Report - metzhgofk.com/

Report Overview

Submitted URL
metzhgofk.com/
IP
178.236.44.26
ASN
#207190 Yuhonet International Limited
Submitted
2024-04-25 18:07:41
Access
public
Website Title
MetaMask
Final URL
metzhgofk.com/
Tags
crypto phishing
urlquery detections
Phishing - Generic Crypto/Wallet

Detections

urlquery
21
Network Intrusion Detection
0
Threat Detection Systems
108

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
metzhgofk.com	unknown	2023-02-14	2023-11-20	2024-02-29	13 kB	2.2 MB	178.236.44.26
hm.baidu.com	8254	1999-10-11	2012-05-26	2024-04-25	1.0 kB	12 kB	14.215.182.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet
2024-04-25	medium	metzhgofk.com/	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed
2024-04-25	medium	metzhgofk.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	metzhgofk.com/js/email-decode.min.js	1.2 kB	2023-03-07	2024-05-05
Pretty URL metzhgofk.com/js/email-decode.min.js IP 178.236.44.26 ASN #207190 Yuhonet International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-05 11:40:37 Times Seen55970 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	metzhgofk.com/js/jquery-3.4.1.min.220afd743d.js	88 kB	2023-03-07	2024-05-05
Pretty URL metzhgofk.com/js/jquery-3.4.1.min.220afd743d.js IP 178.236.44.26 ASN #207190 Yuhonet International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-05 13:06:37 Times Seen97045 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	metzhgofk.com/	284 B	2023-03-07	2024-04-28
Pretty URL metzhgofk.com/ IP 178.236.44.26 ASN #207190 Yuhonet International Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:26:26 Last Seen2024-04-28 19:41:25 Times Seen25 Hash e6a5f0fba7d5f81c9709f1bb641fda94 25d0509c2c63917069f024e5351f39f3aa9e73b4 a802e53c42be80fd372adb091ea4816f66df082aa3cb0132193aa1367de9a52a Loading...

	unknown	92 B	2023-04-13	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 12:35:15 Last Seen2024-05-03 10:14:50 Times Seen475 Hash 0195aee91cd277604a3e95d6b67cf817 cfc91455f2c998cc69c03c31b749ced8aebd0ce7 822317cfabb3d4b8fe0d843530b2844b9b00eccce923366226866aa4acb34c96 Loading...

	unknown	37 B	2023-04-11	2024-05-05
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49:14 Last Seen2024-05-05 11:46:51 Times Seen22270 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	unknown	251 B	2024-04-25	2024-04-25
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-04-25 20:07:42 Last Seen2024-04-25 20:07:42 Times Seen1 Hash 1c02bde0414b3332b23b3d5e512640f9 03b22f2a658d6a6d16ab235d570936390b7ab4da be3e2877b90400e3946baec2b6899a2ce0e0514aa9fc1ae8a84c3b87b2e86c80 Loading...

	metzhgofk.com/js/webflow.js	550 kB	2023-03-07	2024-04-28
Pretty URL metzhgofk.com/js/webflow.js IP 178.236.44.26 ASN #207190 Yuhonet International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:26:26 Last Seen2024-04-28 19:41:25 Times Seen33 Hash 15c277378edac82746664ed71c84566c ad171062d6e4048f1a5450f8df2c60593740c5dd 6426e2d8248585cc84cbe12aec5c666fc09641db14a3e922f0491503fead1698 Loading...

	metzhgofk.com/media.html	347 kB	2023-04-05	2024-04-25
Pretty URL metzhgofk.com/media.html IP 178.236.44.26 ASN #207190 Yuhonet International Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 05:29:16 Last Seen2024-04-25 20:07:42 Times Seen17 Hash 56b231e3ca1938b0890b2a5d36375405 5003b463af40fb2fc8352f2f5230a8e8b02f7b2b 791eb651bed6ffa34827c501e597c2b1ac9098dcfe11f0027756762eaa868fd0 Loading...

	hm.baidu.com/hm.js?8338a8bda120bbf7702ddb55a24dc5bd	30 kB	2024-04-25	2024-04-25
Pretty URL hm.baidu.com/hm.js?8338a8bda120bbf7702ddb55a24dc5bd IP 14.215.182.140 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 20:07:42 Last Seen2024-04-25 20:07:43 Times Seen2 Hash 76e255e0aac71dae520c4decdd54173c 34d6004c08e00bf24c16d78da926b20804a348c7 b260aa7e401fc326be27c331e5252c5f5a1a26b3a7b8440ca5bcd2e3fe8c21c2 Loading...

HTTP Transactions (29)

URL IP Response Size

metzhgofk.com/css/mm2020.webflow.css

178.236.44.26

200 OK

10 kB

URL GET HTTP/2
metzhgofk.com/css/mm2020.webflow.css
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
10 kB (10208 bytes)
Hash
169884d432a7e0fab988ab4e50dd1e6e
b6062d5d7acf884013c891aba86e08b7c1815c6f
f4f02a49e516a6eade3d63228510508fcabaeda5e6fa910c9e97fa25a916af31

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/mm2020.webflow.css HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: text/css
last-modified: Thu, 09 Mar 2023 16:51:06 GMT
vary: Accept-Encoding
etag: W/"640a0e7a-e1b3"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/css/normalize.css

178.236.44.26

200 OK

12 kB

URL GET HTTP/2
metzhgofk.com/css/normalize.css
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
12 kB (11987 bytes)
Hash
fbc56ef8f7cf257a7a8125ec28b238ec
64dd9fd63e84bf851c18c345384cd58e092bd4bb
5ce6b905037bcb7c81751466f8b5f90841851e860ed5533b35ccaca3a36bf0eb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/normalize.css HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: text/css
last-modified: Thu, 09 Mar 2023 16:51:07 GMT
vary: Accept-Encoding
etag: W/"640a0e7b-1e5c"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/css/webflow.css

178.236.44.26

200 OK

15 kB

URL GET HTTP/2
metzhgofk.com/css/webflow.css
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
15 kB (15422 bytes)
Hash
f62c6c91fc21d9f70df01ae1fbafb138
8a00f7874e0bc17989a5c4bef4dfd8f4753637d3
542dfbf39bba0878412469846a5868a82c1e856da76a7c42ddbe021675fb9feb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/webflow.css HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: text/css
last-modified: Thu, 09 Mar 2023 16:51:07 GMT
vary: Accept-Encoding
etag: W/"640a0e7b-9683"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/img/mm-logo.svg

178.236.44.26

200 OK

12 kB

URL GET HTTP/2
metzhgofk.com/img/mm-logo.svg
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
12 kB (12019 bytes)
Hash
51bcea2625eb2c6e9268a7377a792c86
5eeb306e6584eed1747c36c11724f193711d430e
5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/mm-logo.svg HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/svg+xml
content-length: 12019
last-modified: Thu, 09 Mar 2023 16:50:54 GMT
etag: "640a0e6e-2ef3"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/social-35.svg

178.236.44.26

200 OK

602 B

URL GET HTTP/2
metzhgofk.com/img/social-35.svg
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
602 B (602 bytes)
Hash
d5e7fa6bfac5cb057e4974b17d5f0e53
fd3f64fd6b8fc6bb097bcd065337c70d8d2cef37
bcba47e61462fcaa7a59953d7af48a777438587b79faf7fcda5831cea8e9a7da

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/social-35.svg HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/svg+xml
content-length: 602
last-modified: Thu, 09 Mar 2023 16:50:52 GMT
etag: "640a0e6c-25a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/wallet-illo.svg

178.236.44.26

200 OK

36 kB

URL GET HTTP/2
metzhgofk.com/img/wallet-illo.svg
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
36 kB (36437 bytes)
Hash
63ad7f01f67accd6aafb47999640abe5
5ed10575a1a39d5b02840416a281fb1e655bd423
596228062de19a21cfda4d3129b3a5d397c5a71509e096b8f67fb8c4f22aa56d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/wallet-illo.svg HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/svg+xml
content-length: 36437
last-modified: Thu, 09 Mar 2023 16:50:52 GMT
etag: "640a0e6c-8e55"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/Explore-illo.svg

178.236.44.26

200 OK

37 kB

URL GET HTTP/2
metzhgofk.com/img/Explore-illo.svg
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
37 kB (36835 bytes)
Hash
46fb450c5ecf6da758bca0975551f056
629157e884b450ecf5a94d38d736db3c7428245f
8ba2b37fd4f2f3c19c10109bc6111d3d71692c78f9351f1eb2a8cab5231b77b5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/Explore-illo.svg HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/svg+xml
content-length: 36835
last-modified: Thu, 09 Mar 2023 16:50:58 GMT
etag: "640a0e72-8fe3"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/fonts/CircularXXWeb-Book.woff

178.236.44.26

200 OK

102 kB

URL GET HTTP/2
metzhgofk.com/fonts/CircularXXWeb-Book.woff
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 102361, version 3.0
Size
102 kB (102361 bytes)
Hash
9bcc857659bb569274c0947e22916e6b
83b51ec50d77d1c09e511803c729be28f3b907e9
fb9adde1a41784df0581da48ddd8321897cf4abc33717e8de170d0150971f858

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/CircularXXWeb-Book.woff HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/css/mm2020.webflow.css
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: font/woff
content-length: 102361
last-modified: Thu, 09 Mar 2023 16:50:49 GMT
etag: "640a0e69-18fd9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/fonts/CircularXXWeb-Medium.woff

178.236.44.26

200 OK

104 kB

URL GET HTTP/2
metzhgofk.com/fonts/CircularXXWeb-Medium.woff
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 104014, version 3.0
Size
104 kB (104014 bytes)
Hash
0a6358ad049cd2e4627ceb672d1b7a8d
b724c245f28553da719f1459f19d18569684cd8c
2342f14846286f8041643b6559bd5fedef26af9197732851a7de489cafc28462

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/CircularXXWeb-Medium.woff HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/css/mm2020.webflow.css
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: font/woff
content-length: 104014
last-modified: Thu, 09 Mar 2023 16:50:50 GMT
etag: "640a0e6a-1964e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/Browse-illo.svg

178.236.44.26

200 OK

28 kB

URL GET HTTP/2
metzhgofk.com/img/Browse-illo.svg
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
28 kB (28164 bytes)
Hash
afeafb6a9f14bd7771c63015be5a05c9
78683c75d81cf80440f083e9fb4bb2987748e290
517c0c6b44ede59070fb138aab7e875b9c230a227295f9612c32dabb9b0bdb13

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/Browse-illo.svg HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/svg+xml
content-length: 28164
last-modified: Thu, 09 Mar 2023 16:50:50 GMT
etag: "640a0e6a-6e04"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/

178.236.44.26

200 OK

12 kB

URL User Request GET HTTP/2
metzhgofk.com/
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
12 kB (11489 bytes)
Hash
fe652c1acc86d879cf5eeff86f0cd149
9e7a6ec1e5f50ee184b0bfedd43ea0a414128531
80bfad9bde2e20c565733bcaade799622db334995c85dee1fe5965a806014235

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:21 GMT
content-type: text/html
last-modified: Thu, 09 Mar 2023 16:50:45 GMT
vary: Accept-Encoding
set-cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2; path=/; Expires=Fri, 31-Dec-9999 23:59:59 GMT
etag: W/"640a0e65-72e7"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-bounties.png

178.236.44.26

200 OK

13 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-bounties.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
13 kB (12775 bytes)
Hash
a374ca0917c641f8f32c959425a59041
28f02de55f7a72da842584d7ec2f0d312c8cf5cc
f86c80827c07a5514e161e0a6e26866031b41163dd5014e987e4390dcde28beb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-bounties.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 12775
last-modified: Thu, 09 Mar 2023 16:51:01 GMT
etag: "640a0e75-31e7"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-uport.png

178.236.44.26

200 OK

10 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-uport.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
10 kB (9983 bytes)
Hash
16454a0744a195b774a515fa063abb29
72434fbb478894dc4bc1e9ad4cfa2a6c3cc1c206
1ee651e0237ec42c6d1eb8cf3bee9949512367aa4a26e21a866c03e3635a5666

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-uport.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 9983
last-modified: Thu, 09 Mar 2023 16:50:53 GMT
etag: "640a0e6d-26ff"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-gitcoin.png

178.236.44.26

200 OK

8.0 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-gitcoin.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
8.0 kB (7998 bytes)
Hash
c710e9a5c39e89136a73edf0a1c99abe
aca40362b7d87533d00250e102ba852d19e2231c
7077eb7da3a6f399014d67a1032ab6d67f099055a1a2594cb4753022b843dc43

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-gitcoin.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 7998
last-modified: Thu, 09 Mar 2023 16:51:00 GMT
etag: "640a0e74-1f3e"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-uniswap.png

178.236.44.26

200 OK

10 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-uniswap.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
10 kB (10268 bytes)
Hash
1948962ad395727d902bd6b5fcd01807
f7e85e096b084ef6d9f550afbcd702fd889031a5
ad0237265584181a6797c454ca123aa5d3df08001ae39b27bddfc66856b6751b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-uniswap.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 10268
last-modified: Thu, 09 Mar 2023 16:51:04 GMT
etag: "640a0e78-281c"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-opensea.png

178.236.44.26

200 OK

6.5 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-opensea.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
6.5 kB (6533 bytes)
Hash
f82776f839cec899c9c87a680226aabf
43f5dedb6216cb02ee568fcb66cb19fc296c3a85
c62a1f30cdb6aff5eafdfccb45383032e61bf70aa0573572a4428347a1b5b116

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-opensea.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 6533
last-modified: Thu, 09 Mar 2023 16:51:00 GMT
etag: "640a0e74-1985"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-compound.png

178.236.44.26

200 OK

11 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-compound.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
11 kB (11355 bytes)
Hash
3818f9cfccbd94fad91a10d3c5ee356c
7c6af849177aa8bf6ef9bcbf801dc375e1997900
20a34c84f82590d99a060210ea362878975f21cfd65c3a70c54e7fb99dce1f76

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-compound.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 11355
last-modified: Thu, 09 Mar 2023 16:51:02 GMT
etag: "640a0e76-2c5b"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/dapp-maker.png

178.236.44.26

200 OK

6.9 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-maker.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
6.9 kB (6852 bytes)
Hash
720871ca002e89a10d26e5c516066311
8648fe12645cd5c3473a73faba1d42cef78de444
f0d7356ee903d26301b8960783f70c108efc0382f20c804e0d09872a5443ce96

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-maker.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 6852
last-modified: Thu, 09 Mar 2023 16:51:00 GMT
etag: "640a0e74-1ac4"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/mm-shop-hoodie-p-500.png

178.236.44.26

200 OK

75 kB

URL GET HTTP/2
metzhgofk.com/img/mm-shop-hoodie-p-500.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 500 x 500, 8-bit colormap, non-interlaced
Size
75 kB (74982 bytes)
Hash
cb574846423e99b33ceae44cd76c6c78
394bc3b90a9182bb9f734cdc30c2c73bc01e241d
7b56900adc041ad82f7e96b483bf2381e4b5ccafdafe21fc1c96e7a008c2c4da

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/mm-shop-hoodie-p-500.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 74982
last-modified: Thu, 09 Mar 2023 16:51:02 GMT
etag: "640a0e76-124e6"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

hm.baidu.com/hm.js?8338a8bda120bbf7702ddb55a24dc5bd

14.215.182.140

200 OK

11 kB

URL GET HTTP/1.1
hm.baidu.com/hm.js?8338a8bda120bbf7702ddb55a24dc5bd
IP
14.215.182.140:443
ASN
#4134 Chinanet

Requested by
https://metzhgofk.com/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
JavaScript source, ASCII text, with very long lines (617)
Size
11 kB (11255 bytes)
Hash
76e255e0aac71dae520c4decdd54173c
34d6004c08e00bf24c16d78da926b20804a348c7
b260aa7e401fc326be27c331e5252c5f5a1a26b3a7b8440ca5bcd2e3fe8c21c2

HTTP Headers

GET /hm.js?8338a8bda120bbf7702ddb55a24dc5bd HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Thu, 25 Apr 2024 18:07:19 GMT
Etag: 3669822dbc10198319d73c9ffa538f15
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B9F2ED96745D90C7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

metzhgofk.com/img/hero1.png

178.236.44.26

200 OK

570 kB

URL GET HTTP/2
metzhgofk.com/img/hero1.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 1752 x 1452, 8-bit/color RGBA, non-interlaced
Size
570 kB (570539 bytes)
Hash
42d43eb89e664e92d96951e59a9064b4
c8e42ee56f07cfa2f8a05fcd95a6a17bdc3e780a
492b2aabc1862e6a0c464bedd1a23ef3e9f8560439d6d54cd9b4f0b8b8981d36

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/hero1.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/css/mm2020.webflow.css
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 570539
last-modified: Thu, 09 Mar 2023 16:51:03 GMT
etag: "640a0e77-8b4ab"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/webclip.png

178.236.44.26

200 OK

12 kB

URL GET HTTP/2
metzhgofk.com/img/webclip.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Size
12 kB (11764 bytes)
Hash
48400a28770e10dd52a8c0e539aeb282
151bcd0c431ed79f30193731de564106a5b11956
27712ebee35bae5474f124f7cbf6cb2ca60d5121e561d284c9f11a4e69efd663

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:24 GMT
content-type: image/png
content-length: 11764
last-modified: Thu, 09 Mar 2023 16:50:59 GMT
etag: "640a0e73-2df4"
expires: Sat, 25 May 2024 18:06:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/img/favicon.png

178.236.44.26

200 OK

1.5 kB

URL GET HTTP/2
metzhgofk.com/img/favicon.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1532 bytes)
Hash
b7919ea38a8beed9b4763858c4f7412b
1aa57bcd7ca8a0c3352923c9ee06c472f23d5b63
214080adac9969108cb602cb68617e332db1288e95e18c29c10f9396c6d3744c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/favicon.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:24 GMT
content-type: image/png
content-length: 1532
last-modified: Thu, 09 Mar 2023 16:50:56 GMT
etag: "640a0e70-5fc"
expires: Sat, 25 May 2024 18:06:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2049017191&si=8338a8bda120bbf7702ddb55a24dc5bd&v=1.3.0&lv=1&sn=515&r=0&ww=1280&u=https%3A%2F%2Fmetzhgofk.com%2F&tt=MetaMask

14.215.182.140

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2049017191&si=8338a8bda120bbf7702ddb55a24dc5bd&v=1.3.0&lv=1&sn=515&r=0&ww=1280&u=https%3A%2F%2Fmetzhgofk.com%2F&tt=MetaMask
IP
14.215.182.140:443
ASN
#4134 Chinanet

Requested by
https://metzhgofk.com/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=2049017191&si=8338a8bda120bbf7702ddb55a24dc5bd&v=1.3.0&lv=1&sn=515&r=0&ww=1280&u=https%3A%2F%2Fmetzhgofk.com%2F&tt=MetaMask HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 25 Apr 2024 18:07:20 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=AEF25DBC4105DB95; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

metzhgofk.com/img/dapp-airswap.png

178.236.44.26

200 OK

4.3 kB

URL GET HTTP/2
metzhgofk.com/img/dapp-airswap.png
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced
Size
4.3 kB (4278 bytes)
Hash
5498e401207ba1a34ea2e5b3f8162eb9
731d85e00919a4f2de5d0e20bdeb1626bd042870
42a08e8647eb764688b88195b6b074d7541834c1d2adf98cafc75813bac54bcb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/dapp-airswap.png HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: image/png
content-length: 4278
last-modified: Thu, 09 Mar 2023 16:50:55 GMT
etag: "640a0e6f-10b6"
expires: Sat, 25 May 2024 18:06:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

metzhgofk.com/media.html

178.236.44.26

200 OK

404 kB

URL GET HTTP/2
metzhgofk.com/media.html
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type

Size
404 kB (404117 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media.html HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: text/html
last-modified: Thu, 09 Mar 2023 16:50:47 GMT
vary: Accept-Encoding
etag: W/"640a0e67-62a95"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/js/email-decode.min.js

178.236.44.26

200 OK

1.2 kB

URL GET HTTP/2
metzhgofk.com/js/email-decode.min.js
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/email-decode.min.js HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 16:51:06 GMT
vary: Accept-Encoding
etag: W/"640a0e7a-4d7"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/js/jquery-3.4.1.min.220afd743d.js

178.236.44.26

200 OK

88 kB

URL GET HTTP/2
metzhgofk.com/js/jquery-3.4.1.min.220afd743d.js
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic Crypto/Wallet
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery-3.4.1.min.220afd743d.js HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 16:51:04 GMT
vary: Accept-Encoding
etag: W/"640a0e78-15851"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

metzhgofk.com/js/webflow.js

178.236.44.26

200 OK

550 kB

URL GET HTTP/2
metzhgofk.com/js/webflow.js
IP
178.236.44.26:443
ASN
#207190 Yuhonet International Limited

Requested by
https://metzhgofk.com/
Certificate
IssuersslTrus
Subjectwww.metzhgofk.com
Fingerprint12:E8:DA:18:E1:24:C5:FF:59:B6:45:FE:42:8E:FC:4F:C2:A5:87:FE
ValidityMon, 19 Feb 2024 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT

File type

Size
550 kB (549785 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/webflow.js HTTP/1.1
Host: metzhgofk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metzhgofk.com/
Cookie: X_CACHE_KEY=1ea66236d204648ebd69e9a2d90148d2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 18:06:22 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 16:51:05 GMT
vary: Accept-Encoding
etag: W/"640a0e79-86399"
expires: Fri, 26 Apr 2024 06:06:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash