Report - metamask.io.merge.pjbtecnologias.co.mz/secure.html

Report Overview

URL

metamask.io.merge.pjbtecnologias.co.mz/secure.html
IP

51.38.118.179

ASN

#16276 OVH SAS
Submitted

2023-04-16T05:57:44Z

Access

public
Tags

crypto phishing
urlquery detections

Phishing - Generic Crypto/Wallet

Detections

urlquery

23
Network Intrusion Detection

0
Threat Detection Systems

38

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m02.amazontrust.com (1)	unknown	2022-10-12 16:01:39	2023-04-15 21:50:01	340	1006	143.204.48.16
fonts.gstatic.com (3)	unknown	2014-09-09 02:40:21	2023-04-16 00:00:24	1492	147003	216.58.207.227
www.gstatic.com (1)	unknown	2016-07-26 11:37:06	2023-04-16 00:08:45	532	1963	216.58.207.227
cdn.ethers.io (1)	459220	2017-08-30 09:27:23	2023-04-15 08:47:51	430	304121	143.204.55.52
metamask.io.merge.pjbtecnologias.co.mz (22)	unknown	2023-02-08 20:33:43	2023-04-13 02:22:31	8732	746636	51.38.118.179
ocsp.pki.goog (4)	175	2018-07-01 08:43:07	2023-04-15 18:12:01	1332	2800	142.250.74.131
fonts.googleapis.com (2)	8877	2013-06-10 22:14:26	2023-04-15 22:30:33	831	2082	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-04-15	medium	metamask.io.merge.pjbtecnologias.co.mz/secure.html
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/
2023-04-14	medium	metamask.io.merge.pjbtecnologias.co.mz/

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/secure.html
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/plx.chock.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/webfont.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/css.html
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/tag.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/enterprise.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/analytics.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/storage.secure.min.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/bootstrap-tagsinput.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/script.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/jquery-3.5.1.min.dc5e7f18c8.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/webflow.js
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/mm-logo.svg
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Regular-WebXL.woff2
2023-04-16	medium	metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Bold-WebXL.woff2

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (34)

URL IP Response Size

metamask.io.merge.pjbtecnologias.co.mz/secure.html

51.38.118.179

200 OK

3256

URL User Request GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/secure.html
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text

Size

3256
Hash

84e184949729e38ae19a238cd0918bf8

383f7936d6417eaa1c77ac725be7dcf8d2d7b802

d3a2a10830d55e606c291c6a9554677535c7e597b1454ea3f3eb6d2b97df953a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /secure.html HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Last-Modified: Tue, 20 Sep 2022 00:00:40 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3256
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/normalize.css

51.38.118.179

200 OK

2633

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/normalize.css
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

2633
Hash

74b55c54efadbc58b06a6042cc858472

127ffb851c8bb77bf00de3280d0e078571704de7

435035717bcd1da635fd11e9d0d22c40d2753c48383b1728f66bfd1607bcd54a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /meta/normalize.css HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 16:30:38 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2633
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/plx.chock.js

51.38.118.179

200 OK

312

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/plx.chock.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

312
Hash

f8a281c232ca490b0fb6a69a0a69aa93

8586880ea6c9a49dd4b2b45ee6f7eff01c5c7683

4acac0377cad7da2cbf6e18c4e9096e95484429bf4589b472bbc276c43b6110e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/plx.chock.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:38 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 312
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/webfont.js

51.38.118.179

200 OK

5431

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/webfont.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (2134)

Size

5431
Hash

f2e75ef01e8ce9b37cec75250d84e8bf

76e367a654e7cdaa51872ab26a31eb96605b4544

4a40bdcd270c0a713cc75ff940ab738302bb466ad84bd39780d96dfb77bfedde

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/webfont.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 5431
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/css.html

51.38.118.179

200 OK

274

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/css.html
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

274
Hash

a0a15fba936f518c2c1c071b0089c64c

6f8526c13dda4943229b9535931f8a6fd169da3a

6e9864f7491582647d88fee2b9503d22fc8735f673bb9be1809437c11af8af96

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/css.html HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Last-Modified: Wed, 22 Dec 2021 16:30:22 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 274
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/tag.js

