metamask.itoken.cool/css/normalize.css
194.124.216.88200 OK 3.4 kB URL GET HTTP/2 metamask.itoken.cool/css/normalize.css
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type gzip compressed data, from Unix\012- data
Hash 6826603d54291a63a52a3bc199200b97
d829cd186aa0a713bff5bb8e04fa381d589a12d8
77e58875d025209ab9817bf9095c1270e375b6f6f5ed04cd285ab2756f27b852
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /css/normalize.css HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-1e5c"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/YVgfHZMFFFQ/sddefault.webp
142.250.74.118200 OK 18 kB URL GET HTTP/2 i.ytimg.com/vi_webp/YVgfHZMFFFQ/sddefault.webp
IP 142.250.74.118:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint30:FC:ED:56:9F:85:39:F1:1B:87:3B:5E:09:20:49:BB:39:CC:EA:8D
ValidityMon, 16 Oct 2023 08:02:25 GMT - Mon, 08 Jan 2024 08:02:24 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d288755975f12c1b804cce683a56b56b
af27df3ca58c18ccfa231b3ad5089e11b29fb4e1
f27731898ea8846c9a9f428fb8cbe2da7c832a4bb6032af7b4b7f0c64f81de55
GET /vi_webp/YVgfHZMFFFQ/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 17:40:03 GMT
expires: Thu, 16 Nov 2023 19:40:03 GMT
cache-control: public, max-age=7200
etag: "1582837014"
content-type: image/webp
vary: Origin
age: 4116
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metamask.itoken.cool/images/mm-logo.svg
194.124.216.88200 OK 12 kB URL GET HTTP/2 metamask.itoken.cool/images/mm-logo.svg
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001)
Hash 51bcea2625eb2c6e9268a7377a792c86
5eeb306e6584eed1747c36c11724f193711d430e
5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/mm-logo.svg HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/svg+xml
content-length: 12019
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-2ef3"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/social-35.svg
194.124.216.88200 OK 602 B URL GET HTTP/2 metamask.itoken.cool/images/social-35.svg
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d5e7fa6bfac5cb057e4974b17d5f0e53
fd3f64fd6b8fc6bb097bcd065337c70d8d2cef37
bcba47e61462fcaa7a59953d7af48a777438587b79faf7fcda5831cea8e9a7da
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/social-35.svg HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/svg+xml
content-length: 602
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-25a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/wallet-illo.svg
194.124.216.88200 OK 36 kB URL GET HTTP/2 metamask.itoken.cool/images/wallet-illo.svg
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1199)
Hash 63ad7f01f67accd6aafb47999640abe5
5ed10575a1a39d5b02840416a281fb1e655bd423
596228062de19a21cfda4d3129b3a5d397c5a71509e096b8f67fb8c4f22aa56d
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/wallet-illo.svg HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/svg+xml
content-length: 36437
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-8e55"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/Explore-illo.svg
194.124.216.88200 OK 37 kB URL GET HTTP/2 metamask.itoken.cool/images/Explore-illo.svg
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1527)
Hash 46fb450c5ecf6da758bca0975551f056
629157e884b450ecf5a94d38d736db3c7428245f
8ba2b37fd4f2f3c19c10109bc6111d3d71692c78f9351f1eb2a8cab5231b77b5
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/Explore-illo.svg HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/svg+xml
content-length: 36835
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-8fe3"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/Browse-illo.svg
194.124.216.88200 OK 28 kB URL GET HTTP/2 metamask.itoken.cool/images/Browse-illo.svg
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2226)
Hash afeafb6a9f14bd7771c63015be5a05c9
78683c75d81cf80440f083e9fb4bb2987748e290
517c0c6b44ede59070fb138aab7e875b9c230a227295f9612c32dabb9b0bdb13
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/Browse-illo.svg HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/svg+xml
content-length: 28164
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-6e04"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-aave.png
194.124.216.88200 OK 14 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-aave.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Hash 521a00d54b7fe1cb1d7712b655ca54a6
8c5aa52335bf25183781e62843ede770bf6877ba
506d6d9d5ad22253976f2906bbf141c94d19eb15466ed62b8c6cfb887bf07b55
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-aave.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 14347
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-380b"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-axieinfinity.png
194.124.216.88200 OK 43 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-axieinfinity.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f662391fe3ddc927134ba8e15263eaf
ab5ea7aacdc8c97238247f59761abc02033b2a67
7faefc7f99e94d6251527c95794a5fdfb3e644baf25ae56f4e13afd125246421
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-axieinfinity.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 42713
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-a6d9"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-compound.png
194.124.216.88200 OK 11 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-compound.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 3818f9cfccbd94fad91a10d3c5ee356c
7c6af849177aa8bf6ef9bcbf801dc375e1997900
20a34c84f82590d99a060210ea362878975f21cfd65c3a70c54e7fb99dce1f76
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-compound.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 11355
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-2c5b"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-gitcoin.png
194.124.216.88200 OK 8.0 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-gitcoin.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash c710e9a5c39e89136a73edf0a1c99abe
aca40362b7d87533d00250e102ba852d19e2231c
7077eb7da3a6f399014d67a1032ab6d67f099055a1a2594cb4753022b843dc43
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-gitcoin.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 7998
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-1f3e"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-maker.png
194.124.216.88200 OK 6.9 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-maker.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 720871ca002e89a10d26e5c516066311
8648fe12645cd5c3473a73faba1d42cef78de444
f0d7356ee903d26301b8960783f70c108efc0382f20c804e0d09872a5443ce96
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-maker.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 6852
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-1ac4"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-opensea.png
194.124.216.88200 OK 6.5 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-opensea.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash f82776f839cec899c9c87a680226aabf
43f5dedb6216cb02ee568fcb66cb19fc296c3a85
c62a1f30cdb6aff5eafdfccb45383032e61bf70aa0573572a4428347a1b5b116
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-opensea.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 6533
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-1985"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-rarible.png
194.124.216.88200 OK 6.8 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-rarible.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced\012- data
Hash b9f7c0fd11c34c044799e673947103f8
491baab057af39b2b24bf0c671d0eb05454b8c48
29db12a282df5639db8fa232831bbe9a7220884eecf79f1776f1b27237a4597c
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-rarible.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 6840
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-1ab8"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/dapp-uniswap.png
194.124.216.88200 OK 10 kB URL GET HTTP/2 metamask.itoken.cool/images/dapp-uniswap.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 1948962ad395727d902bd6b5fcd01807
f7e85e096b084ef6d9f550afbcd702fd889031a5
ad0237265584181a6797c454ca123aa5d3df08001ae39b27bddfc66856b6751b
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/dapp-uniswap.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 10268
last-modified: Fri, 10 Sep 2021 16:15:20 GMT
etag: "613b8498-281c"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/images/mm-shop-hoodie.webp
194.124.216.88200 OK 40 kB URL GET HTTP/2 metamask.itoken.cool/images/mm-shop-hoodie.webp
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash e3357edaca1414398f4718c0c0816513
e909e243cd3891d283e4567d39d18c7108d5b693
12101946345b34460572862174ba2b964eed74d428181cd26686a95f6e2456c3
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/mm-shop-hoodie.webp HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/webp
content-length: 40434
last-modified: Tue, 19 Sep 2023 04:04:48 GMT
etag: "65091de0-9df2"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/gtag/js.js
194.124.216.88200 OK 45 kB URL GET HTTP/2 metamask.itoken.cool/gtag/js.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type gzip compressed data, from Unix\012- data
Hash 593514380906b8dd449a8022630b0435
8f241b287054cdd33c89004f82bd1f5da67074af
140a578b26bf80dfa7e748f95d60a524f1759e5c7064c9a0cfa961fba36a1bfe
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /gtag/js.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-1949c"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/images/hero2.2.png
194.124.216.88200 OK 590 kB URL GET HTTP/2 metamask.itoken.cool/images/hero2.2.png
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type PNG image data, 1752 x 1452, 8-bit/color RGBA, non-interlaced\012- data
Size 590 kB (589568 bytes)
Hash d0ec70f4c666fbf6ad0d30a52d08c5c9
e48f0688bc4f592824840478d12c05df0dd12002
3f4bfc7c6cc471e9d95936dc109852c4f6a4bf1163b63eeabfe840565d5ad8d1
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /images/hero2.2.png HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/css/metamask-staging-2.webflow.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: image/png
content-length: 589568
last-modified: Fri, 10 Sep 2021 16:16:30 GMT
etag: "613b84de-8ff00"
expires: Sat, 16 Dec 2023 18:48:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/css/metamask-staging-2.webflow.css
194.124.216.88200 OK 67 kB URL GET HTTP/2 metamask.itoken.cool/css/metamask-staging-2.webflow.css
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type gzip compressed data, from Unix\012- data
Hash 69b2bb3775b8a0cc2e1d30e7df1cac40
c8f06e8f4bae9cd43ada2a6dd9f85e649bb718ed
d4efc648ad03aa700ed9a93090d6b26d75ae6905e5dccbc8d300007d5f70706b
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /css/metamask-staging-2.webflow.css HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-21433"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/ajax/libs/webfont/1.6.26/webfont.js
194.124.216.88200 OK 50 kB URL GET HTTP/2 metamask.itoken.cool/ajax/libs/webfont/1.6.26/webfont.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type gzip compressed data, from Unix\012- data
Hash ebe4ee47693787711017ae140e837bf9
97105dbfd34a41c71fb55213dbc44e1c57bb2ce3
1dccfd0a99cfce71f6ceab49defb413dc591b7a8f2cf06f3afdfad824362053f
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-3384"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/logo.js
194.124.216.88200 OK 13 kB URL GET HTTP/2 metamask.itoken.cool/logo.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type gzip compressed data, from Unix\012- data
Hash 0ce807fb278403ae2400521c839a6dfa
35bb20ce5282fc7832001b0342c7eab77015edeb
039a6fed1bb1c5b3ba10723d57d10abee610c8ac99b786747d42af86b64257bd
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /logo.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-b430"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Changa+One:400,400italic
142.250.74.106200 OK 2.4 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Changa+One:400,400italic
IP 142.250.74.106:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type gzip compressed data, max compression\012- data
Hash 2c2053edab036e308b4a6652f0eb78f1
94c24b45e62b6a4c8e6750d892d202014db55798
30be23f0f8a4a0f0a45dc06afe8f966567c84dd3f05f8c640d4c989d762247c8
GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 16 Nov 2023 18:48:40 GMT
date: Thu, 16 Nov 2023 18:48:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
142.250.74.131200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP 142.250.74.131:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash 61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18
GET /s/changaone/v20/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metamask.itoken.cool
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Nov 2023 21:37:08 GMT
expires: Wed, 13 Nov 2024 21:37:08 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:10:56 GMT
content-type: font/woff2
age: 162692
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
142.250.74.131200 OK 8.4 kB URL GET HTTP/2 fonts.gstatic.com/s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP 142.250.74.131:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data
Hash 141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff
GET /s/changaone/v20/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://metamask.itoken.cool
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:56:51 GMT
expires: Thu, 14 Nov 2024 21:56:51 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:56:52 GMT
content-type: font/woff2
age: 75109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/embed.js
142.250.74.46200 OK 18 kB URL GET HTTP/3 www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/embed.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (3391)
Hash fda5c73a715a9685a983d3379218b98b
59a6c433e8f9de0b9d3a5a02fb4e355bcfcd2e11
4746733516248125afae673cec62e34fc6e7f5c84b6cb8136fbf5a2c7defa0ea
GET /s/player/f279c958/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 17509
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 05:07:47 GMT
expires: Fri, 15 Nov 2024 05:07:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Nov 2023 02:44:21 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 49253
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:51:07 GMT
expires: Thu, 14 Nov 2024 21:51:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 75453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 23:42:20 GMT
expires: Tue, 12 Nov 2024 23:42:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 241580
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/f279c958/www-player.css
142.250.74.46200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/f279c958/www-player.css
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4edc0bee7b2270faa8b15d598a6ad35a
854b9aff2c30c71a3430feefa15d3f21bee2f51d
8c38e4137faa1fea4776e411312ad0598bc3ec1c5ba8a3f2d65eccc83933eabb
GET /s/player/f279c958/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48775
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 08:32:22 GMT
expires: Tue, 12 Nov 2024 08:32:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Nov 2023 02:44:21 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 296178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/f279c958/www-embed-player.vflset/www-embed-player.js
142.250.74.46200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/f279c958/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (682)
Hash 83db8428e44a2a2d842af368e2330c5a
a037d52b0a6992730954f08733648191f66325c7
4555875a8640e4a11fe3e23b0bb2f6b0ed23498b183e54bdaf91e32f3fdf7b2d
GET /s/player/f279c958/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98479
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 05:22:42 GMT
expires: Fri, 15 Nov 2024 05:22:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Nov 2023 02:44:21 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 48358
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/base.js
142.250.74.46200 OK 777 kB URL GET HTTP/3 www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/base.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (555)
Size 777 kB (776965 bytes)
Hash 2982db7abb4073d8106237399d58343b
d8924576f0706e0f0ccd545586b6397cabec829a
9ad7ed49e791fcae74821a911e0115753b0745a09e03ade6133b86644f8a4c59
GET /s/player/f279c958/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 776965
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 08:32:22 GMT
expires: Tue, 12 Nov 2024 08:32:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Nov 2023 02:44:21 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 296178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (682)
Size 191 kB (191412 bytes)
Hash fbeedf13eeb71cbe02bc458db14b7539
38ce3a321b003e0c89f8b2e00972caa26485a6e0
09ed391c987b3b27df5080114e00377ff1a748793cb417a809b33f22d737fe55
GET /recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://metamask.itoken.cool
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 05:17:01 GMT
expires: Fri, 15 Nov 2024 05:17:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 03:03:27 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 48699
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
142.250.74.164200 OK 59 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
IP 142.250.74.164:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52972)
Hash 52fddd1669455142f618e5b267820310
3f6f42b72f187a0b7322e09c923bb9402a0c0464
f02f3207b9a62f0fc8707d763501a2ce88353fd31092c3d0fed43812044b6d1f
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 16 Nov 2023 18:48:41 GMT
content-security-policy: script-src 'nonce-l94y6dnvspXZODazk0XBOg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (682)
Size 191 kB (191412 bytes)
Hash fbeedf13eeb71cbe02bc458db14b7539
38ce3a321b003e0c89f8b2e00972caa26485a6e0
09ed391c987b3b27df5080114e00377ff1a748793cb417a809b33f22d737fe55
GET /recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 05:17:01 GMT
expires: Fri, 15 Nov 2024 05:17:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 03:03:27 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 48700
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
104.18.176.125200 OK 35 B URL GET HTTP/3 perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
IP 104.18.176.125:443
Requested by https://metamask.itoken.cool/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067 HTTP/1.1
Host: perf.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 16 Nov 2023 18:48:41 GMT
content-type: image/gif
content-length: 35
x-trace: 2BEFC8148EAC79B72F7D92273DC50C7BFA6291BD0F000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin, Accept-Encoding
access-control-allow-credentials: false
x-content-type-options: nosniff
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
x-envoy-upstream-service-time: 6
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-56dcc87b5c-jg7jb
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: cb7591df-9cdf-4454-aab5-8b5d5c746925
x-request-id: cb7591df-9cdf-4454-aab5-8b5d5c746925
last-modified: Thu, 16 Nov 2023 18:48:41 GMT
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8271e8d8cf6d0afa-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:51:07 GMT
expires: Thu, 14 Nov 2024 21:51:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 75454
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 23:42:20 GMT
expires: Tue, 12 Nov 2024 23:42:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 241581
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:37:43 GMT
expires: Wed, 22 Nov 2023 21:37:43 GMT
cache-control: public, max-age=604800
age: 76258
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (682)
Size 191 kB (191412 bytes)
Hash fbeedf13eeb71cbe02bc458db14b7539
38ce3a321b003e0c89f8b2e00972caa26485a6e0
09ed391c987b3b27df5080114e00377ff1a748793cb417a809b33f22d737fe55
GET /recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 191412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 05:17:01 GMT
expires: Fri, 15 Nov 2024 05:17:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 03:03:27 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 48700
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/YVgfHZMFFFQ/default.jpg
142.250.74.118200 OK 2.5 kB URL GET HTTP/3 i.ytimg.com/vi/YVgfHZMFFFQ/default.jpg
IP 142.250.74.118:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint30:FC:ED:56:9F:85:39:F1:1B:87:3B:5E:09:20:49:BB:39:CC:EA:8D
ValidityMon, 16 Oct 2023 08:02:25 GMT - Mon, 08 Jan 2024 08:02:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 45fee137d2228a1f262812895de57314
7bc9d830a8bac5d4cfdc56ff1224225a9bf1f982
dd603175ee9073585d706f1d8c6f328e6b06bc9e28faae47a5b92f09cd837c75
GET /vi/YVgfHZMFFFQ/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 2528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 17:35:22 GMT
expires: Thu, 16 Nov 2023 19:35:22 GMT
cache-control: public, max-age=7200
etag: "1582837014"
content-type: image/jpeg
vary: Origin
age: 4399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.74200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.74:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 16 Nov 2023 18:48:41 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/remote.js
142.250.74.46200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/f279c958/player_ias.vflset/en_US/remote.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (537)
Hash 845d03d834d0e78e70eada40ad815960
de4f7c9a8c24e2d2bfb334a0c2c40690bd87212d
bae37b0276ae235a5a2ca2825c2f56315e0db36f25b90a4261a6b492c2033a65
GET /s/player/f279c958/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33485
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 08:39:00 GMT
expires: Tue, 12 Nov 2024 08:39:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Nov 2023 02:44:21 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 295781
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/hozbaArpAcEtb7ltfJysqAapnffmHDhQfzgy1UI8b00.js
142.250.74.164200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/hozbaArpAcEtb7ltfJysqAapnffmHDhQfzgy1UI8b00.js
IP 142.250.74.164:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (38538)
Hash 35833bcc74f6969a09468d9a8e9f1bff
5d1e24c030570a3de5b50a98a363cd4b04bfbd6f
868cdb680ae901c12d6fb96d7c9caca806a99df7e61c38507f3832d5423c6f4d
GET /js/th/hozbaArpAcEtb7ltfJysqAapnffmHDhQfzgy1UI8b00.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15147
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:51:10 GMT
expires: Thu, 14 Nov 2024 21:51:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 75451
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.74200 OK 32 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.74:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 1b7091d15e4014611e302ca4fb193203
292ee0177a8be2912bd8e7d607e70c43aff5e77c
c89fa5e3632faf30f3cb87177cb084b3d304ef43a471246fef8ef539aac87e6d
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 16 Nov 2023 18:48:41 GMT
server: ESF
cache-control: private
content-length: 32527
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/APkrFKauCeUBZZUfQdBcWGLfqZ9nV8P6uKcVDO4VmtCx=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.7 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKauCeUBZZUfQdBcWGLfqZ9nV8P6uKcVDO4VmtCx=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 6b9680c9e0e4b8f66f2eb05e767c68eb
1bac27e970d3f77973c4e877f56acc1b844885bd
73360daef1e2781c6fe96e9150f10f2e4bbfe239940e15aa93cad4a901e10ce7
GET /ytc/APkrFKauCeUBZZUfQdBcWGLfqZ9nV8P6uKcVDO4VmtCx=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2716
x-xss-protection: 0
date: Thu, 16 Nov 2023 16:47:16 GMT
expires: Fri, 17 Nov 2023 16:47:16 GMT
cache-control: public, max-age=86400, no-transform
age: 7285
etag: "v1c"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/generate_204?nIV2FQ
142.250.74.46204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?nIV2FQ
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?nIV2FQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 16 Nov 2023 18:48:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 11:04:45 GMT
expires: Fri, 15 Nov 2024 11:04:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 03:03:27 GMT
content-type: text/css
vary: Accept-Encoding
age: 27837
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.74200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.74:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 16 Nov 2023 18:48:42 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.74200 OK 110 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.74:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash aecb700a33516ec028e29fb75d6815f8
0a25ecd61a284ca8e2e42c1258a72a192e4d5ce5
3bcf3e42fc2224b1623bb786e0932e8e2a61810f181d1bb2d913591cdafb4bc2
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1235
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 16 Nov 2023 18:48:42 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
142.250.74.164200 OK 41 kB URL POST HTTP/3 www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 142.250.74.164:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type gzip compressed data\012- data
Hash 55fd2d6c31fae84e1bb3bff372e6094f
fcbf2265e42ff1b2914730e01a0a748a369f031f
d4ff0ed46083d1af12050f18f73bd8368dd84bf97c7b189bf3d3f804d2e2c08f
POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 7815
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Thu, 16 Nov 2023 18:48:42 GMT
expires: Thu, 16 Nov 2023 18:48:42 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09ALvilpYsLK_PBaSOHVGoxTR2NzVl41zyY5hqsoKMYJeTkgxSBOc2bZHJ0lOtZuvFqnWszmbzq39eFae5Bkt-TGg;Path=/recaptcha;Expires=Tue, 14-May-2024 18:48:42 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:51:07 GMT
expires: Thu, 14 Nov 2024 21:51:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
age: 75455
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 23:42:20 GMT
expires: Tue, 12 Nov 2024 23:42:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 241582
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/canonical_car.png
142.250.74.35200 OK 11 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/canonical_car.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash a4741c6089e163f0e5c0cdb2c698a03e
03b190c8d9350802cbabbccd2757cff1fb7115f0
c9685b413894b0647b42edf9cac1fc0b2ed044c1fe238d843b9ca3d29db1b805
GET /recaptcha/api2/canonical_car.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 11174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:58:28 GMT
expires: Thu, 23 Nov 2023 04:58:28 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 49814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
142.250.74.35200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:50:52 GMT
expires: Thu, 23 Nov 2023 04:50:52 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 50270
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Ow0lsVMa0v6asivAnTw99OH0eo2YvhCTTa4SzsMSkx9ttSgogwC2k9XpCRvK2jAlz0yW8VriD2rt1B9OVKcDaibaxWH5Hq6ONmicPXC00tAKkLgUtJbtrxD4sUP5Ch1lr_HpBzWDzgLs5qURxkS45bJBlA952B7nD6EIjPOrRz9OvM00EGQ6vuk-wM79geUilGRWV&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
142.250.74.164200 OK 42 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Ow0lsVMa0v6asivAnTw99OH0eo2YvhCTTa4SzsMSkx9ttSgogwC2k9XpCRvK2jAlz0yW8VriD2rt1B9OVKcDaibaxWH5Hq6ONmicPXC00tAKkLgUtJbtrxD4sUP5Ch1lr_HpBzWDzgLs5qURxkS45bJBlA952B7nD6EIjPOrRz9OvM00EGQ6vuk-wM79geUilGRWV&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 142.250.74.164:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 7f31002fb6278800c350e90f855f9625
d778036369db6b3c2da7c1494ba98178626048bb
187d26b235a24b36c79e78daa5d1f6606c2cc8d4a6e33eaa79d45ddab414d355
GET /recaptcha/enterprise/payload?p=06AFcWeA6Ow0lsVMa0v6asivAnTw99OH0eo2YvhCTTa4SzsMSkx9ttSgogwC2k9XpCRvK2jAlz0yW8VriD2rt1B9OVKcDaibaxWH5Hq6ONmicPXC00tAKkLgUtJbtrxD4sUP5Ch1lr_HpBzWDzgLs5qURxkS45bJBlA952B7nD6EIjPOrRz9OvM00EGQ6vuk-wM79geUilGRWV&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09ALvilpYsLK_PBaSOHVGoxTR2NzVl41zyY5hqsoKMYJeTkgxSBOc2bZHJ0lOtZuvFqnWszmbzq39eFae5Bkt-TGg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
expires: Thu, 16 Nov 2023 18:48:42 GMT
date: Thu, 16 Nov 2023 18:48:42 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:58:54 GMT
expires: Thu, 23 Nov 2023 04:58:54 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 49788
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.46200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1700160525242
Content-Type: application/json
X-Goog-Visitor-Id: CgtwdV9SOGlwNGp4SSiIyNmqBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231112.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1700160521932&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 16314
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 16 Nov 2023 18:48:44 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+027; expires=Sat, 15-Nov-2025 18:48:44 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 16 Nov 2023 18:48:44 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.46200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1700160538294
Content-Type: application/json
X-Goog-Visitor-Id: CgtwdV9SOGlwNGp4SSiIyNmqBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231112.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1700160521411&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 841
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 16 Nov 2023 18:48:57 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+644; expires=Sat, 15-Nov-2025 18:48:57 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 16 Nov 2023 18:48:57 GMT
cache-control: private
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/fGZmEzpfeSeqDJiApS_XZ4Y2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 15:12:23 GMT
expires: Thu, 23 Nov 2023 15:12:23 GMT
cache-control: public, max-age=604800
age: 12979
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
metamask.itoken.cool/fonts/EuclidCircularB-Regular-WebXL.woff2
194.124.216.88200 OK 45 kB URL GET HTTP/2 metamask.itoken.cool/fonts/EuclidCircularB-Regular-WebXL.woff2
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data
Hash 2d75957df3bb3aa6ed84f6591b0d5a1a
906424e75625f63b0188471067065794d0348536
8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/css/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: font/woff2
content-length: 45196
last-modified: Fri, 10 Sep 2021 16:16:34 GMT
etag: "613b84e2-b08c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/metamask.io/images/favicon.html
194.124.216.88404 Not Found 16 B URL GET HTTP/2 metamask.itoken.cool/metamask.io/images/favicon.html
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type ASCII text, with no line terminators
Hash b66469b1a9b2ae3237fe8ac4dfbce9f7
9f63fd3619499042a86a06e6c3cee658f3ab06cd
0e72236d9a6242406b05e806eb1d7d706a4ef0d080110425d2861b989e8498f5
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /metamask.io/images/favicon.html HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 16 Nov 2023 18:48:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
142.250.74.46200 OK 93 kB URL GET HTTP/2 www.youtube.com/embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io
IP 142.250.74.46:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/YVgfHZMFFFQ?enablejsapi=1&origin=https%3A%2F%2Fmetamask.io HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 16 Nov 2023 18:48:40 GMT
strict-transport-security: max-age=31536000
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=qzio7UAVax8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=pu_R8ip4jxI; Domain=.youtube.com; Expires=Tue, 14-May-2024 18:48:40 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Tue, 14-May-2024 18:48:40 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+801; expires=Sat, 15-Nov-2025 18:48:40 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
104.18.176.125200 OK 5.8 kB URL GET HTTP/1.1 forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
IP 104.18.176.125:443
Requested by https://metamask.itoken.cool/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (6516), with no line terminators
Hash d3b62fe3f29ebdff59da5163723cab3d
0cede507834320918f1098118d119ee587a6d566
c364184a0f7d061960810b27299eb56e2d3a581a7de749aee926daa4a95cb625
GET /embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk= HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:48:40 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace: 2BC3C3C76F609E4AD1FC9859FA81D27A32DA2E642A000000000000000000
X-Origin-Hublet: na1
Vary: origin
Content-Disposition: attachment; filename=no-rfd.txt
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: false
Access-Control-Expose-Headers: X-Origin-Hublet
Cache-Control: max-age=0, no-cache, no-store
X-Robots-Tag: none
x-envoy-upstream-service-time: 15
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-56dcc87b5c-2d2n7
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
X-HubSpot-Correlation-Id: a98b8b75-e30d-4fb9-914c-86e1fadffd80
x-request-id: a98b8b75-e30d-4fb9-914c-86e1fadffd80
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 8271e8d39b6b7131-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2
142.250.74.164200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2
IP 142.250.74.164:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with no line terminators
Hash ae046cc7c5325bdd7e3fac162767bf0b
879d996eafe340361a99fabb5f2422073c41e17e
5f6707358cdb63bdc85124260711d17242baf09cdbae1395b8cb461bebe7793c
GET /recaptcha/enterprise/webworker.js?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9tZXRhbWFzay5pdG9rZW4uY29vbDo0NDM.&hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&size=invisible&badge=inline&cb=bl6qe0j1min6
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 16 Nov 2023 18:48:41 GMT
date: Thu, 16 Nov 2023 18:48:41 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
194.124.216.88200 OK 19 kB URL User Request GET HTTP/2 IP 194.124.216.88:443
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET / HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: text/html
last-modified: Tue, 19 Sep 2023 04:26:42 GMT
vary: Accept-Encoding
etag: W/"65092302-4889"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/js/webflow.js
194.124.216.88200 OK 568 kB URL GET HTTP/2 metamask.itoken.cool/js/webflow.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
Size 568 kB (568434 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /js/webflow.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-8ac72"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/js/jquery-3.5.1.min.dc5e7f18c8.js
194.124.216.88200 OK 90 kB URL GET HTTP/2 metamask.itoken.cool/js/jquery-3.5.1.min.dc5e7f18c8.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-15d84"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
142.250.74.164200 OK 1.0 kB URL GET HTTP/2 www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
IP 142.250.74.164:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF5:CC:DA:B5:BA:1E:14:14:44:CC:27:90:92:CC:60:1F:5F:08:AF:77
ValidityMon, 16 Oct 2023 08:10:46 GMT - Mon, 08 Jan 2024 08:10:45 GMT
File type ASCII text, with very long lines (1008), with no line terminators
Hash d5e35421bd38fefbe7aa844195375038
d80b0e5900f4a940395767a6e80ee167e4a02592
e2dfe4b164e2a6d49360b803afae1ac47546c35a47c0112471f53519ebc5d1b4
GET /recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 16 Nov 2023 18:48:40 GMT
date: Thu, 16 Nov 2023 18:48:40 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metamask.itoken.cool/forms/v2.js
194.124.216.88200 OK 584 kB URL GET HTTP/2 metamask.itoken.cool/forms/v2.js
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
Size 584 kB (583650 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /forms/v2.js HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-8e7e2"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
metamask.itoken.cool/fonts/EuclidCircularB-Bold-WebXL.woff2
194.124.216.88200 OK 44 kB URL GET HTTP/2 metamask.itoken.cool/fonts/EuclidCircularB-Bold-WebXL.woff2
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data
Hash 9024d0bf73943172297c4628d0054e20
36c3795e7b297d06589e15ef59592683d9ed0974
88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /fonts/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/css/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: font/woff2
content-length: 44544
last-modified: Fri, 10 Sep 2021 16:16:34 GMT
etag: "613b84e2-ae00"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
metamask.itoken.cool/css/webflow.css
194.124.216.88200 OK 39 kB URL GET HTTP/2 metamask.itoken.cool/css/webflow.css
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /css/webflow.css HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 16 Nov 2023 18:48:39 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 16:18:28 GMT
vary: Accept-Encoding
etag: W/"613b8554-98c5"
expires: Fri, 17 Nov 2023 06:48:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
142.250.74.164200 OK 7.3 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 142.250.74.164:443
Requested by https://metamask.itoken.cool/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7489), with no line terminators
Hash 84ccd20acedd971dbcf4029cdfda2b98
a9f7d8300e3b1eb219ef17d372292c4ec5d11370
e638e8b82074f805ecb17779c385403604ca83abe122c38747be9663e5bbf031
GET /recaptcha/enterprise/bframe?hl=en&v=fGZmEzpfeSeqDJiApS_XZ4Y2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 16 Nov 2023 18:48:41 GMT
content-security-policy: script-src 'nonce-Jy1n7c9Gw4g7Yid9mSU4yA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
metamask.itoken.cool/metamask.io/images/webclip.html
194.124.216.88404 Not Found 16 B URL GET HTTP/2 metamask.itoken.cool/metamask.io/images/webclip.html
IP 194.124.216.88:443
Requested by https://metamask.itoken.cool/
Certificate IssuerLet's Encrypt
Subjectmetamask.itoken.cool
Fingerprint8E:1E:21:82:C5:59:97:E1:29:FA:E2:03:74:DC:7D:01:FB:CA:F4:F7
ValidityThu, 16 Nov 2023 06:26:57 GMT - Wed, 14 Feb 2024 06:26:56 GMT
File type ASCII text, with no line terminators
Hash b66469b1a9b2ae3237fe8ac4dfbce9f7
9f63fd3619499042a86a06e6c3cee658f3ab06cd
0e72236d9a6242406b05e806eb1d7d706a4ef0d080110425d2861b989e8498f5
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
PhishTank phishing Other
GET /metamask.io/images/webclip.html HTTP/1.1
Host: metamask.itoken.cool
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metamask.itoken.cool/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 16 Nov 2023 18:48:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2