d07d6b7c0f0e4e6eb15559487f0271b8986eda4da97ddb94337e2771fd
GET /ams/metajs/meta/meta/loader.js HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 28 Apr 2023 23:36:40 GMT
Accept-Ranges: bytes
Content-Length: 333171
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/storage.secure.min.js.download
200 OK 39 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/storage.secure.min.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (38562), with no line terminators
Hash 3386ec5559f1ba569cf0ab6acab436cc
e98e11d37c5172ee128a85f68447efb3cb0e853c
996ab3c1e26cb00ec7d3d29650e784755ba46f33613563b7173b0dab03fa3d73
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/storage.secure.min.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 38562
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/metamask-staging-2.webflow.css
200 OK 142 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/metamask-staging-2.webflow.css
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Size 142 kB (142037 bytes)
Hash ca5aa545c147b6b07b3e97f3a882a861
dd396bc50bfebe1eae5412520dc3cbc27494fe30
cc523001fecac90d44b93023d9cd7e2d729632d09013e22c4c61b86d94e5ccd0
GET /ams/metajs/meta/meta/metamask-staging-2.webflow.css HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Sat, 29 Apr 2023 13:39:46 GMT
Accept-Ranges: bytes
Content-Length: 142037
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/original.jpg
200 OK 16 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/original.jpg
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2, software=LTkyNjU2MDU1MTo1ODk5ODMwNDcwOkFBRzcyam], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 866x650, components 3\012- data
Hash 8e8d8f26ebea985d193b6b1efd485fc2
cb19997cbdba6fc6bba9af755ded699a31e28b1d
7fe12e6b985f0f680a47d4c80e6008083e3cd6219aefee3efa522d2ecd591c4a
GET /ams/metajs/meta/meta/original.jpg HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Sat, 29 Apr 2023 08:19:22 GMT
Accept-Ranges: bytes
Content-Length: 15985
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/asset/mm-logo.svg
200 OK 12 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/asset/mm-logo.svg
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001)
Hash 51bcea2625eb2c6e9268a7377a792c86
5eeb306e6584eed1747c36c11724f193711d430e
5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/asset/mm-logo.svg HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 10:29:46 GMT
Accept-Ranges: bytes
Content-Length: 12019
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/svg+xml
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/js
200 OK 92 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/js
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (1815)
Hash fb2ab9b8632250b0d7aa50c08150cfe1
73b3f266ac08c9fb07e1de1664fed384ccd5bc86
5d419e0ff614b331e4f8fed2ba7c1380b1f5983f98d820a6a0f7040b55f60b5b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/js HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:42 GMT
Accept-Ranges: bytes
Content-Length: 92325
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/jquery-3.5.1.min.dc5e7f18c8.js.download
200 OK 90 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/jquery-3.5.1.min.dc5e7f18c8.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/jquery-3.5.1.min.dc5e7f18c8.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:40 GMT
Accept-Ranges: bytes
Content-Length: 89476
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/css.html
200 OK 684 B URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/css.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
Hash 147429fb2ddc3861e2ae0f473f17d78e
f2bdce63e15b9f3b90c8c3b153deb75b28eb69e3
25d501d70fcb9835f935fd47e045502700dc5f862cd7e763a49bbc7316396f2a
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/css.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 684
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/Institutional-Illustration.png
200 OK 290 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/Institutional-Illustration.png
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type PNG image data, 876 x 1040, 8-bit/color RGBA, non-interlaced\012- data
Size 290 kB (289564 bytes)
Hash 85607339bb7e3cc70e1b7568ed4d29b2
7c6301d70e1ab599857be6e9795b94418cef6079
5bdf1ea203497adb942fa639a322195c744910ae8980d625d986ddead1f8ed37
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/Institutional-Illustration.png HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/metamask-staging-2.webflow.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:40 GMT
Accept-Ranges: bytes
Content-Length: 289564
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/EuclidCircularB-Regular-WebXL.woff2
200 OK 45 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/EuclidCircularB-Regular-WebXL.woff2
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data
Hash 2d75957df3bb3aa6ed84f6591b0d5a1a
906424e75625f63b0188471067065794d0348536
8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 45196
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/woff2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/EuclidCircularB-Bold-WebXL.woff2
200 OK 44 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/EuclidCircularB-Bold-WebXL.woff2
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data
Hash 9024d0bf73943172297c4628d0054e20
36c3795e7b297d06589e15ef59592683d9ed0974
88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 44544
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL GET HTTP/2 fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 09:20:07 GMT
expires: Wed, 06 Nov 2024 09:20:07 GMT
cache-control: public, max-age=31536000
age: 183708
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash 61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18
GET /s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 00:59:12 GMT
expires: Sat, 02 Nov 2024 00:59:12 GMT
cache-control: public, max-age=31536000
age: 559363
last-modified: Thu, 24 Aug 2023 21:10:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
200 OK 8.4 kB URL GET HTTP/2 fonts.gstatic.com/s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data
Hash 141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff
GET /s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 18:17:33 GMT
expires: Sat, 02 Nov 2024 18:17:33 GMT
cache-control: public, max-age=31536000
age: 497062
last-modified: Thu, 24 Aug 2023 20:56:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.prod.iefsu.me/script.js
404 Not Found 19 B URL GET HTTP/2 static.prod.iefsu.me/script.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerLet's Encrypt
Subjectstatic.prod.iefsu.me
Fingerprint9F:94:7A:F2:0A:70:E3:73:81:F4:44:11:36:32:77:2D:C4:D7:83:E3
ValidityTue, 24 Oct 2023 11:41:49 GMT - Mon, 22 Jan 2024 11:41:48 GMT
Hash 595e88012a6521aae3e12cbebe76eb9e
da3968197e7bf67aa45a77515b52ba2710c5fc34
b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
GET /script.js HTTP/1.1
Host: static.prod.iefsu.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
content-length: 19
date: Thu, 09 Nov 2023 12:21:55 GMT
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/v2.js.download
200 OK 579 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/v2.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 579 kB (578833 bytes)
Hash d3b2366c9977c975fc6abdc6a119c361
ed6031ba0b0efe5b77acd0382f8d647f2cc88018
7f82030e7f8b2956fcb539a7cf3f1d80907d28d02c2696ac0560daf3cfafaa25
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/v2.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:54 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 578833
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource.html
200 OK 56 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32691)
Hash de4ff6118374a4bdddaeafc4da59b95e
22c2418e29e43fead20844c0f7009372607acb0b
724ea951d695f615e5c02d58973836560baef3341aa9eddc05824f82809e7834
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/saved_resource.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 55538
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource(1).html
200 OK 504 B URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource(1).html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 938be7d50aa827110de3ba6d24f24ceb
499a6b9239bbf79c2363a2ecf3cc405a957b24ec
58092d87121c0af28a0ae8ad3e9afcfb4c50156ca369a9a2dfafc8d516a25d5c
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/saved_resource(1).html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 504
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html
accdn.lpsnmedia.net/api/account/88982875/configuration/setting/accountproperties/?cb=lpCb3179x90611
200 OK 44 kB URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/setting/accountproperties/?cb=lpCb3179x90611
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3136e685cdb4af654dee0d0c93162a0a
4834c54d6cbbfa3ea241198ddaf720938816f687
861553324a7776c319fc302fd83f8972d2a2c0500ab80c1346952dfd559c1412
GET /api/account/88982875/configuration/setting/accountproperties/?cb=lpCb3179x90611 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 12:21:55 GMT
content-type: application/javascript
vary: Accept
expires: Thu, 09 Nov 2023 12:22:18 GMT
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
200 OK 12 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3186)
Hash ab544024d3cf8ee17b4995a04711bc92
da849c1c8b08864d499153a059e5d429b8df19ce
b9d7893f4e6f83b6dca5ec8e27e47e382f4ace81907591ab102345bef9d3bb5f
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/bframe.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 11783
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/js.hsforms.net/forms/v2.js
404 Not Found 10 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/js.hsforms.net/forms/v2.js
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash d80531d7677e50c2a8d8edec804b1276
76a23c86fc42f29f47c66163e44579a70f0f7852
91bb8e638dc1b11137e4b441ac124b65b71cb84fca1d5ca1f0e10dd2937767c4
GET /ams/js.hsforms.net/forms/v2.js HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
accdn.lpsnmedia.net/api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
200 OK 2.8 kB URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 66be82199a645d5f87a8cef1bddf37f0
b0eee9ba40a2e637f9173a286203d19a828a2ed6
3e7c1f2395acc2dccaf98cbf43225e4995d7835c68486aa2fe987f2c68fa84d2
GET /api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 12:21:55 GMT
content-type: application/javascript
vary: Accept
expires: Thu, 09 Nov 2023 12:22:19 GMT
x-envoy-upstream-service-time: 21
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/styles__ltr.css
200 OK 52 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/styles__ltr.css
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (52368), with no line terminators
Hash 97c3d49b83dc004fcda822b1853b787b
a82fcfbd6b1cf4dd00f4a63d47b9119a69b40147
509bf9e83d3ca5add614196c02c8e0ce59731d3d1a10552c944b74d86019d866
GET /ams/metajs/meta/meta/styles__ltr.css HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 52368
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&env=prod&isCrossDomain=true
200 OK 14 kB URL GET HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&env=prod&isCrossDomain=true
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32207)
Hash e57f19d47b3b07b577d844ae827ea4b3
7fab7227b3a1fb72d016a40685952c4483909eb8
59f4843277d9aca1200c779c52318aadb380021a0051a6644b75274acb7fe158
GET /le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPoRHZ5tZxiWWvsFsk7r92-N4ISWhlQD5j3SLhPmzvAvHFz2Ft2qTYR9EqFdWPciEx3jjdREsfLuj654Mi9ANEb5TxKL1Kze
x-goog-generation: 1686995890733494
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 39478
x-goog-hash: crc32c=7aa2PA==, md5=5X8Z1Hs7B7V32ESugn6ksw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
server: UploadServer
content-encoding: br
date: Thu, 09 Nov 2023 11:41:17 GMT
last-modified: Sat, 17 Jun 2023 09:58:10 GMT
etag: W/"e57f19d47b3b07b577d844ae827ea4b3"
content-type: text/html
vary: Accept-Encoding
content-length: 13689
age: 2438
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metamask.io/images/webclip.png
404 Not Found 10 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metamask.io/images/webclip.png
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash def119b74b51925b4e9737d647e84f6f
84e2953ee00de9e4fad55252ea725d7120310513
d838947c7e388686eecdbecf48145aa18adf8bfe12f4154f7299245085f9b9a5
GET /ams/metamask.io/images/webclip.png HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/metamask.io/images/favicon.png
404 Not Found 10 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metamask.io/images/favicon.png
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash f4458c3d24778d6c70ab1f599ea5235e
f82285fd24540a4f3af0640f6044d0e85aa4edfd
ef5e120a710fd0c42275e78c1e6bf4649143c5be2aa84b6ff0ef49e57685b4bf
GET /ams/metamask.io/images/favicon.png HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&force=1&env=prod&isCrossDomain=true
200 OK 13 kB URL GET HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&force=1&env=prod&isCrossDomain=true
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (38562), with no line terminators
Hash 3386ec5559f1ba569cf0ab6acab436cc
e98e11d37c5172ee128a85f68447efb3cb0e853c
996ab3c1e26cb00ec7d3d29650e784755ba46f33613563b7173b0dab03fa3d73
GET /le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&force=1&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPrl3rtyUch9swC9poUsi3tpWh4OOpqvNzsScxU9O6npuXOi-KHQcuhP3lE4l-B0t410GObM-YJZStBITc5fe_CW8w
x-goog-generation: 1686995890633718
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 38562
x-goog-hash: crc32c=O9g67g==, md5=M4bsVVnxulac8KtqyrQ2zA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
server: UploadServer
content-encoding: br
date: Thu, 09 Nov 2023 11:41:17 GMT
last-modified: Sat, 17 Jun 2023 09:58:10 GMT
etag: W/"3386ec5559f1ba569cf0ab6acab436cc"
content-type: application/javascript
vary: Accept-Encoding
content-length: 13325
age: 2438
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/styles__ltr.css
200 OK 52 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/styles__ltr.css
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (52368), with no line terminators
Hash 97c3d49b83dc004fcda822b1853b787b
a82fcfbd6b1cf4dd00f4a63d47b9119a69b40147
509bf9e83d3ca5add614196c02c8e0ce59731d3d1a10552c944b74d86019d866
GET /ams/metajs/meta/meta/styles__ltr.css HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:46 GMT
Accept-Ranges: bytes
Content-Length: 52368
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/css
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
404 Not Found 1.6 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Thu, 09 Nov 2023 12:21:56 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/recaptcha__nl.js.download
200 OK 354 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/recaptcha__nl.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (820)
Size 354 kB (353655 bytes)
Hash e735084e8ffed1ad8d89df08d98d4d23
6cdab8dac12030c8bc980ec129affecc626285c3
6cde5be2d724e53c8c4a97041365d3075e3af63ec08e1712b2f831b6e2bd357b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/recaptcha__nl.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 353655
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://metasmask-update.37-143-8-66.cprapid.com
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/recaptcha__nl.js.download
200 OK 354 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/recaptcha__nl.js.download
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (820)
Size 354 kB (353655 bytes)
Hash e735084e8ffed1ad8d89df08d98d4d23
6cdab8dac12030c8bc980ec129affecc626285c3
6cde5be2d724e53c8c4a97041365d3075e3af63ec08e1712b2f831b6e2bd357b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/recaptcha__nl.js.download HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 353655
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/javascript
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource(2).html
200 OK 504 B URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource(2).html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash be8f11582f8b9d35f9b9476b810c0468
59600ce9d68f20be69bbaead09ac058abf650dd2
1898ec2fd073040a6d445e0a662e7fdbccbd59946a629b82c2db1e202665f46d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/saved_resource(2).html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
Cookie: _ga=GA1.2.128782550.1699532515; _gid=GA1.2.493297679.1699532515; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:56 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:44 GMT
Accept-Ranges: bytes
Content-Length: 504
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://js.hsforms.net
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
200 OK 36 kB URL GET HTTP/2 www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF5:CC:DA:B5:BA:1E:14:14:44:CC:27:90:92:CC:60:1F:5F:08:AF:77
ValidityMon, 16 Oct 2023 08:10:46 GMT - Mon, 08 Jan 2024 08:10:45 GMT
File type gzip compressed data\012- data
Hash a62bc6cd0acea48bc4f7b60e1ace603c
f96f4ea7e94081eb3d3d855a5794064e90d71150
52fde32b5d70fa062627597efcb00cc1319a70a7365cd01ec55e43820bbe1106
GET /recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 12:21:56 GMT
date: Thu, 09 Nov 2023 12:21:56 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/refresh_2x.png
200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 10:36:30 GMT
expires: Sat, 11 Nov 2023 10:36:30 GMT
cache-control: public, max-age=604800
age: 438326
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 00:56:30 GMT
expires: Sat, 11 Nov 2023 00:56:30 GMT
cache-control: public, max-age=604800
age: 473126
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:25 GMT
expires: Thu, 07 Nov 2024 02:48:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/css
vary: Accept-Encoding
age: 120811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:25 GMT
expires: Thu, 07 Nov 2024 02:48:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/css
vary: Accept-Encoding
age: 120811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 16:00:01 GMT
expires: Sun, 03 Nov 2024 16:00:01 GMT
cache-control: public, max-age=31536000
age: 418915
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
200 OK 35 B URL GET HTTP/3 perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067 HTTP/1.1
Host: perf.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 Nov 2023 12:21:56 GMT
content-type: image/gif
content-length: 35
x-trace: 2B27689DD721807E754F70092B7DE8277D3E61832F000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin, Accept-Encoding
access-control-allow-credentials: false
x-content-type-options: nosniff
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
x-envoy-upstream-service-time: 2
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-fd659ccfb-hdgrc
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 2ac163f1-14a6-4314-8707-536cf3717e7b
x-request-id: 2ac163f1-14a6-4314-8707-536cf3717e7b
last-modified: Thu, 09 Nov 2023 12:21:56 GMT
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 823604b3fa8756ba-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 23:15:14 GMT
expires: Wed, 06 Nov 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 133602
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 06:25:40 GMT
expires: Sat, 11 Nov 2023 06:25:40 GMT
cache-control: public, max-age=604800
age: 453376
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr
200 OK 16 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type gzip compressed data\012- data
Hash 789abc2c259916942ab59eabcbe63285
d708cc1eb32b65faef82fae1697e32d20a4a6b86
1e950d669611ec16417f1feafcb195cb519915540d0942cad606cee22a7228f5
GET /recaptcha/enterprise/webworker.js?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 12:21:56 GMT
date: Thu, 09 Nov 2023 12:21:56 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 23:15:14 GMT
expires: Wed, 06 Nov 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 133603
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 06:25:40 GMT
expires: Sat, 11 Nov 2023 06:25:40 GMT
cache-control: public, max-age=604800
age: 453377
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120815
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:25 GMT
expires: Thu, 07 Nov 2024 02:48:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/css
vary: Accept-Encoding
age: 120812
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (537)
Size 191 kB (191376 bytes)
Hash 0de5995e9ac19853eeffb8bbe74e6a7d
719e6fbcd0b38df859a6f7a8c51a820d7bf5970d
c7f150e7d0ed3cf657e531221f2640209e6daebed0fbaa6ab7e430ce8eb56a37
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:22 GMT
expires: Thu, 07 Nov 2024 02:48:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120815
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 02:48:25 GMT
expires: Thu, 07 Nov 2024 02:48:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 02:02:02 GMT
content-type: text/css
vary: Accept-Encoding
age: 120812
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
200 OK 192 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (537)
Size 192 kB (192545 bytes)
Hash 0a37e7706808ecde540b73a85dd0fbae
928bff525ce0cb21a66efd574409777bf3702f0b
d6ffc823b416b7d4f94bb1486ca95e08e78118f57ea074394d2f098c378fd4f0
GET /recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 12:21:57 GMT
content-security-policy: script-src 'nonce-dNbpR3cC4hle2FRDGFOO-Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 16:00:01 GMT
expires: Sun, 03 Nov 2024 16:00:01 GMT
cache-control: public, max-age=31536000
age: 418916
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
200 OK 41 kB URL POST HTTP/3 www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type gzip compressed data\012- data
Hash c593d643c9ffe2dd90f5bc589a455068
02d8e0f74caa958e63eb0a2f6ebf8b3fec5e5752
ac94c4d5c0b283daff90c82dc7afca61553f024b9529e07cd8e46aeaa3b8f1bf
POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 7180
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Thu, 09 Nov 2023 12:21:57 GMT
expires: Thu, 09 Nov 2023 12:21:57 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AK-LSi98QJdvKHDfydqH7h1BcF-sZMb4viCpneKWGjsJOKq-pANoFFsMONvdOAJGeF7mJN7qVwdri00uKjKtpiY;Path=/recaptcha;Expires=Tue, 07-May-2024 12:21:57 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 23:15:14 GMT
expires: Wed, 06 Nov 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 133603
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 10:36:30 GMT
expires: Sat, 11 Nov 2023 10:36:30 GMT
cache-control: public, max-age=604800
age: 438328
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 00:56:30 GMT
expires: Sat, 11 Nov 2023 00:56:30 GMT
cache-control: public, max-age=604800
age: 473128
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 09:20:06 GMT
expires: Tue, 14 Nov 2023 09:20:06 GMT
cache-control: public, max-age=604800
age: 183712
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 09:20:06 GMT
expires: Tue, 14 Nov 2023 09:20:06 GMT
cache-control: public, max-age=604800
age: 183712
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Nov 2023 23:15:14 GMT
expires: Wed, 06 Nov 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 133604
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
200 OK 40 kB URL POST HTTP/3 www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type gzip compressed data\012- data
Hash d49b0cae74fc2968c6b5bd573c003aab
9640ad79fdbd9eee781293edaf06d28628ab63ee
42172f5091ad3ddb1ba1f1ae28f03885d4f24afb82925117dde50d4d7da51dde
POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 7270
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09AK-LSi98QJdvKHDfydqH7h1BcF-sZMb4viCpneKWGjsJOKq-pANoFFsMONvdOAJGeF7mJN7qVwdri00uKjKtpiY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Thu, 09 Nov 2023 12:21:58 GMT
expires: Thu, 09 Nov 2023 12:21:58 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AK-LSi9MnlgN-bK_GY-9mWb2E7myj4ORVib-dqKDqCzJfsVxSniSwwq_25ycdx6Fli_GlcnGzcwI-Mgyzw0qhWs;Path=/recaptcha;Expires=Tue, 07-May-2024 12:21:58 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 04:56:25 GMT
expires: Sun, 03 Nov 2024 04:56:25 GMT
cache-control: public, max-age=31536000
age: 458733
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/3sU2vDRVDmUU2E0Ro4VadvPr/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 10:36:30 GMT
expires: Sat, 11 Nov 2023 10:36:30 GMT
cache-control: public, max-age=604800
age: 438328
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/payload?p=06AFcWeA41zOdPvGCZNjE2o-Sl5BqzAJqWgAdhAqMlfiafTmjQYHRlUyhwlU-BsLLyIC1_WQmAX8LYvlkS-jM_AWmJUjpqMHM9TGLIE6_VzE7qvW2ABd03yx2qwwxvr8jIuBEdHGWahxrLOl2vFyUpp2je8YcUlbbXmx4y3ArkzVHUIWx0PovjwyI323OYkXKZFKVvHVuUDEwL&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
200 OK 30 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/payload?p=06AFcWeA41zOdPvGCZNjE2o-Sl5BqzAJqWgAdhAqMlfiafTmjQYHRlUyhwlU-BsLLyIC1_WQmAX8LYvlkS-jM_AWmJUjpqMHM9TGLIE6_VzE7qvW2ABd03yx2qwwxvr8jIuBEdHGWahxrLOl2vFyUpp2je8YcUlbbXmx4y3ArkzVHUIWx0PovjwyI323OYkXKZFKVvHVuUDEwL&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3\012- data
Hash 030df44afe06fee7fcbb0d69507cdd65
4994b3ad8b3d75a1aaeb066934e1b39d7ba4c5d6
d1b3866549bbb5860a95dfe241605ea68492c98c88f0596fb9ba27205dbb8d93
GET /recaptcha/enterprise/payload?p=06AFcWeA41zOdPvGCZNjE2o-Sl5BqzAJqWgAdhAqMlfiafTmjQYHRlUyhwlU-BsLLyIC1_WQmAX8LYvlkS-jM_AWmJUjpqMHM9TGLIE6_VzE7qvW2ABd03yx2qwwxvr8jIuBEdHGWahxrLOl2vFyUpp2je8YcUlbbXmx4y3ArkzVHUIWx0PovjwyI323OYkXKZFKVvHVuUDEwL&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09AK-LSi9MnlgN-bK_GY-9mWb2E7myj4ORVib-dqKDqCzJfsVxSniSwwq_25ycdx6Fli_GlcnGzcwI-Mgyzw0qhWs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
expires: Thu, 09 Nov 2023 12:21:58 GMT
date: Thu, 09 Nov 2023 12:21:58 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
200 OK 43 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/anchor.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (33133)
Hash a03e5a8ddfb42a8a60384d788266a807
f549963001ef8b92e0e04ff3890989d50b91dbf5
48e0975bfc5d24b4afb177af183ef6ac96c1645607059ab2df2bc1849f02f630
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/anchor.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:22:11 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 42550
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
200 OK 12 kB URL GET HTTP/1.1 metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/bframe.html
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuercPanel, Inc.
Subjectmetasmask-update.37-143-8-66.cprapid.com
Fingerprint88:90:7C:93:03:DD:30:E8:76:C6:68:C3:6C:A4:E2:3B:D4:62:68:45
ValidityWed, 08 Nov 2023 00:00:00 GMT - Tue, 06 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3186)
Hash ab544024d3cf8ee17b4995a04711bc92
da849c1c8b08864d499153a059e5d429b8df19ce
b9d7893f4e6f83b6dca5ec8e27e47e382f4ace81907591ab102345bef9d3bb5f
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /ams/metajs/meta/meta/bframe.html HTTP/1.1
Host: metasmask-update.37-143-8-66.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:22:11 GMT
Server: Apache
Last-Modified: Fri, 07 Jan 2022 15:26:38 GMT
Accept-Ranges: bytes
Content-Length: 11783
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
200 OK 60 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg
IP
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (51434)
Hash 3e444a2422ea161dc0d6dd1ef90f8e3a
c088c33481cb799ab1eb91028adabcab2ac3a038
dd48d8ab5324610e13c2321fa1decac4782dc92ca0e2d76522a7906c4de7e1c8
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4els3wb0m7lg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 12:21:56 GMT
content-security-policy: script-src 'nonce-KUMf4QKFwn5FUNgoKOXtkA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit
200 OK 1.0 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit
IP
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (1008), with no line terminators
Hash ca445e0df8314d77d3379a952f63c0d2
f54afdecc94ba50b0cfbb9c4575ec38c6ea220e5
65e4a80ef2db9200ad31b69f5a00d380699f5f9bb32b624ae930954f516cdd7e
GET /recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 09 Nov 2023 12:21:56 GMT
date: Thu, 09 Nov 2023 12:21:56 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb89038x55553
200 OK 113 B URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb89038x55553
IP
Requested by https://lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fmetasmask-update.37-143-8-66.cprapid.com&site=88982875&env=prod&isCrossDomain=true
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b5ba48081d2a49fea9003445256fec8f
6e8783513b4e89308abe7756c10f9b20b5628a31
686cba44d38fec205b8688ee4e845c803f2e2c451ca865496fb55d86dcc24914
GET /api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb89038x55553 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lpcdn.lpsnmedia.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 12:21:56 GMT
content-type: application/javascript
cache-control: no-store
x-envoy-upstream-service-time: 93
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: MISS
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/payload?p=06AFcWeA4M3JCFdyzpUfH4JBrJ8V_jJnd-KlRiKtRyET0Gx5uWhvnVy9R_XGrXeczVAol_f0D3KPtmEIBsNkDhNj5YDvN2WSwTI-XWlAlL-JlzQZF2xLLhkK2-mwsji-OIuXQiMuR6ZIohM6wQhPh-YgHcmsG8yrUh_wbfNJUvlSIAuzItHfM9U3jme-KGhigd4KMBbFAFwsBqK2p-Pf6YeeLzCcvzxu7F0Q&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
200 OK 30 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/payload?p=06AFcWeA4M3JCFdyzpUfH4JBrJ8V_jJnd-KlRiKtRyET0Gx5uWhvnVy9R_XGrXeczVAol_f0D3KPtmEIBsNkDhNj5YDvN2WSwTI-XWlAlL-JlzQZF2xLLhkK2-mwsji-OIuXQiMuR6ZIohM6wQhPh-YgHcmsG8yrUh_wbfNJUvlSIAuzItHfM9U3jme-KGhigd4KMBbFAFwsBqK2p-Pf6YeeLzCcvzxu7F0Q&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash cd5f42fa584b65a21c68312745a6f08a
da7b9de5933c1da432c1693475bcbe0b50c44f91
5b4aa90465a837750d2cbcc3d7d754c19dfe685dfd79c82835280e0740553273
GET /recaptcha/enterprise/payload?p=06AFcWeA4M3JCFdyzpUfH4JBrJ8V_jJnd-KlRiKtRyET0Gx5uWhvnVy9R_XGrXeczVAol_f0D3KPtmEIBsNkDhNj5YDvN2WSwTI-XWlAlL-JlzQZF2xLLhkK2-mwsji-OIuXQiMuR6ZIohM6wQhPh-YgHcmsG8yrUh_wbfNJUvlSIAuzItHfM9U3jme-KGhigd4KMBbFAFwsBqK2p-Pf6YeeLzCcvzxu7F0Q&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09AK-LSi98QJdvKHDfydqH7h1BcF-sZMb4viCpneKWGjsJOKq-pANoFFsMONvdOAJGeF7mJN7qVwdri00uKjKtpiY
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/jpeg
expires: Thu, 09 Nov 2023 12:21:58 GMT
date: Thu, 09 Nov 2023 12:21:58 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
200 OK 61 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52059)
Hash ea474c9670a3087383571348c8e5ba4c
b6ea2e2ba52763535820d4bfbfa5e50291ae49b7
0e09fc9baacdff62de55e26b1e9014674e2cb03c5c29dace58bad87a5c4db121
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhc21hc2stdXBkYXRlLjM3LTE0My04LTY2LmNwcmFwaWQuY29tOjQ0Mw..&hl=en&v=3sU2vDRVDmUU2E0Ro4VadvPr&size=invisible&badge=inline&cb=4bznmir2s12w HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Nov 2023 12:21:56 GMT
content-security-policy: script-src 'nonce-EFx7GGJ6Z42nNqEYy5kLGg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
200 OK 5.8 kB URL GET HTTP/1.1 forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (6544), with no line terminators
Hash 6e745d98d673ae2beb3e5426766d04ec
1ef4c709b413ac2d6fe12361785184224f0e8020
be1417569d86e3e6d6cc6b64bd7e9b37e32a05cdd140a5e8f18a7ca33e9a9a8c
GET /embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk= HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Nov 2023 12:21:55 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace: 2B66EBAE02C401B207E5F07699A813E35336A19002000000000000000000
X-Origin-Hublet: na1
Vary: origin
Content-Disposition: attachment; filename=no-rfd.txt
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: false
Access-Control-Expose-Headers: X-Origin-Hublet
Cache-Control: max-age=0, no-cache, no-store
X-Robots-Tag: none
x-envoy-upstream-service-time: 18
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-fd659ccfb-4d94j
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
X-HubSpot-Correlation-Id: ec283b65-7dda-4418-abbb-4d5ebb88423e
x-request-id: ec283b65-7dda-4418-abbb-4d5ebb88423e
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 823604aeebaf5688-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Changa+One:400,400italic
200 OK 800 B URL GET HTTP/3 fonts.googleapis.com/css?family=Changa+One:400,400italic
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type ASCII text, with very long lines (816), with no line terminators
Hash d649df21660305e95bf70d4282367324
4a3aeaf4830f03b873105998d8ceaa017bc0b65c
338d6967247111e7857d08db563973e8782b09601225fece0af3420e5cd2fa56
GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Nov 2023 12:21:55 GMT
date: Thu, 09 Nov 2023 12:21:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
js.hsforms.net/forms-next/shell-recaptcha
200 OK 852 B URL GET HTTP/2 js.hsforms.net/forms-next/shell-recaptcha
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/meta/saved_resource.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint16:1A:D5:A1:BC:62:B5:09:33:E2:A8:32:88:88:60:DE:BD:00:B5:F3
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (882), with no line terminators
Hash 440ce01c33f34fd2d411740a08afbefc
5430ee8be61e7637b762df165949e960bf4665c6
4b6998d625f78ce81d67272fc34ca2959491f21f8f858c80f69b0e405fef691f
GET /forms-next/shell-recaptcha HTTP/1.1
Host: js.hsforms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 Nov 2023 12:21:56 GMT
content-type: text/html; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Nov 2023 12:23:24 UTC
x-amz-server-side-encryption: AES256
x-amz-meta-ao: {}
x-amz-version-id: FKsyx2EbSAAYGu26pb_jSM8EaC1K.2Fv
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7c77abdf1c625c25627fe2a24e660a34.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: CQQ8tbwLf8vONMI374H6gMgGxMwJ0tzDdqeUwYheOXBXb6xZFSlMgw==
age: 740
cache-control: s-maxage=600, max-age=300
x-hs-target-asset: FormsNext/static-5.694/html/recaptcha.html
x-content-type-options: nosniff
access-control-allow-origin: *
x-hs-cache-status: MISS
x-envoy-upstream-service-time: 4
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-59f9889544-jmkhw
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: e43d7d6a-b4bf-432a-97bb-e9e277a375fd
x-request-id: e43d7d6a-b4bf-432a-97bb-e9e277a375fd
cache-tag: staticjsapp-FormsNext-web-prod,staticjsapp-prod
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jhT1HOMKZZlc5jRdxKL3m8KoO1hc2soSXeahwSSSpYQDuog12gJr2t2cWFn1c7DBKdQqCeuIG1C43gjCHukn%2FnbmKFHDL8mdETugji0g%2FjEVTagoHxvbbAFvkzy9uM2g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 823604b0a8895695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/icon?family=Material+Icons
200 OK 565 B URL GET HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
Requested by https://metasmask-update.37-143-8-66.cprapid.com/ams/metajs/meta/metamask.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type ASCII text, with very long lines (588), with no line terminators
Hash bdcf60bde5544e1017e1f2e60888a9c7
6fb24309b7ff90c1c99d19c0c7a127a16508840e
d701601406acfca6bfc0c58b411446e3e0e96c659f35c143355d3dd72c390952
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metasmask-update.37-143-8-66.cprapid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Nov 2023 12:21:54 GMT
date: Thu, 09 Nov 2023 12:21:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
129.93.168.161
104.17.207.249
37.143.8.66
178.249.97.99
0.0.0.0