51.38.118.179

200 OK

7583

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/tag.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (21652), with no line terminators

Size

7583
Hash

030e152d0cbf5d9c345726676e20f490

d39cd836763535ada905adb47e4d028a80f51849

01cb61852e9ab6166e2651c568c84e93d2dd80a7296b26d2f0539e5dc614787f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/tag.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:44 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 7583
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

af8ca3b0d6868960418b8129d4385394

51c782b206470639c70105ba9272191bfb5c9e99

95f18b5544933bbe1bb0f5564f554ca9463c87cbc2042c53f62de9b4b68488c3

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Apr 2023 05:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

metamask.io.merge.pjbtecnologias.co.mz/meta/enterprise.js

51.38.118.179

200 OK

617

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/enterprise.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (1008), with no line terminators

Size

617
Hash

d81ef5cb351ba48ede3354fa5248ce44

9a08bcf54317bb24610116e0650b520b32dcb7e3

69e117e70a745175180e8c577cec146b059da38bfd77265a8544cfc78a51e32b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/enterprise.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:24 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 617
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/analytics.js

51.38.118.179

200 OK

20110

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/analytics.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (1325)

Size

20110
Hash

f6172b83fb5bcd8fadd246270f6e7948

910ba56b59eac08dd3461bbf81a19378028b2664

62559499e80252ed5f16b8d9972825db8479ad069a5f3e63a82c37a0d9d4ce91

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/analytics.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:22 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 20110
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/storage.secure.min.js

51.38.118.179

200 OK

13331

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/storage.secure.min.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (38562), with no line terminators

Size

13331
Hash

3d92102abedfdb24487dce53034d530b

98a4881577f81b625bc08bf33331295fd996df48

b6df362a0fb0fa4eb5c3e8724f44a5a483550e971d2ff3131c82efcfb7d262a2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/storage.secure.min.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:42 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 13331
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/bootstrap-tagsinput.js

51.38.118.179

200 OK

5491

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/bootstrap-tagsinput.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

5491
Hash

5b983ffbdbd303a37f5b153798286001

a4782d23a57b811c34547d75e27bbf0073093413

caa4acd6da83afa0cd99d45b91093277c3fbb93c37f0afa0fa7f9f48761d6919

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/bootstrap-tagsinput.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Nov 2015 09:26:42 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 5491
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/script.js

51.38.118.179

200 OK

681

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/script.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with CRLF line terminators

Size

681
Hash

134522a48e2972be59a3971575c17e30

ea1c1fac3da8f89c7091fb9ccc2617b2831dcda2

b620dc8d0b3f34b191934f466cb0793441e98a9705d8f3235d0f75582ecbdc4f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /script.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Tue, 20 Sep 2022 01:35:50 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 681
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/jquery-3.5.1.min.dc5e7f18c8.js

51.38.118.179

200 OK

30970

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/jquery-3.5.1.min.dc5e7f18c8.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (65451)

Size

30970
Hash

21ab05a6dc4822c20e4f8e617d59503e

0431002ed053581f86ceeca6589f3b3fc039d1ee

d55c3c4566cd69b2af1ac0ef1f24f7d9e781bd67701c2e84a2300a8464636b34

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:32 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 30970
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/webflow.css

51.38.118.179

200 OK

9350

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/webflow.css
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Unicode text, UTF-8 text, with very long lines (2587)

Size

9350
Hash

d143e827e4004f5af028b3c37e3748dd

7531565e84fd2011b5ca8a9b179ecdd4b65d89b6

f425ff60551250b2f1dc6a40d92d5ab84847781d370740a945b6b8f1866c4e84

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /meta/webflow.css HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 16:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 9350
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/js

51.38.118.179

200 OK

92325

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text, with very long lines (1815)

Size

92325
Hash

fb2ab9b8632250b0d7aa50c08150cfe1

73b3f266ac08c9fb07e1de1664fed384ccd5bc86

5d419e0ff614b331e4f8fed2ba7c1380b1f5983f98d820a6a0f7040b55f60b5b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Last-Modified: Wed, 22 Dec 2021 16:30:32 GMT
Accept-Ranges: bytes
Content-Length: 92325
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/metamask-staging-2.webflow.css

51.38.118.179

200 OK

17590

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/metamask-staging-2.webflow.css
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

17590
Hash

53ff35d49ab5d2089b65f13389233f86

cf1714af3125e0fc6b07408fa4269ab003baa162

509ea7e5aac1909a1a0b328b497e47f04cd10eaa3927e65a37cf1900bea5996f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /meta/metamask-staging-2.webflow.css HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 16:30:36 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 17590
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/webflow.js

51.38.118.179

200 OK

147063

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/webflow.js
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Unicode text, UTF-8 text, with very long lines (50020)

Size

147063
Hash

8a4663ee78192e5c9506c2a338ce7723

dba17ca619195bfb7ff1a1b55d196bff2029b89f

f2892479732a4c07ecece62f4c8f12fd9ade7fab06766368a9c87f3bbe96dd59

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/webflow.js HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 16:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 147063
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/meta/mm-logo.svg

51.38.118.179

200 OK

3289

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/mm-logo.svg
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001)

Size

3289
Hash

75536fc9d6e2f24b5d4a43206f59daea

d6b451451650bb4028e6e36562cf590370534324

1fec7292d135f29856c58b107c76d144f532a9a3b5d36acefa89ae4e3e990c61

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/mm-logo.svg HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: image/svg+xml
Last-Modified: Wed, 22 Dec 2021 16:30:36 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3289
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

af8ca3b0d6868960418b8129d4385394

51c782b206470639c70105ba9272191bfb5c9e99

95f18b5544933bbe1bb0f5564f554ca9463c87cbc2042c53f62de9b4b68488c3

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Apr 2023 05:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/icon?family=Material+Icons

142.250.74.106

200 OK

614

URL GET HTTP/2

fonts.googleapis.com/icon?family=Material+Icons
IP

142.250.74.106:443
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint28:74:DC:A1:79:64:AB:97:A4:EA:AB:80:90:A6:E2:B9:D4:16:79:64

ValidityTue, 28 Mar 2023 16:54:33 GMT - Tue, 20 Jun 2023 16:54:32 GMT

Magic

ASCII text

Size

614
Hash

68c401a9d6b09b30651c1394196eb687

de03fb79c491c0ac705aa857286c6bbfca23a35e

bdb807d4798adbd077936bbf92f63b2fd43ee138418b66917a8dd3984b7563bd

HTTP Headers

                                        GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 16 Apr 2023 05:57:29 GMT
date: Sun, 16 Apr 2023 05:57:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Changa+One:400,400italic

142.250.74.106

200 OK

301

URL GET HTTP/1.1

fonts.googleapis.com/css?family=Changa+One:400,400italic
IP

142.250.74.106:80
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

ASCII text

Size

301
Hash

7fb212f619185f162769684274cb1dfe

414b678cfcbcd25c44569e72369a8218bea8756d

d53161ae9523414449dd0f7083f66fda679084bac2cb18a92b884a43616c1fd5

HTTP Headers

                                        GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 16 Apr 2023 05:57:29 GMT
Date: Sun, 16 Apr 2023 05:57:29 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Regular-WebXL.woff2

51.38.118.179

200 OK

45196

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Regular-WebXL.woff2
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data

