metamask.io.merge.hpmsolutions.ca/secure.html
200 OK
3239
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/secure.html
IP
ASN
#24940 Hetzner Online GmbH
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash
0d9924c70f4d78dd25e5eeacb226f71a
dd9382fe1274d9c01c6c8450ff1fa697cd07984e
d4cfd293ada5554238495c05a9d09887bf542306ac909fdbef1ab3d7b24e5415
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /secure.html HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Last-Modified: Mon, 28 Nov 2022 00:25:32 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3239
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
r3.o.lencr.org/
200 OK
503
IP
ASN
#20940 Akamai International B.V.
Hash
d3098a490e8d38d4150d961624aa7b64
6ecbca59302d0ac5436f1723137d42523f629ea1
158e277ba0220577b59b15e4017b6c27f59295bcd7e5d0e52d027dc7c4309f0b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "158E277BA0220577B59B15E4017B6C27F59295BCD7E5D0E52D027DC7C4309F0B"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9074
Expires: Sat, 31 Dec 2022 08:58:07 GMT
Date: Sat, 31 Dec 2022 06:26:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK
503
IP
ASN
#20940 Akamai International B.V.
Hash
ab3625faa748b97df39d95f3265ccd14
3930df2e3cb45a1abe47de735002fba535de4f08
0b0a1eb64c4a23598884f08be0a9694c8fcaeffc4b0df790a678104f44fe1c14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B0A1EB64C4A23598884F08BE0A9694C8FCAEFFC4B0DF790A678104F44FE1C14"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7486
Expires: Sat, 31 Dec 2022 08:31:39 GMT
Date: Sat, 31 Dec 2022 06:26:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK
939
URL
HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
Magic
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 31 Dec 2022 05:35:37 GMT
content-type: application/json
age: 3076
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK
503
IP
ASN
#20940 Akamai International B.V.
Hash
428881081ad357fb55af33ebf9d12c16
29b7be72f76da07db4a03fb1bc57ffe16d520a22
9adff7f91b147b0d93166bc4ece0dd31fd19fd8b2c269a6a596a1e902f49a1fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9ADFF7F91B147B0D93166BC4ECE0DD31FD19FD8B2C269A6A596A1E902F49A1FE"
Last-Modified: Wed, 28 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5199
Expires: Sat, 31 Dec 2022 07:53:32 GMT
Date: Sat, 31 Dec 2022 06:26:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK
5348
URL
HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
Magic
PEM certificate\012- , ASCII text
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GiLGfS2RfdlxuVLlGOWoZEtpUCfQpcAlG1VGj7oDWrOFpXM4p9UeQq20wuXU4j72mtXkIf1bbDc=
x-amz-request-id: W4SY0C3N7R782EF7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 31 Dec 2022 05:59:30 GMT
age: 1643
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK
12
URL
HTTP/2
contile.services.mozilla.com/v1/tiles
IP
Magic
JSON data\012- , ASCII text, with no line terminators
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 31 Dec 2022 06:26:53 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
metamask.io.merge.hpmsolutions.ca/meta/normalize.css
200 OK
2633
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/normalize.css
IP
ASN
#24940 Hetzner Online GmbH
Hash
74b55c54efadbc58b06a6042cc858472
127ffb851c8bb77bf00de3280d0e078571704de7
435035717bcd1da635fd11e9d0d22c40d2753c48383b1728f66bfd1607bcd54a
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /meta/normalize.css HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 18:30:38 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2633
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/webflow.css
200 OK
9350
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/webflow.css
IP
ASN
#24940 Hetzner Online GmbH
Magic
Unicode text, UTF-8 text, with very long lines (2587)
Hash
d143e827e4004f5af028b3c37e3748dd
7531565e84fd2011b5ca8a9b179ecdd4b65d89b6
f425ff60551250b2f1dc6a40d92d5ab84847781d370740a945b6b8f1866c4e84
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /meta/webflow.css HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 18:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 9350
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/tag.js
200 OK
7583
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/tag.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with very long lines (21652), with no line terminators
Hash
030e152d0cbf5d9c345726676e20f490
d39cd836763535ada905adb47e4d028a80f51849
01cb61852e9ab6166e2651c568c84e93d2dd80a7296b26d2f0539e5dc614787f
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/tag.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:44 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 7583
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/enterprise.js
200 OK
617
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/enterprise.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with very long lines (1008), with no line terminators
Hash
d81ef5cb351ba48ede3354fa5248ce44
9a08bcf54317bb24610116e0650b520b32dcb7e3
69e117e70a745175180e8c577cec146b059da38bfd77265a8544cfc78a51e32b
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/enterprise.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:24 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 617
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/metamask-staging-2.webflow.css
200 OK
17590
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/metamask-staging-2.webflow.css
IP
ASN
#24940 Hetzner Online GmbH
Hash
53ff35d49ab5d2089b65f13389233f86
cf1714af3125e0fc6b07408fa4269ab003baa162
509ea7e5aac1909a1a0b328b497e47f04cd10eaa3927e65a37cf1900bea5996f
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /meta/metamask-staging-2.webflow.css HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Dec 2021 18:30:36 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 17590
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/storage.secure.min.js
200 OK
13331
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/storage.secure.min.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with very long lines (38562), with no line terminators
Hash
3d92102abedfdb24487dce53034d530b
98a4881577f81b625bc08bf33331295fd996df48
b6df362a0fb0fa4eb5c3e8724f44a5a483550e971d2ff3131c82efcfb7d262a2
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/storage.secure.min.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:42 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 13331
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK
472
IP
Hash
069c09a74c8f7ae8409e60844b2cf07d
6ce866430b7e0b579378a7f10c1dbbd45ec95cdf
12bfafd537a26be5b4fe158a347c0e59477be02a9440c0e67b66fc81fe9b96a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Dec 2022 06:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
metamask.io.merge.hpmsolutions.ca/meta/bootstrap-tagsinput.js
200 OK
5491
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/bootstrap-tagsinput.js
IP
ASN
#24940 Hetzner Online GmbH
Hash
5b983ffbdbd303a37f5b153798286001
a4782d23a57b811c34547d75e27bbf0073093413
caa4acd6da83afa0cd99d45b91093277c3fbb93c37f0afa0fa7f9f48761d6919
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/bootstrap-tagsinput.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Nov 2015 11:26:42 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 5491
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/jquery-3.5.1.min.dc5e7f18c8.js
200 OK
30970
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/jquery-3.5.1.min.dc5e7f18c8.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with very long lines (65451)
Hash
21ab05a6dc4822c20e4f8e617d59503e
0431002ed053581f86ceeca6589f3b3fc039d1ee
d55c3c4566cd69b2af1ac0ef1f24f7d9e781bd67701c2e84a2300a8464636b34
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:32 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 30970
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/script.js
200 OK
832
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/script.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with CRLF line terminators
Hash
3143e4a1018d9472497d7a0803f1441e
e768323e37397f612fd9ca43f82a87fd07756909
add4f4304448bb080562a01fd4b0233588eeb5f9ed1e001bdd5bbaad1c93e0ac
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /script.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Mon, 28 Nov 2022 00:27:32 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 832
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/webflow.js
200 OK
147063
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/webflow.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
Unicode text, UTF-8 text, with very long lines (50020)
Hash
8a4663ee78192e5c9506c2a338ce7723
dba17ca619195bfb7ff1a1b55d196bff2029b89f
f2892479732a4c07ecece62f4c8f12fd9ade7fab06766368a9c87f3bbe96dd59
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/webflow.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 147063
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/plx.chock.js
200 OK
312
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/plx.chock.js
IP
ASN
#24940 Hetzner Online GmbH
Hash
f8a281c232ca490b0fb6a69a0a69aa93
8586880ea6c9a49dd4b2b45ee6f7eff01c5c7683
4acac0377cad7da2cbf6e18c4e9096e95484429bf4589b472bbc276c43b6110e
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/plx.chock.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:38 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 312
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/webfont.js
200 OK
5431
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/webfont.js
IP
ASN
#24940 Hetzner Online GmbH
Magic
ASCII text, with very long lines (2134)
Hash
f2e75ef01e8ce9b37cec75250d84e8bf
76e367a654e7cdaa51872ab26a31eb96605b4544
4a40bdcd270c0a713cc75ff940ab738302bb466ad84bd39780d96dfb77bfedde
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/webfont.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 5431
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/css.html
200 OK
274
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/css.html
IP
ASN
#24940 Hetzner Online GmbH
Hash
a0a15fba936f518c2c1c071b0089c64c
6f8526c13dda4943229b9535931f8a6fd169da3a
6e9864f7491582647d88fee2b9503d22fc8735f673bb9be1809437c11af8af96
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/css.html HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Last-Modified: Wed, 22 Dec 2021 18:30:22 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 274
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK
472
IP
Hash
069c09a74c8f7ae8409e60844b2cf07d
6ce866430b7e0b579378a7f10c1dbbd45ec95cdf
12bfafd537a26be5b4fe158a347c0e59477be02a9440c0e67b66fc81fe9b96a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Dec 2022 06:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
metamask.io.merge.hpmsolutions.ca/meta/mm-logo.svg
200 OK
3289
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/mm-logo.svg
IP
ASN
#24940 Hetzner Online GmbH
Magic
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001)
Hash
75536fc9d6e2f24b5d4a43206f59daea
d6b451451650bb4028e6e36562cf590370534324
1fec7292d135f29856c58b107c76d144f532a9a3b5d36acefa89ae4e3e990c61
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/mm-logo.svg HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: image/svg+xml
Last-Modified: Wed, 22 Dec 2021 18:30:36 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3289
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
fonts.googleapis.com/css?family=Changa+One:400,400italic
200 OK
301
URL
HTTP/1.1
fonts.googleapis.com/css?family=Changa+One:400,400italic
IP
Hash
7fb212f619185f162769684274cb1dfe
414b678cfcbcd25c44569e72369a8218bea8756d
d53161ae9523414449dd0f7083f66fda679084bac2cb18a92b884a43616c1fd5
GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 31 Dec 2022 06:26:53 GMT
Date: Sat, 31 Dec 2022 06:26:53 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.sca1b.amazontrust.com/
200 OK
471
URL
HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
Hash
8385305a46120dbee5b0af6a110b162e
b869f00053d5fb05fa1c58463d691708f44767d5
fa4a88460049041b5c03b2c46da053087c712497b0bf2ed3249c39e12b26432c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155038
Date: Sat, 31 Dec 2022 06:26:53 GMT
Etag: "63af90cb-1d7"
Expires: Mon, 02 Jan 2023 01:30:51 GMT
Last-Modified: Sat, 31 Dec 2022 01:30:51 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TRCky61SCn4s3Oa-7_FxykLm5SghzUnSe6OXBmuwIX1ygDmMPZ3ifw==
metamask.io.merge.hpmsolutions.ca/meta/EuclidCircularB-Regular-WebXL.woff2
200 OK
45196
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/EuclidCircularB-Regular-WebXL.woff2
IP
ASN
#24940 Hetzner Online GmbH
Magic
Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data
Hash
2d75957df3bb3aa6ed84f6591b0d5a1a
906424e75625f63b0188471067065794d0348536
8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/meta/metamask-staging-2.webflow.css
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: font/woff2
Last-Modified: Wed, 22 Dec 2021 18:30:26 GMT
Accept-Ranges: bytes
Content-Length: 45196
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK
471
IP
Hash
756c77d7d577e0260b6e1ffc3522e77a
2b7e2dd5b3df6768d0d7d20d67988ac60dc28234
1d1598a7f732980f6376fbadd56d71b4497454939a7b9e784adaa9c3f91883d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Dec 2022 06:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
metamask.io.merge.hpmsolutions.ca/meta/EuclidCircularB-Bold-WebXL.woff2
200 OK
44544
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/EuclidCircularB-Bold-WebXL.woff2
IP
ASN
#24940 Hetzner Online GmbH
Magic
Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data
Hash
9024d0bf73943172297c4628d0054e20
36c3795e7b297d06589e15ef59592683d9ed0974
88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/meta/metamask-staging-2.webflow.css
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: font/woff2
Last-Modified: Wed, 22 Dec 2021 18:30:26 GMT
Accept-Ranges: bytes
Content-Length: 44544
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK
128352
URL
HTTP/2
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
Magic
Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Hash
53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://metamask.io.merge.hpmsolutions.ca
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Dec 2022 20:33:17 GMT
expires: Fri, 29 Dec 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 122016
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
200 OK
7900
URL
HTTP/1.1
fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP
Magic
Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash
61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18
GET /s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://metamask.io.merge.hpmsolutions.ca
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7900
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 27 Dec 2022 23:10:37 GMT
Expires: Wed, 27 Dec 2023 23:10:37 GMT
Cache-Control: public, max-age=31536000
Age: 285376
Last-Modified: Thu, 21 Apr 2022 17:15:19 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK
471
IP
Hash
756c77d7d577e0260b6e1ffc3522e77a
2b7e2dd5b3df6768d0d7d20d67988ac60dc28234
1d1598a7f732980f6376fbadd56d71b4497454939a7b9e784adaa9c3f91883d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 31 Dec 2022 06:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
metamask.io.merge.hpmsolutions.ca/meta/Institutional-Illustration.png
200 OK
289564
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/Institutional-Illustration.png
IP
ASN
#24940 Hetzner Online GmbH
Magic
PNG image data, 876 x 1040, 8-bit/color RGBA, non-interlaced\012- data
Hash
85607339bb7e3cc70e1b7568ed4d29b2
7c6301d70e1ab599857be6e9795b94418cef6079
5bdf1ea203497adb942fa639a322195c744910ae8980d625d986ddead1f8ed37
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /meta/Institutional-Illustration.png HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/meta/metamask-staging-2.webflow.css
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: image/png
Last-Modified: Wed, 22 Dec 2021 18:30:30 GMT
Accept-Ranges: bytes
Content-Length: 289564
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/analytics.js
200 OK
8404
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/analytics.js
IP
ASN
#24940 Hetzner Online GmbH
Hash
141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/analytics.js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Dec 2021 18:30:22 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 20110
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/meta/js
200 OK
329
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/meta/js
IP
ASN
#24940 Hetzner Online GmbH
Magic
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
fortinet
Phishing
GET /meta/js HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Last-Modified: Wed, 22 Dec 2021 18:30:32 GMT
Accept-Ranges: bytes
Content-Length: 92325
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/images/webclip.png
200 OK
0
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/images/webclip.png
IP
ASN
#24940 Hetzner Online GmbH
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /images/webclip.png HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:53 GMT
Content-Type: image/png
Last-Modified: Thu, 23 Dec 2021 00:03:30 GMT
Accept-Ranges: bytes
Content-Length: 0
Date: Sat, 31 Dec 2022 06:26:53 GMT
Server: LiteSpeed
metamask.io.merge.hpmsolutions.ca/images/favicon.png
200 OK
0
URL
HTTP/1.1
metamask.io.merge.hpmsolutions.ca/images/favicon.png
IP
ASN
#24940 Hetzner Online GmbH
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer
Verdict
Alert
openphish
Crypto/Wallet
GET /images/favicon.png HTTP/1.1
Host: metamask.io.merge.hpmsolutions.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/secure.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sat, 07 Jan 2023 06:26:54 GMT
Content-Type: image/png
Last-Modified: Thu, 23 Dec 2021 00:03:30 GMT
Accept-Ranges: bytes
Content-Length: 0
Date: Sat, 31 Dec 2022 06:26:54 GMT
Server: LiteSpeed
ocsp.digicert.com/
200 OK
471
IP
Hash
553f97ab8a2c2f1abe4ee932cf6dab42
9e9433075523efb0cf7d13b6811d237c4b48f099
8a7c26f298fb34ec9d5cbd977a2677118b9360ad3134bb56171c13d4d13da540
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6201
Cache-Control: max-age=102194
Content-Type: application/ocsp-response
Date: Sat, 31 Dec 2022 06:26:54 GMT
Etag: "63aeaa27-1d7"
Expires: Sun, 01 Jan 2023 10:50:08 GMT
Last-Modified: Fri, 30 Dec 2022 09:06:47 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols
0
URL
HTTP/1.1
push.services.mozilla.com/
IP
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mPsz+1qPly84taYjJtOHlg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 335o2jlNF5oe2teqV8x8k6SGU38=
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
404 Not Found
1621
URL
HTTP/2
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash
c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://metamask.io.merge.hpmsolutions.ca
Connection: keep-alive
Referer: http://metamask.io.merge.hpmsolutions.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Sat, 31 Dec 2022 06:26:54 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK
503
IP
ASN
#20940 Akamai International B.V.
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12688
Expires: Sat, 31 Dec 2022 09:58:23 GMT
Date: Sat, 31 Dec 2022 06:26:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK
503
IP
ASN
#20940 Akamai International B.V.
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
162.55.1.104
35.241.9.150
93.184.220.29
95.101.11.115![URL metamask.io.merge.hpmsolutions.ca/meta/mm-logo.svg](/search?q=http.url.addr:"metamask.io.merge.hpmsolutions.ca%2fmeta%2fmm-logo.svg"){kind=link}
![URL metamask.io.merge.hpmsolutions.ca/meta/Institutional-Illustration.png](/search?q=http.url.addr:"metamask.io.merge.hpmsolutions.ca%2fmeta%2fInstitutional-Illustration.png"){kind=link}
![URL metamask.io.merge.hpmsolutions.ca/images/webclip.png](/search?q=http.url.addr:"metamask.io.merge.hpmsolutions.ca%2fimages%2fwebclip.png"){kind=link}
![URL metamask.io.merge.hpmsolutions.ca/images/favicon.png](/search?q=http.url.addr:"metamask.io.merge.hpmsolutions.ca%2fimages%2ffavicon.png"){kind=link}