{"report_id":"41510706-29b1-4500-816d-fc23e1b809eb","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-08-04T01:58:03Z","url":{"schema":"http","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":0,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"title":"MetaMask — Security Verification","dom":{"size":12116,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"06bc2406c1d71e898d60ea153129781e","sha1":"7454e95edf86935e82a5899626a7f4eeab6e8020","sha256":"7e9b131c621d36a45af180078d430006e855187971cf6c643022789646b4110c","sha512":"59e430365e83dda1ad830c5732ec6ccc7e413ff60ef4f080ac7e522ab2ac9b0ab5b9b38f1960fa13cb019d32374307152fb366514f8f21e5b6680801aeeb32af","ssdeep":"192:51tYEKalIWUKXxywQ2pLckMKZn2a5tjBdKM3OhUPGMaPpgaJCl4nCkQ4eqp2WSXO:avKIW3cU3Kwe3hCxRBc","tlshash":"e142b56266a71076741396a17feb6b5b3354a003c10aca397fdc125ccf8a6e8d96374c","dom_hash":"domhashf56391396d9669597b6157ce9d2f0a21","first_seen":"2026-08-04T01:50:53.578009Z","last_seen":"2026-08-04T01:58:04.639107Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":0,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T01:58:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects file containing Telegram Bot API","trigger":"metamask-security.co/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2316,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metamask-security.co","ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-04T01:50:49.215381Z","last_seen":"2026-08-04T01:50:49.215381Z","alert_count":1,"request_count":2,"received_data":64534,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-08-03T17:05:44.081873Z","alert_count":0,"request_count":1,"received_data":4548,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"md5":"7a7a6db0b23b52dfad7b87449e3d2e88","sha1":"b15fecda6132f580226d4ed73baac9800c2a000c","sha256":"25e67d3e94009270d6659a51721d1b088d5e9f6bf856f3ddd5d1da29b70e3420","sha512":"c4db16f1217b962dc16364d8f076a24b88732c94f7d5a97ad9df41a725a3c56c17afcebf1891914543de77cc6e44ff12db3f862fc86b5a4cb58ea771153ac65f","size":4525,"token":"8912692285:AAFD70lACefQ4appoenh0xUz4j-YG_PqHIM","is_revoked":false,"bot":{"token":"8912692285:AAFD70lACefQ4appoenh0xUz4j-YG_PqHIM","user_id":"8912692285","username":"lirikayutmayakdaneyapak_bot","first_name":"Lirikayutmayakdaneyapak","last_name":"","chat":{"chat_id":"8317481014","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2dcee4d531415b4f23a1ddbda2ce88e5","sha1":"36dcf2ad0154397f6c401acab6057708daad4f39","sha256":"b0698e9f82271e69b25859f123616a378231a38c983a167a933420889e095e0b","sha512":"49f19120aefded041ebb54b83778f140850aaffa6b69c733b25fcb721c101bc19daa4c3ba53ba210d34be9342d86194d32eec621ff42502d57ea883fb245dfb7","ssdeep":"1536:U8Hk7S9JbrgRv8ZMqIFvI/Ey+81yK1YPWPubvbd:7KSry2MqIO/Eb8wwYP8aR","tlshash":"5e53c0f05e11a587a57f4d4ab49b7e4e03640363acaf20f9d5776f4006afb4a48a7c88","size":64039,"data":"","first_seen":"2026-08-04T01:50:53.589938Z","last_seen":"2026-08-04T01:58:04.64387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"b1715833ba93c4393805ea3699bee544","sha1":"c75447b548e0f87ab4302a16910187b3e4dcad5b","sha256":"e443a4d661a95942ecef048944f3b2a62a58d92b04c31341ce45715b97ad202c","sha512":"d9aab6ad3a575c4ace302f30a084361d8d8edfc43b0f99c260b05ea2773fc61eeb306628905ec8b45660f3e2ff145c3be70f76a18d279b2c0be0ac9734e56f2e","ssdeep":"","tlshash":"41f0e2a438c2f163a6fd1583bc092d8d313594f28a8862039fadb48c148c603c6449a8","size":461,"data":"","first_seen":"2025-07-26T22:19:45.160401Z","last_seen":"2026-08-10T20:32:07.359502Z","times_seen":2183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"1c2b4f52ff968cd4b7b87da82a50e7cf","sha1":"7388c0e56f294b4abdfb4c08a9a6ea6f59fa3658","sha256":"b5b1311057f3c81d61cbc5822bc19fe37335ca9203c710bb14eb832cd0bc4eab","sha512":"0d8ea445ca03c51597894079107af13d4999392285b12c236bc53b2403f390a70317e59f455112ff6fc2422fece390957aa161dd9887a575e1fef6b6a706b2db","ssdeep":"","tlshash":"26e07dfa5198710708d3929c25aa34cd558176fa48480c449ec45c211ccb5dc79ea46e","size":292,"data":"","first_seen":"2026-08-04T01:58:04.645131Z","last_seen":"2026-08-04T01:58:04.645131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"d0d936a3e56d5f50dcef38a5e5046284","sha1":"1fb78f846965b288696b9f3bd933a91c3c4f7ef3","sha256":"cd1379b857d0019f7ac736e59872484cdd6cda00d13fbe01e40217d7fbed0971","sha512":"4dc583bbb3f793c64693558172a449a1011ecb8723e4626cf2d7d32d09bd2969913a25d13b9493d3550f295504e24273d67556457e43d8949c52368e4937433f","ssdeep":"","tlshash":"2d9002a9944c1310442619d08056185d8970836113118840008bb9613991034051946c","size":49,"data":"","first_seen":"2025-07-26T22:19:45.151938Z","last_seen":"2026-08-10T20:32:07.358193Z","times_seen":2167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"7dc018725f3e743a6b58fe209c46a563","sha1":"82069f1a245bfc03de05a3c7e40e3daeb052f94e","sha256":"6893b63de7b885eeca19eca5fda276a5fd99713d74d886c767460eb99b996237","sha512":"1447df158c87ebdf7d2b8e26a738abddbc400303f0fc9f43250b11734866f3919be59429228ed77a27b6556e2466c9a8068b41d86fb8d1717b8856951b1b366c","ssdeep":"1536:+8Hk7S9JbrgRv8ZMqIFv4HEy+81yK1YPWPubvl3:BKSry2MqIOHEb8wwYP8aB","tlshash":"7e53d1f05e11b597b9bf494ab81b7e4e03640263bc6f20d9d57b2f0006af74a5d9bc88","size":63658,"data":"","first_seen":"2026-08-04T01:50:53.598115Z","last_seen":"2026-08-04T01:58:04.647486Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"fae289f346b17494d1f7974148a2b3b8","sha1":"6ba1f95910f831b79fe088608359d97804423607","sha256":"5ccba7eef5fc9c813066b463d337db933274a4c13007023e1f074c37e920d410","sha512":"74bf59474c06c3e6801c5d17b87d9eecbf090167804a4be6105ba64f5a4a0b010aebe5842a393d0cf1afc10fe6016b05e44ec2679f925b6891e45aa8a7801daa","ssdeep":"","tlshash":"352132b70441757afe7b3e1b7a8e788b1aa7eb4471cbe6e5c35675285c22b4004e0278","size":1230,"data":"","first_seen":"2025-07-26T22:19:45.18074Z","last_seen":"2026-08-10T20:32:07.35997Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"01406ae879cd87801328734e5e2b1833","sha1":"57dc1dd6cd854b52d89a531de8d2bb97428a0c52","sha256":"0a39992741f55cc13624b6f5b5be380d07ba23cae33c8d88fb944fba89161aca","sha512":"232c752f0e0a0450214f218b96a011b96d51a80b2e5a0a09ce48213c2ad0b75bfd98f9e3000e0beeb2327c95b382442d9fd46f1092cbc95e4cd6a445b9a2f062","ssdeep":"768:+A/gaSyHyyZG57S99oibrs9Rp6CRv8jYHGS3qylaBIhrbjIy:+8Hk7S9JbrgRv8ZMqIFvp","tlshash":"64e2aff06d14a88b696e488ef57bbf8d139402736dab1499907b3e4106bf70a5c6fcc4","size":33751,"data":"","first_seen":"2026-08-04T01:50:53.593581Z","last_seen":"2026-08-04T01:58:04.64921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"a5758d2bc8833f1e9dca6a8c5aeaead0","sha1":"3967e0d20038a9ab67bf2e0cddf22ae87932dc48","sha256":"701110fee739fff5aa5b2629359cdb6620615584b8079e8eba24fc58f9687011","sha512":"3844f28325d07cc6ec9eaf64c7ec7e0cd809de640ec6118f4d70965b3c3d3a477cf7106f40f37756e2ffb47346e83edce009197df7e71f7d9ebfbed43f084266","ssdeep":"768:G2OEyU38GSyr+1YPzx4gp8PVgzKIZXvP1Cao/BqY:GJEy+81yK1YPWPubvc","tlshash":"08c2cf3ace63b60394bb57827c073986873c2247a83d34dd6eb84e1095c968a5b8757c","size":26983,"data":"","first_seen":"2025-07-26T22:19:45.20413Z","last_seen":"2026-08-10T20:32:07.354014Z","times_seen":2086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"dc255c5d392163ad8215ec8cafa0b025","sha1":"3eb1482fde700de5f958554bd69c16219bcd8fab","sha256":"b828a828f278b2c641030510f77865bafaef57e4bb4945825b307cdfd5e99d6f","sha512":"02074148991fc0ad87f5abfc8846d19d61018f426fe956b0c2a9e175260840740208fff2081a17cc3d44027d03fc0d205c68a2ad961a357dec301383b4e3c186","ssdeep":"384:2ecE1WVsgFkqvQSS/KkfwTvvFDXaDs51ynDpwK0UKDF527AZWFTw5R8:JcE1Dt/KCwt7ynGJlZ5qAZWFTw5R8","tlshash":"06b26ce26192e03187cf77a1923f1c17a2bf1990c50ce5fe92719a9865f21964ed0ac9","size":24273,"data":"","first_seen":"2025-07-26T22:19:45.197843Z","last_seen":"2026-08-10T20:32:07.354543Z","times_seen":2073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a7a6db0b23b52dfad7b87449e3d2e88","sha1":"b15fecda6132f580226d4ed73baac9800c2a000c","sha256":"25e67d3e94009270d6659a51721d1b088d5e9f6bf856f3ddd5d1da29b70e3420","sha512":"c4db16f1217b962dc16364d8f076a24b88732c94f7d5a97ad9df41a725a3c56c17afcebf1891914543de77cc6e44ff12db3f862fc86b5a4cb58ea771153ac65f","ssdeep":"96:ZX7vDtPN/kFoUNdKGSSz5+qVCb5wRs+aDUPkLIyxtpz1iNb1iEa:ZlJkiUPKQzY5b+RsXDekkm5iHiv","tlshash":"30918165fe6658300aebd1fea987a10ef0239513fc25e493388c45552fa9fa450bf7c8","size":4525,"data":"","first_seen":"2026-08-04T01:50:53.603884Z","last_seen":"2026-08-04T01:58:04.651468Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects file containing Telegram Bot API","trigger":"metamask-security.co/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.412Z","timestamp":1785808656412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-security.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Aug 2026 01:57:36 GMT\r\ndate: Tue, 04 Aug 2026 01:57:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-08-10T22:15:08.21332Z","times_seen":15596,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.420Z","timestamp":1785808656420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/3/36/MetaMask_Fox.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-security.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 03:17:28 GMT\r\nserver: ATS/9.2.13\r\netag: W/d206794f79a670efe19d23659fe7ccec\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 5kkedovp14ls5j1hfds1y3qwdy3f1fe\r\nlast-modified: Wed, 31 Aug 2022 12:03:40 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\ncontent-encoding: gzip\r\nage: 81608\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/393\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\nset-cookie: WMF-Uniq=owwgTlLyyk3gWX5bd1VAMwOyAAAAAFvdfgFv5ldiR3kDcEFOIr5Wd6Yj49rqbvdt;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Wed, 04 Aug 2027 00:00:00 GMT\r\ncontent-length: 1031\r\nx-request-id: 96210302-333f-4261-9070-2d0bcc170813\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2479,"size_decoded":3100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d206794f79a670efe19d23659fe7ccec","sha1":"2fb1e4b2911bff3c633524bd9cb83d1953c32ffa","sha256":"cd6a85f5cdc27987405eddb33f8c620f9a3701d0925704070e6b013ddd80255e","sha512":"a37273a3e6fdc727b97c7e6a9171788e9c17280c608ff749aa2eaa5849a1acbc45b9e71b303ecb820cfc628a5f846d034b992100a9b32f85ecbb28ed6b6beed5","ssdeep":"","tlshash":"be51ab59a3694d7efd634b68d33d36b2206211ef2a50b74c897704b072249cca2bfde0","first_seen":"2023-07-08T22:23:37Z","last_seen":"2026-08-09T21:49:36.523313Z","times_seen":416,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":71,"dns":0,"connect":18,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.582Z","timestamp":1785808656582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask-security.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478040\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T22:53:23.888207Z","times_seen":256302,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":19,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.586Z","timestamp":1785808656586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask-security.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478040\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T22:53:23.888207Z","times_seen":256302,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":28,"dns":1,"connect":0,"send":0,"wait":37,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.591Z","timestamp":1785808656591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask-security.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478040\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T22:53:23.888207Z","times_seen":256302,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":30,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.593Z","timestamp":1785808656593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamask-security.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478040\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T22:53:23.888207Z","times_seen":256302,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":23,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/favicon.ico","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-security.co/","date":"2026-08-04T01:57:36.717Z","timestamp":1785808656717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask-security.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 15:21:22 GMT","end":"Sun, 01 Nov 2026 15:21:21 GMT"},"fingerprint":{"sha1":"5D:50:FC:09:25:38:53:83:91:68:14:EF:EA:58:69:9D:EA:02:51:27","sha256":"7E:D5:22:FE:19:5B:7A:0E:3F:CD:99:10:A0:0B:C4:79:D4:C0:37:96:4C:A6:BC:8B:0B:5C:AD:80:8D:ED:FC:EC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamask-security.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-security.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: Caddy\r\ndate: Tue, 04 Aug 2026 01:57:36 GMT\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":86,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-security.co/","fqdn":"metamask-security.co","domain":"metamask-security.co","tld":"co"},"ip":{"addr":"89.34.219.119","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T01:57:35.754Z","timestamp":1785808655754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask-security.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 15:21:22 GMT","end":"Sun, 01 Nov 2026 15:21:21 GMT"},"fingerprint":{"sha1":"5D:50:FC:09:25:38:53:83:91:68:14:EF:EA:58:69:9D:EA:02:51:27","sha256":"7E:D5:22:FE:19:5B:7A:0E:3F:CD:99:10:A0:0B:C4:79:D4:C0:37:96:4C:A6:BC:8B:0B:5C:AD:80:8D:ED:FC:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask-security.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\netag: \"tj7bwl1diq\"\r\nlast-modified: Mon, 03 Aug 2026 16:17:09 GMT\r\nserver: Caddy\r\ncontent-length: 64178\r\ndate: Tue, 04 Aug 2026 01:57:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":64178,"size_decoded":64448,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"80c0f9a5a75b962c39f78df175220f70","sha1":"951dc9f94da8b977a393c8cdf3053891401cfb8d","sha256":"6e7320e1c5a7136eb82eb57f27fb3ae970e387e1646ff0653217d12de0ad7a61","sha512":"edc03affca07a5a3a709eef1fdf97ae1b6c0267e4cc0d066ff07b3cf17d0bf2eceacd07ff5819273ee5de1e651c730c19a19ab35c3a3595c19baeb0d46e1a64a","ssdeep":"1536:v8Hk7S9JbrgRv8ZMqIFvI/Ey+81yK1YPWPubvb/:EKSry2MqIO/Eb8wwYP8ab","tlshash":"cf53c0f05e11a587657f4d4ab49b7e4e03640363acaf20f9d5776f4006afb4a48a7c88","first_seen":"2026-08-04T01:50:53.584642Z","last_seen":"2026-08-04T01:58:04.643155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":4,"connect":28,"send":0,"wait":28,"receive":56,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}}]}