Size

45196
Hash

2d75957df3bb3aa6ed84f6591b0d5a1a

906424e75625f63b0188471067065794d0348536

8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/meta/metamask-staging-2.webflow.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: font/woff2
Last-Modified: Wed, 22 Dec 2021 16:30:26 GMT
Accept-Ranges: bytes
Content-Length: 45196
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

ocsp.r2m02.amazontrust.com/

143.204.48.16

471

URL

ocsp.r2m02.amazontrust.com/
IP

143.204.48.16:0
ASN

#16509 AMAZON-02

Magic

data

Size

471
Hash

cd924748b46c9d8c46e81ad4d350430a

53653b3ba89ac61d6cb0ec6a250e8161a6d0a0e6

0ee1229ce58f033c42135c5090b23053ce099dc286ba12f0af36dd7c3adb9b4d

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123331
Date: Sun, 16 Apr 2023 05:57:29 GMT
Etag: "643ac1cd-1d7"
Expires: Mon, 17 Apr 2023 16:13:00 GMT
Last-Modified: Sat, 15 Apr 2023 15:25:01 GMT
Server: ECAcc (nya/796A)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f3tZDCIW-vr6kBIn1p8A7MMh3m7FueunKag6TFDd6dR-Fx3FpWKzwQ==
Age: 2879

metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Bold-WebXL.woff2

51.38.118.179

200 OK

44544

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/EuclidCircularB-Bold-WebXL.woff2
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data

Size

44544
Hash

9024d0bf73943172297c4628d0054e20

36c3795e7b297d06589e15ef59592683d9ed0974

88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet
fortinet	Phishing

HTTP Headers

                                        GET /meta/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/meta/metamask-staging-2.webflow.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: font/woff2
Last-Modified: Wed, 22 Dec 2021 16:30:26 GMT
Accept-Ranges: bytes
Content-Length: 44544
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

e9df1c28d4523d86ea18b8226d3eb975

d96da88c6eff842daac76452c23fd449d2c9924b

bd6807d9c5ca2cfcc91dd5307fb2f863a37d15d4abeebebe46c87fe71678bdfd

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Apr 2023 05:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

metamask.io.merge.pjbtecnologias.co.mz/meta/Institutional-Illustration.png

51.38.118.179

200 OK

289564

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/meta/Institutional-Illustration.png
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

PNG image data, 876 x 1040, 8-bit/color RGBA, non-interlaced\012- data

Size

289564
Hash

85607339bb7e3cc70e1b7568ed4d29b2

7c6301d70e1ab599857be6e9795b94418cef6079

5bdf1ea203497adb942fa639a322195c744910ae8980d625d986ddead1f8ed37

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /meta/Institutional-Illustration.png HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/meta/metamask-staging-2.webflow.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:29 GMT
Content-Type: image/png
Last-Modified: Wed, 22 Dec 2021 16:30:30 GMT
Accept-Ranges: bytes
Content-Length: 289564
Date: Sun, 16 Apr 2023 05:57:29 GMT
Server: LiteSpeed

fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2

216.58.207.227

200 OK

128352

URL GET HTTP/2

fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11

ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data

Size

128352
Hash

53436aca8627a49f4deaaa44dc9e3c05

0bc0c675480d94ec7e8609dda6227f88c5d08d2c

8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1

HTTP Headers

                                        GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://metamask.io.merge.pjbtecnologias.co.mz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 15 Apr 2023 22:24:46 GMT
expires: Sun, 14 Apr 2024 22:24:46 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
age: 27163
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

e9df1c28d4523d86ea18b8226d3eb975

d96da88c6eff842daac76452c23fd449d2c9924b

bd6807d9c5ca2cfcc91dd5307fb2f863a37d15d4abeebebe46c87fe71678bdfd

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Apr 2023 05:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2

216.58.207.227

200 OK

7900

URL GET HTTP/1.1

fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP

216.58.207.227:80
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data

Size

7900
Hash

61e86e7a20ecf3ba181ca4b9a9a1cdbd

482a65cffc69109af26669d64accbef71db3b836

fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18

HTTP Headers

                                        GET /s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://metamask.io.merge.pjbtecnologias.co.mz
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7900
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 14 Apr 2023 07:16:55 GMT
Expires: Sat, 13 Apr 2024 07:16:55 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 21 Apr 2022 17:15:19 GMT
Content-Type: font/woff2
Age: 168035

metamask.io.merge.pjbtecnologias.co.mz/images/webclip.png

51.38.118.179

200 OK

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/images/webclip.png
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /images/webclip.png HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:30 GMT
Content-Type: image/png
Last-Modified: Wed, 22 Dec 2021 22:03:30 GMT
Accept-Ranges: bytes
Content-Length: 0
Date: Sun, 16 Apr 2023 05:57:30 GMT
Server: LiteSpeed

metamask.io.merge.pjbtecnologias.co.mz/images/favicon.png

51.38.118.179

200 OK

URL GET HTTP/1.1

metamask.io.merge.pjbtecnologias.co.mz/images/favicon.png
IP

51.38.118.179:80
ASN

#16276 OVH SAS

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
openphish	Crypto/Wallet

HTTP Headers

                                        GET /images/favicon.png HTTP/1.1
Host: metamask.io.merge.pjbtecnologias.co.mz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 23 Apr 2023 05:57:30 GMT
Content-Type: image/png
Last-Modified: Wed, 22 Dec 2021 22:03:30 GMT
Accept-Ranges: bytes
Content-Length: 0
Date: Sun, 16 Apr 2023 05:57:30 GMT
Server: LiteSpeed

fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2

216.58.207.227

200 OK

8404

URL GET HTTP/1.1

fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP

216.58.207.227:80
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html

Magic

Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data

Size

8404
Hash

141119ae119bf7ca75e10ef82f66e442

adebf435aa078db3c116cb9faae15f2ad81d3ac5

c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff

HTTP Headers

                                        GET /s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://metamask.io.merge.pjbtecnologias.co.mz
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8404
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 14 Apr 2023 07:16:56 GMT
Expires: Sat, 13 Apr 2024 07:16:56 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 21 Apr 2022 17:15:41 GMT
Content-Type: font/woff2
Age: 168034

www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js

216.58.207.227

404 Not Found

1621

URL GET HTTP/2

www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11

ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)

Size

1621
Hash

c90524d6a02b27addb56c350fe6fbb2d

d713d1b53323c0169ffe0649be8c9d04a189f999

4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0

HTTP Headers

                                        GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://metamask.io.merge.pjbtecnologias.co.mz
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Sun, 16 Apr 2023 05:57:30 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ethers.io/scripts/ethers-v4.min.js

143.204.55.52

200 OK

303580

URL GET HTTP/2

cdn.ethers.io/scripts/ethers-v4.min.js
IP

143.204.55.52:443
ASN

#16509 AMAZON-02

Requested by

http://metamask.io.merge.pjbtecnologias.co.mz/secure.html
Certificate

IssuerAmazon

Subjectethers.io

FingerprintBA:83:2B:DB:29:97:63:0C:2E:D9:2E:94:14:18:BE:51:F1:4B:32:EC

ValidityTue, 21 Feb 2023 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

303580
Hash

0e66b864a27c5961a702e18683961608

febc146fcf4c2d021f8635670ce4b2f35232e8e7

2f426ca96f459f9229cf53665db2de4ec82d15ce49f767915378d87f733ccf9a

HTTP Headers

                                        GET /scripts/ethers-v4.min.js HTTP/1.1
Host: cdn.ethers.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://metamask.io.merge.pjbtecnologias.co.mz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Fri, 23 Oct 2020 03:52:54 GMT
x-amz-version-id: 1vIDD7850l9p1Juv2dxP72RhnSV02NFY
server: AmazonS3
content-encoding: gzip
date: Sun, 16 Apr 2023 05:07:52 GMT
etag: W/"0e66b864a27c5961a702e18683961608"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zH6tV1YisEKOwmBwZ-CGh9J6200ocGywk7INrDNATEH_6Flv0roh9w==
age: 2978
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

#1 JS:Script (size: 3393)

#2 JS:Script (size: 13188)

#3 JS:Script (size: 50205)

#4 JS:Script (size: 69)

#5 JS:Script (size: 89476)

#6 JS:Script (size: 601104)

#7 JS:Script (size: 303580)

#8 JS:Script (size: 21652)

#9 JS:Script (size: 1008)

#10 JS:Script (size: 92325)

#11 JS:Script (size: 38562)

#12 JS:Script (size: 21104)

#13 JS:Script (size: 1787)

HTTP Transactions (34)

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash