Report - www.spiritmexico.com.mx/images/Metamask/6175944/

Report Overview

Visited public
2023-08-25 09:18:33
Tags
crypto phishing
URL
www.spiritmexico.com.mx/images/Metamask/6175944/
Finishing URL
www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
IP / ASN
67.227.236.216
#32244 LIQUIDWEB
Title
FAQs
Phishing - Generic Crypto/Wallet

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.spiritmexico.com.mx	unknown	2007-02-15	2015-09-04 22:07:01	2023-08-08 20:53:40	12 kB	295 kB	67.227.236.216
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-08-24 18:12:03	1.3 kB	2.8 kB	142.250.74.131
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-08-25 02:23:38	2.2 kB	36 kB	142.250.74.35
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-08-25 04:02:02	456 B	1.4 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-08-24	medium	www.spiritmexico.com.mx/images/Metamask/6175944/	Crypto/Wallet
2023-08-23	medium	www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed
2023-08-25	medium	spiritmexico.com.mx	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	www.spiritmexico.com.mx/images/Metamask/6175944/style/webfont.js	ScriptElement	13 kB	2023-03-07	2025-05-09
Pretty URL www.spiritmexico.com.mx/images/Metamask/6175944/style/webfont.js IP 67.227.236.216 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-09 11:08 Times Seen17504 Hash 7c96a5f11d9741541d5e3c42ff6380d7 d3fa2564c021cf730e58ffddb138cf6b57ed126e 81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee Loading...

	www.spiritmexico.com.mx/images/Metamask/6175944/style/main.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL www.spiritmexico.com.mx/images/Metamask/6175944/style/main.js IP 67.227.236.216 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2025-05-09 08:35 Times Seen3951 Hash 0732e3eabbf8aa7ce7f69eedbd07dfdd 4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b Loading...

	www.spiritmexico.com.mx/images/Metamask/6175944/style/tags.js	ScriptElement	22 kB	2023-03-07	2024-12-05
Pretty URL www.spiritmexico.com.mx/images/Metamask/6175944/style/tags.js IP 67.227.236.216 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:55 Last Seen2024-12-05 12:18 Times Seen18 Hash 91f756e4237c8162db6bf069ddd17e8f 30a7740aa581a4749ae1d62e480cfe3d75f9bf30 883add600eb3c8a19af11196660737076b2da251cda7de48c46a202dd6099484 Loading...

	www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html	ScriptElement	73 B	2023-03-07	2025-05-06
Pretty URL www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html IP 67.227.236.216 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:24 Last Seen2025-05-06 11:44 Times Seen200 Hash ccf7a258eee5e12d2cb3d813a5da86c8 0d0c6985e493d2f610870c9259901a2511734328 441b05bfa42c0b589fd682ec21e9ba36e55f6ec2718fbb259a812cd0b999c28e Loading...

	www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html	ScriptElement	269 B	2023-03-07	2024-10-06
Pretty URL www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html IP 67.227.236.216 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:27 Last Seen2024-10-06 09:21 Times Seen12 Hash 07b5d596815094c7b26a05f7f1fab14e 1a5c62c67758b54c56db56a121b54e4565e2ee22 f2651d7fa94f083f87b980afa323ba7cc477791a12a6abdf8ffce9426003f043 Loading...

HTTP Transactions (31)

URL IP Response Size

www.spiritmexico.com.mx/images/Metamask/6175944/

67.227.236.216

302 Found

0 B

URL User Request GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/ HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: ./Wallet.html
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:16 GMT
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 25 Aug 2023 09:18:16 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html

67.227.236.216

200 OK

3.5 kB

URL User Request GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (440), with CRLF line terminators
Size
3.5 kB (3544 bytes)
Hash
7ca0635e7d68616fd5c70b7c24623596
2c816cf20991e2a9ee584b6ed8db1029a8ab40a2
51e522fd4a36eb9960172cbea7b5feb17ed2e2eccb8008e326fc768dfa5eff88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/Wallet.html HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:16 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3544
content-type: text/html
date: Fri, 25 Aug 2023 09:18:16 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/normalize.css

67.227.236.216

200 OK

2.7 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/normalize.css
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2676 bytes)
Hash
519121fa4cdf6782a4c1c412564605e2
dcd9297e0c5c4a9a8ba8fb02a7d93cf85984ccd3
25194b73ec31c5fa1e315cd30fd7428f4075d725740663aea2e60d1de61288cb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/normalize.css HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 24 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2676
content-type: text/css
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/webflow.css

67.227.236.216

200 OK

9.8 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/webflow.css
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
Unicode text, UTF-8 text, with very long lines (2587), with CRLF line terminators
Size
9.8 kB (9791 bytes)
Hash
d496b86dc5f7aa56a351bc28008ae272
c4a07662d21623600e9291be8426ab1e99e79385
84cba7c0b164d62d0031c2aad97fe2b9484d1ef8eb12d299d179046eea3068f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/webflow.css HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 24 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9791
content-type: text/css
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/webfont.js

67.227.236.216

200 OK

5.4 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/webfont.js
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text, with very long lines (2134)
Size
5.4 kB (5415 bytes)
Hash
7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/webfont.js HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 01 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5415
content-type: application/javascript
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/metamask-staging-2.webflow.css

67.227.236.216

200 OK

17 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/metamask-staging-2.webflow.css
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text, with CRLF line terminators
Size
17 kB (16732 bytes)
Hash
7b4ca45b499c60298cb9d8a7ea289dc9
2e0f97cb3d97853badaf45ec6512e0ad3429fe7f
f52dde44d3a2b84212b473277a9578196dc09bf9b2d572d2f8f7c3fbb8815fa5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/metamask-staging-2.webflow.css HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 24 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16732
content-type: text/css
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/css

67.227.236.216

200 OK

295 B

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/css
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text
Size
295 B (295 bytes)
Hash
d75dbb7a19763e296b99fa0b3f42546d
8b7752a815b8325ece966de1476e4f43ee1dcdc9
8daea9a40be31e567300edc7daeb077f232cf7c32baed3aebff9ee9260b0d5a0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/css HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 295
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/tags.js

67.227.236.216

200 OK

5.5 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/tags.js
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text, with CRLF line terminators
Size
5.5 kB (5508 bytes)
Hash
91f756e4237c8162db6bf069ddd17e8f
30a7740aa581a4749ae1d62e480cfe3d75f9bf30
883add600eb3c8a19af11196660737076b2da251cda7de48c46a202dd6099484

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/tags.js HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 01 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5508
content-type: application/javascript
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-aave.png

67.227.236.216

200 OK

14 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-aave.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (14347 bytes)
Hash
521a00d54b7fe1cb1d7712b655ca54a6
8c5aa52335bf25183781e62843ede770bf6877ba
506d6d9d5ad22253976f2906bbf141c94d19eb15466ed62b8c6cfb887bf07b55

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-aave.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 14347
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/mm-logo.svg

67.227.236.216

200 OK

3.4 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/mm-logo.svg
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001), with CRLF line terminators
Size
3.4 kB (3369 bytes)
Hash
7915373f26761992664272083eef55af
7b69d64a0ff01d6b0cf0b95558349e83ee4d0698
4ad9d7c985fe9bc858d79cfe642d805da47e0fe84ea092acaab8691e20ad8670

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/mm-logo.svg HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3369
content-type: image/svg+xml
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/main.js

67.227.236.216

200 OK

31 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/main.js
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
ASCII text, with very long lines (65446), with CRLF line terminators
Size
31 kB (30908 bytes)
Hash
0732e3eabbf8aa7ce7f69eedbd07dfdd
4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f
ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/main.js HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 01 Sep 2023 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5ca3d7b365d3c10d745c10efa172a35d
1e1f1872536edbdd81bb9db8c28e60f3ec0e3898
b88f59ee8fa2c4c85a4e71287d5d133945f8eb1d4246996a44baca3c94dc8ab7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Aug 2023 09:18:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-axieinfinity.png

67.227.236.216

200 OK

43 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-axieinfinity.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Size
43 kB (42713 bytes)
Hash
5f662391fe3ddc927134ba8e15263eaf
ab5ea7aacdc8c97238247f59761abc02033b2a67
7faefc7f99e94d6251527c95794a5fdfb3e644baf25ae56f4e13afd125246421

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-axieinfinity.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 42713
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-maker.png

67.227.236.216

200 OK

6.9 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-maker.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6852 bytes)
Hash
720871ca002e89a10d26e5c516066311
8648fe12645cd5c3473a73faba1d42cef78de444
f0d7356ee903d26301b8960783f70c108efc0382f20c804e0d09872a5443ce96

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-maker.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 6852
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-compound.png

67.227.236.216

200 OK

11 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-compound.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11355 bytes)
Hash
3818f9cfccbd94fad91a10d3c5ee356c
7c6af849177aa8bf6ef9bcbf801dc375e1997900
20a34c84f82590d99a060210ea362878975f21cfd65c3a70c54e7fb99dce1f76

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-compound.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 11355
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-uniswap.png

67.227.236.216

200 OK

10 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-uniswap.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (10268 bytes)
Hash
1948962ad395727d902bd6b5fcd01807
f7e85e096b084ef6d9f550afbcd702fd889031a5
ad0237265584181a6797c454ca123aa5d3df08001ae39b27bddfc66856b6751b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-uniswap.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 10268
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-gitcoin.png

67.227.236.216

200 OK

8.0 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-gitcoin.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size
8.0 kB (7998 bytes)
Hash
c710e9a5c39e89136a73edf0a1c99abe
aca40362b7d87533d00250e102ba852d19e2231c
7077eb7da3a6f399014d67a1032ab6d67f099055a1a2594cb4753022b843dc43

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-gitcoin.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 7998
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-opensea.png

67.227.236.216

200 OK

6.5 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-opensea.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size
6.5 kB (6533 bytes)
Hash
f82776f839cec899c9c87a680226aabf
43f5dedb6216cb02ee568fcb66cb19fc296c3a85
c62a1f30cdb6aff5eafdfccb45383032e61bf70aa0573572a4428347a1b5b116

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-opensea.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 6533
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-rarible.png

67.227.236.216

200 OK

6.8 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/dapp-rarible.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Size
6.8 kB (6840 bytes)
Hash
b9f7c0fd11c34c044799e673947103f8
491baab057af39b2b24bf0c671d0eb05454b8c48
29db12a282df5639db8fa232831bbe9a7220884eecf79f1776f1b27237a4597c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/dapp-rarible.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 6840
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
72438717548786e23e3c1b2ef3ad6581
853eed136622460def10b2ff167efbd0993ff1f2
ed30dd609d16a8c2796f40c3309709a152e995e789033a1f7dd60bcd9129404a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Aug 2023 09:18:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2

142.250.74.35

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Size
7.9 kB (7900 bytes)
Hash
61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18

HTTP Headers

GET /s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spiritmexico.com.mx
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Aug 2023 10:45:02 GMT
expires: Sun, 18 Aug 2024 10:45:02 GMT
cache-control: public, max-age=31536000
age: 513195
last-modified: Thu, 21 Apr 2022 17:15:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/EuclidCircularB-Regular-WebXL.woff2

67.227.236.216

200 OK

45 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/EuclidCircularB-Regular-WebXL.woff2
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data
Size
45 kB (45196 bytes)
Hash
2d75957df3bb3aa6ed84f6591b0d5a1a
906424e75625f63b0188471067065794d0348536
8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/style/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 45196
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5ca3d7b365d3c10d745c10efa172a35d
1e1f1872536edbdd81bb9db8c28e60f3ec0e3898
b88f59ee8fa2c4c85a4e71287d5d133945f8eb1d4246996a44baca3c94dc8ab7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Aug 2023 09:18:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.spiritmexico.com.mx/images/Metamask/6175944/style/EuclidCircularB-Bold-WebXL.woff2

67.227.236.216

200 OK

44 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/EuclidCircularB-Bold-WebXL.woff2
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data
Size
44 kB (44544 bytes)
Hash
9024d0bf73943172297c4628d0054e20
36c3795e7b297d06589e15ef59592683d9ed0974
88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/style/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 44544
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2

142.250.74.35

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Size
7.9 kB (7900 bytes)
Hash
61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18

HTTP Headers

GET /s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spiritmexico.com.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Aug 2023 10:45:02 GMT
expires: Sun, 18 Aug 2024 10:45:02 GMT
cache-control: public, max-age=31536000
age: 513195
last-modified: Thu, 21 Apr 2022 17:15:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2

142.250.74.35

200 OK

8.4 kB

URL GET HTTP/2
fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data
Size
8.4 kB (8404 bytes)
Hash
141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff

HTTP Headers

GET /s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spiritmexico.com.mx
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Aug 2023 19:17:19 GMT
expires: Sun, 18 Aug 2024 19:17:19 GMT
cache-control: public, max-age=31536000
age: 482458
last-modified: Thu, 21 Apr 2022 17:15:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2

142.250.74.35

200 OK

8.4 kB

URL GET HTTP/2
fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data
Size
8.4 kB (8404 bytes)
Hash
141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff

HTTP Headers

GET /s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spiritmexico.com.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Aug 2023 19:17:19 GMT
expires: Sun, 18 Aug 2024 19:17:19 GMT
cache-control: public, max-age=31536000
age: 482458
last-modified: Thu, 21 Apr 2022 17:15:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
72438717548786e23e3c1b2ef3ad6581
853eed136622460def10b2ff167efbd0993ff1f2
ed30dd609d16a8c2796f40c3309709a152e995e789033a1f7dd60bcd9129404a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Aug 2023 09:18:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.spiritmexico.com.mx/images/Metamask/6175944/style/favicon.png

67.227.236.216

200 OK

1.5 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/favicon.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1532 bytes)
Hash
b7919ea38a8beed9b4763858c4f7412b
1aa57bcd7ca8a0c3352923c9ee06c472f23d5b63
214080adac9969108cb602cb68617e332db1288e95e18c29c10f9396c6d3744c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/favicon.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 1532
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

www.spiritmexico.com.mx/images/Metamask/6175944/style/webclip.png

67.227.236.216

200 OK

12 kB

URL GET HTTP/2
www.spiritmexico.com.mx/images/Metamask/6175944/style/webclip.png
IP
67.227.236.216:443
ASN
#32244 LIQUIDWEB

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerLet's Encrypt
Subjectspiritmexico.com.mx
Fingerprint9A:CE:45:B0:0E:49:C5:C6:30:15:F1:26:54:E8:60:E6:BD:8E:16:40
ValidityTue, 08 Aug 2023 01:22:01 GMT - Mon, 06 Nov 2023 01:22:00 GMT

File type
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Size
12 kB (11764 bytes)
Hash
48400a28770e10dd52a8c0e539aeb282
151bcd0c431ed79f30193731de564106a5b11956
27712ebee35bae5474f124f7cbf6cb2ca60d5121e561d284c9f11a4e69efd663

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Metamask/6175944/style/webclip.png HTTP/1.1
Host: www.spiritmexico.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 18 Jul 2023 05:21:56 GMT
accept-ranges: bytes
content-length: 11764
cache-control: max-age=31536000
expires: Sat, 24 Aug 2024 09:18:17 GMT
content-type: image/png
date: Fri, 25 Aug 2023 09:18:17 GMT
server: Apache
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Changa+One:400,400italic

142.250.74.138

200 OK

800 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Changa+One:400,400italic
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://www.spiritmexico.com.mx/images/Metamask/6175944/Wallet.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint2A:06:F9:5A:FD:FC:89:5C:D7:C5:CC:38:F0:25:78:FB:15:9F:5A:67
ValidityMon, 31 Jul 2023 08:22:19 GMT - Mon, 23 Oct 2023 08:22:18 GMT

File type
ASCII text, with very long lines (816), with no line terminators
Size
800 B (800 bytes)
Hash
2f92230730768af52990198bc458846a
f26e29dbf1a3501962b1393cd53951bd6e032519
d0d2059d5fd9b94252a2dd5974c5d65c015d3bc039c55e684294697c7e0cc788

HTTP Headers

GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.spiritmexico.com.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Aug 2023 09:18:17 GMT
date: Fri, 25 Aug 2023 09:18:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (31)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN