{"report_id":"875ab788-104c-4c46-9099-b14c94bea151","version":0,"status":"done","tags":[],"date":"2026-08-26T11:07:47Z","url":{"schema":"http","addr":"metamwallet.icu/","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"metamwallet.icu/","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"title":"The Ultimate Crypto Wallet for DeFi, Web3 Apps, and NFTs","dom":{"size":138876,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57258)","md5":"ae71f67934f99340da01bdb76627b069","sha1":"877ebcefbd2b333ae2e697928d2bbf8ca6642213","sha256":"dfbb854845fcd601c52c1d9c43d9649cfe8acb1f94c80d615f336463114ec753","sha512":"85a4f489d4c04e7ef46904ebb9b73b1e4d5fcaf1a6ba7750948411f4e474268f92f8ccb3eb513639bb695eba5ff1a87982c5abf8f4835389e1dc254355ebd295","ssdeep":"3072:VJ6u6KXH7bqK/SjXoyd/JCDJZ+y/7U0NNCWzvYVp:VkuJXH7bq9j6DJZ+y/7U0NNCWzvYH","tlshash":"cbd33bb046545436c4835a87ecb5ff3e79e6025f8ac2886dbebaa3dc06e9d644ddf001","dom_hash":"domhash9153fcde2c0118614ea4f0992814c371","first_seen":"2026-08-26T11:07:56.787197Z","last_seen":"2026-08-26T11:10:36.380492Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamwallet.icu/","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:07:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metamwallet.icu","ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":125,"request_count":25,"received_data":5753173,"sent_data":13055,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Gatsby:5.12.10","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":2,"received_data":32520,"sent_data":1096,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.ctfassets.net","ip":{"addr":"108.157.229.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-08-20T20:52:26.053315Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":643,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-08-24T09:24:03.152871Z","alert_count":0,"request_count":1,"received_data":1517,"sent_data":557,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamwallet.icu/index_files/remote.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef03829bbe01a4f32cf9cdfc73ba643","sha1":"9ea6d2ff8621351bb5dfb0274fe782b795b46c0c","sha256":"047f94e2ed0ca1451de468524e9ef152cd7c2d4aa2def8cea83bed36cd99c269","sha512":"27a8aafa72dccd76371831e6524a6b4113863e6ea09a3456f35c284d8155b684a03c4a95c609f4db265dca52d9c9de0e6437d587394198ec4b42febae91135df","ssdeep":"3072:Ajgoz0IdK8wKysxzl5jqv36oQjuXlETwiBqPu6eqE0gBOCMI6r:CNwIdK8P1I36oQjuXlETwiBqPu6eqE05","tlshash":"58c3e798b9027422a273f8b5193f110d963b2595f8844a6c328ddcd2de78d9d423bfbc","size":120550,"data":"","first_seen":"2025-04-30T14:46:01.061766Z","last_seen":"2026-08-26T11:10:36.388962Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-26T16:45:34.785607Z","times_seen":301076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b66c3c0ab06602a758aec5e1ddadfd29","sha1":"a7e01397c2a2289751ff48dffc2deb9f941d6227","sha256":"b7529aca8002a1f711c446c9cc7919b86b7814882f11a609e9b2b3304188a10d","sha512":"44fd240ddb60a514eb9a91c37ec51f74803e2bdfcea945ec7b3178ac9652909d5bbcb4cb616751298273d0acc07e36dda70896078d40fc332eb12e3e8212ad79","ssdeep":"","tlshash":"4ec04c78402080f59659501c7438f7c07dbd3b673463e047d52c621965f5d057c94a11","size":138,"data":"","first_seen":"2023-05-10T12:25:15Z","last_seen":"2026-08-26T11:10:36.404439Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-08-26T16:12:01.529038Z","times_seen":22740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0255ad6d2ae2a63e128b5386884c227e","sha1":"51298da1962c260990d37cae645a2b5fed06710c","sha256":"5d605cd208c7432387cf2a569e4f093c6ed87fa8eac5821fb4503f8bc5c94b94","sha512":"c6587e20bbf743a17b7835bacdc6141753103adc399a3b69711c38a1808c2c55d9937638b9f4f3a9b157970e74aa5122142ec6e281e2091c5c4a45b1d55e5466","ssdeep":"1536:yuCIGypkmvr4cDrZZfIly0RMDKXHtVbvAXg/DH7SqCXo2T3:yJ6u6KXH7bqK/SjXoy3","tlshash":"3483f8654868a8769893a447ddb5ff3e9ce4067d0bc8c96ebcb7c75c01eca600daf412","size":82608,"data":"","first_seen":"2025-04-30T14:46:01.088745Z","last_seen":"2026-08-26T11:10:36.406516Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-08-26T16:12:01.531157Z","times_seen":22707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-26T16:45:34.795656Z","times_seen":262820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccb754e8fcd1e8e893b7bed4939523ca","sha1":"68a319410da1aef2fd70a8ebc458817aaecbfdd1","sha256":"d84a8e7de97afc23d0e458cfb0adccb09dfc8ef4ed8b9a6159d8ceb091fe03f0","sha512":"16e0569c4d5c28ef76c6bd8668daa4655aa93c6badaa9cb21a7679032f44d338cf2f2f3dad4d7eb2f99af6fed5b9a0fd9afc4c34751d137311493ebdd14cd9a3","ssdeep":"","tlshash":"01a0228000a88c0f0c0e300c8203a380b00ceb03bbf8380fc02cc82ab883383ae300c2","size":74,"data":"","first_seen":"2023-06-26T22:06:31Z","last_seen":"2026-08-26T11:10:36.411267Z","times_seen":18875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-26T16:45:34.799176Z","times_seen":259486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cab844a58630327376e4784cda0d252","sha1":"0b1e30f6d0a2e9b3805306365192bc76527bd854","sha256":"b0b4fb8902c735a0d57032a079fec4ceb93bd36b84a7eec6d7b72d441575371e","sha512":"485d0e3d2427e8314733a81ae26ba4dbaef51df4c5069fa1af3324c4fab1d39cd3353089748f3ea292afaf731ff51af2d9ec9c0af52f3777c941a3f940344d02","ssdeep":"","tlshash":"25a02223c028c0030038023000c33022e02803208800a00c030a020830ea00bffc888a","size":62,"data":"","first_seen":"2023-12-22T23:17:24Z","last_seen":"2026-08-26T11:10:36.412499Z","times_seen":5803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/cast_sender(1).js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a9f2f65f95b61810777606051ee17d","sha1":"872bf131cb4befd0242339f072f2f9b9fbf8019f","sha256":"9cdf2602ac04f7e2bed582d4299c73d464fc4ab069e3ad5a20ee2b6635a015b8","sha512":"6823914507ba31e0f61b95cc53f09543c3c14e5530e9ef1b00338fbbd7c25d2e398f5f628df4ed25d6ff88e0f8bee506efe62ba704778ba7cff09aec9579d9f0","ssdeep":"1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM","tlshash":"92331d4c6971723ea2d3ecf020bf40a97a7a787db444896e7944dce2587168d812eff4","size":52603,"data":"","first_seen":"2023-09-16T02:52:20Z","last_seen":"2026-08-26T11:10:36.395304Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/cast_sender.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","size":4272,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-26T12:57:30.498184Z","times_seen":12108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/embed.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"541d35d49ef83c98aa0a8240f1974b15","sha1":"2afef80e8eb5f739387f26cc77661a1b4b82fb91","sha256":"bdf613f8b57a45ba565b286d5e8ca637881fb5de767f550b8d770653e57f887f","sha512":"b07e85613f64b921a4133d915fa985e72b07489779a81740d5af8ce1b89b2ad9b640925e43f4db7a8bcde35e86c3da9cf470fa26314970dc99950eed340d90c5","ssdeep":"768:T+19wkKPas9ZPV4+RA333ZcAPqN/9jZV35/8Jdf76y:owkSfd4X3Z0/9GJ9b","tlshash":"22431a8d77a1b121d562f0fa183f100f727a5ad9a84495ac722ecdc5ad74e4d603bf38","size":59055,"data":"","first_seen":"2025-04-30T14:46:01.067594Z","last_seen":"2026-08-26T11:10:36.399181Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-26T16:45:34.763614Z","times_seen":141135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/base.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a419a080bd04e60e63c79dd93860d31","sha1":"b196f15d7d2bf92b4155822413078a710d0f1aaf","sha256":"0cd1997425f054ed95d3c4a811b5c1a725007701519a4c5de59b6eff973ddb30","sha512":"a3712a8e15d27c9f0bcbd82dff3f6019e5e80ef9588518e5829fe2ef93ac4d82df8eacd39a3f53b96991647cf306bf0047f45489bd7c5de260557c4918f34556","ssdeep":"24576:3LBnSXHzpfJNsFeFtwru6Ilrmrs/8ahHW2eqIcmvvYKE64B2RFeo2/hnv++E:BSXTpBScz/9h22eqDmvvYKowFeo6v+V","tlshash":"78c53b89b252b452a263f4f8803f120ab23ba459f4888e7cb15eddd5ad34d4d513bf78","size":2526270,"data":"","first_seen":"2025-04-30T14:46:01.063432Z","last_seen":"2026-08-26T11:10:36.424286Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/xe0jpUv_7_XFNSeMfyfrZkLqPrcN-pIWT6_UXz51XO0.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c12e36364d03279e0e7870d65cbc9625","sha1":"c2260e9d6300b4098ab67223191554c59c66c1b6","sha256":"c5ed23a54bffeff5c535278c7f27eb6642ea3eb70dfa92164fafd45f3e755ced","sha512":"377df647e8dbf956cf5fe9896be15996c44d633d8697e3ebbaf3ddbfae31b89bfd0e2ec3737c8618066483c7f1d3b5158afba2bfbdf76a7351e84ec134ee3428","ssdeep":"1536:jZMK2PJ2mPD/tPD5nbzQ9KoJVJgH9ljxf1Jq0yNsTy4:6TM4NDW9HJVmzlyNs24","tlshash":"c83319efb162b3315af361d041ab150ea7be5589a488086eb164f3f41df0987503ff9a","size":52475,"data":"","first_seen":"2024-03-15T13:42:55Z","last_seen":"2026-08-26T11:10:36.400424Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"5636ccc57476fe47ce94fbbc42b62c8f","sha1":"a5268bb83de4b2548d53c18c8a9dbce014a74a28","sha256":"38a4c42c44bfec36cb75a67d2d88a8c263395a275b4f82a7486913c5a45c481c","sha512":"492ce4631baca29f0b230b2050fafd6c5547371119ceb6f711369de395bf2d8eaa522dfdfd1d05be4e6b77d5d90d155c20558e1faf03bf4b6569e5864838378e","ssdeep":"1536:rC1d2mPD/tPD5nbzQ9aoJVJgH9ljxf1Jq0QNsTyU:Gy4NDW93JVmzlQNs2U","tlshash":"4433f7eff162b3315af361f041ab150ea6be5589e488086eb164f2f41df0987503ef99","size":53561,"data":"","first_seen":"2026-08-26T11:07:56.847155Z","last_seen":"2026-08-26T11:07:56.847155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/www-embed-player.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"df0288be9f149f47d8a06512e78d4ede","sha1":"07a7e882ed85717ff4177ae8322fc09ba25bd322","sha256":"42a4914076688cc439ac8dbf82ed794170e03ef887d68d999db2a712d5c8f1ec","sha512":"df7f3e7b0dc300d73acd6196b274b02bdb4bf3783beda247ebd80a2d749c61a355b1266429d2f272d74722c2a62992165c9c5626c11882404447c99d55294f40","ssdeep":"6144:kof9ozNA/0/SEPiEQW9sfGIC1UUav+IGVh:1oqi6W6fGICiEIGX","tlshash":"bc644cceb691b0624263a4b4502f050bb13e79aaf84cc8b8f595d8d92d7458e9337f3d","size":327699,"data":"","first_seen":"2024-03-15T04:33:29Z","last_seen":"2026-08-26T11:10:36.400964Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamwallet.icu/index_files/wallet-illo.svg","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.615Z","timestamp":1787742425615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/wallet-illo.svg HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-8e55\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36437,"size_decoded":13099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63ad7f01f67accd6aafb47999640abe5","sha1":"5ed10575a1a39d5b02840416a281fb1e655bd423","sha256":"596228062de19a21cfda4d3129b3a5d397c5a71509e096b8f67fb8c4f22aa56d","sha512":"7396f3d4253cffc833da71dfc01ce4db8545c72c8507ee5950d282bfedc310440c4c7d803c75833540ad21347e590975e92ed8a8a581b6c752b6e99d2050fc10","ssdeep":"384:H5Iv8vRWEO3y/M28K5tIA4qyENwwwHChGnnbFt8YzKN9RoyP9hX3PNy0N5:ZC0/UetIA4qyewHConbFdzEDoyP9NNx","tlshash":"a6f286ee7b385ce6e58cd3dbef01947d245680b798c1c664c1a8ff0e24648d96c1abd2","first_seen":"2023-04-30T19:30:40Z","last_seen":"2026-08-26T11:10:36.402241Z","times_seen":728,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":982,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/www-embed-player.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.389Z","timestamp":1787742426389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/www-embed-player.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-50013\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327699,"size_decoded":115047,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (682)","md5":"df0288be9f149f47d8a06512e78d4ede","sha1":"07a7e882ed85717ff4177ae8322fc09ba25bd322","sha256":"42a4914076688cc439ac8dbf82ed794170e03ef887d68d999db2a712d5c8f1ec","sha512":"df7f3e7b0dc300d73acd6196b274b02bdb4bf3783beda247ebd80a2d749c61a355b1266429d2f272d74722c2a62992165c9c5626c11882404447c99d55294f40","ssdeep":"6144:kof9ozNA/0/SEPiEQW9sfGIC1UUav+IGVh:1oqi6W6fGICiEIGX","tlshash":"bc644cceb691b0624263a4b4502f050bb13e79aaf84cc8b8f595d8d92d7458e9337f3d","first_seen":"2024-03-15T04:33:29Z","last_seen":"2026-08-26T11:10:36.400964Z","times_seen":236,"resource_available":true,"data":null}},"time_used":2268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/#","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:07.005Z","timestamp":1787742427005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-7424d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Gatsby:5.12.10","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":475725,"size_decoded":75557,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2587)","md5":"63caa2389e24d63b2841c94aaa64812f","sha1":"b5e608f7b782459faef95d086c11b99198cc1e14","sha256":"9e38b4774876790e4db88b3a4131951910d87202a1128389c9943a495137550e","sha512":"ae37dedca04e2d0edb6b862202084d5e4436c447bc402bf9776024171c8e9ea10ff895c73bc5c1b39e240cd61a119310b707a63358d66925088bad339fccd058","ssdeep":"6144:/4wuadoN5eqmeYh0Vk2cpkwHEtnaLCfbGyOUuE/hZMf6tCNWDs9mVQceX9/vX8Y3:gwuay6OXeiSewl","tlshash":"f2a4c810ef9c10494307016aeef826d45a3ed4735e8b8dfff8a7262985c51dc12e6e7a","first_seen":"2026-08-26T11:07:56.796068Z","last_seen":"2026-08-26T11:10:36.386433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:08.476Z","timestamp":1787742428476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamwallet.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:05 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nage: 2163\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":16363,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-08-26T11:10:36.392147Z","times_seen":341805,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/fonts/EuclidCircularB-Regular-WebXL.woff2","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.396Z","timestamp":1787742425396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-26T16:37:38.004778Z","times_seen":554106,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/Chrome_Logo.svg","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.608Z","timestamp":1787742425608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/Chrome_Logo.svg HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-5db\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1499,"size_decoded":816,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4066a30b774878266f023e3ee346b15","sha1":"3e5b92df2614327527f1e827f4be512f2d5a8087","sha256":"05b1b228fd7449353296a78a682705f2a64a1a3cfe89122d584ad3e6aa01eb76","sha512":"0c749355bda688d3a5a1e850857799230c1b85eb8b05b2bfaf90fbf51ecac0ff5ce287f27ee63115fe9eb329bd709cb3a781a19e37de41632b6b91440aa3e77e","ssdeep":"","tlshash":"5231798133b6c3ac750047a40ab97a39346334dd7455c0b0d9d82b98acb879f5cbaddb","first_seen":"2025-04-30T14:46:01.072699Z","last_seen":"2026-08-26T11:10:36.392809Z","times_seen":33,"resource_available":false,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":988,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/Browse-illo.svg","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.617Z","timestamp":1787742425617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/Browse-illo.svg HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-6e04\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28164,"size_decoded":11419,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afeafb6a9f14bd7771c63015be5a05c9","sha1":"78683c75d81cf80440f083e9fb4bb2987748e290","sha256":"517c0c6b44ede59070fb138aab7e875b9c230a227295f9612c32dabb9b0bdb13","sha512":"c83de86153dc97c4351a6bd018b95d33f40e951d531299e02d505c7d16ce3677307cf752b8a59a89bd9d3e9281687d5895a52b23d90181991932fbdbe7aa792f","ssdeep":"768:gbp29wBkZXcKfyCuznQhbDEq+BGNL8HirnN6XvSfgR87Y:zwulSCGnEgq+8N16rRoY","tlshash":"15c286dd3f745dd6d9c8c7daff0190bd285a90b369818a10c19caf0e34d18adad5aec2","first_seen":"2023-04-30T19:30:40Z","last_seen":"2026-08-26T11:10:36.385527Z","times_seen":681,"resource_available":false,"data":null}},"time_used":1752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/embed.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.151Z","timestamp":1787742426151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/embed.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-e6af\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59055,"size_decoded":20843,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"541d35d49ef83c98aa0a8240f1974b15","sha1":"2afef80e8eb5f739387f26cc77661a1b4b82fb91","sha256":"bdf613f8b57a45ba565b286d5e8ca637881fb5de767f550b8d770653e57f887f","sha512":"b07e85613f64b921a4133d915fa985e72b07489779a81740d5af8ce1b89b2ad9b640925e43f4db7a8bcde35e86c3da9cf470fa26314970dc99950eed340d90c5","ssdeep":"768:T+19wkKPas9ZPV4+RA333ZcAPqN/9jZV35/8Jdf76y:owkSfd4X3Z0/9GJ9b","tlshash":"22431a8d77a1b121d562f0fa183f100f727a5ad9a84495ac722ecdc5ad74e4d603bf38","first_seen":"2025-04-30T14:46:01.067594Z","last_seen":"2026-08-26T11:10:36.399181Z","times_seen":32,"resource_available":true,"data":null}},"time_used":1219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/#","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.305Z","timestamp":1787742425305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metamwallet.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-7424d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Gatsby:5.12.10","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475725,"size_decoded":75557,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2587)","md5":"63caa2389e24d63b2841c94aaa64812f","sha1":"b5e608f7b782459faef95d086c11b99198cc1e14","sha256":"9e38b4774876790e4db88b3a4131951910d87202a1128389c9943a495137550e","sha512":"ae37dedca04e2d0edb6b862202084d5e4436c447bc402bf9776024171c8e9ea10ff895c73bc5c1b39e240cd61a119310b707a63358d66925088bad339fccd058","ssdeep":"6144:/4wuadoN5eqmeYh0Vk2cpkwHEtnaLCfbGyOUuE/hZMf6tCNWDs9mVQceX9/vX8Y3:gwuay6OXeiSewl","tlshash":"f2a4c810ef9c10494307016aeef826d45a3ed4735e8b8dfff8a7262985c51dc12e6e7a","first_seen":"2026-08-26T11:07:56.796068Z","last_seen":"2026-08-26T11:10:36.386433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/cast_sender.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.150Z","timestamp":1787742426150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/cast_sender.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-10b0\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4272,"size_decoded":2353,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1143)","md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-26T12:57:30.498184Z","times_seen":12108,"resource_available":true,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:07:03.607Z","timestamp":1787742423607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:04 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-7424d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gatsby:5.12.10","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":475725,"size_decoded":75557,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2587)","md5":"63caa2389e24d63b2841c94aaa64812f","sha1":"b5e608f7b782459faef95d086c11b99198cc1e14","sha256":"9e38b4774876790e4db88b3a4131951910d87202a1128389c9943a495137550e","sha512":"ae37dedca04e2d0edb6b862202084d5e4436c447bc402bf9776024171c8e9ea10ff895c73bc5c1b39e240cd61a119310b707a63358d66925088bad339fccd058","ssdeep":"6144:/4wuadoN5eqmeYh0Vk2cpkwHEtnaLCfbGyOUuE/hZMf6tCNWDs9mVQceX9/vX8Y3:gwuay6OXeiSewl","tlshash":"f2a4c810ef9c10494307016aeef826d45a3ed4735e8b8dfff8a7262985c51dc12e6e7a","first_seen":"2026-08-26T11:07:56.796068Z","last_seen":"2026-08-26T11:10:36.386433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":-1,"dns":139,"connect":257,"send":0,"wait":257,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/apple-logo.svg","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.610Z","timestamp":1787742425610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/apple-logo.svg HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 660\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\netag: \"6a8de32f-294\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660,"size_decoded":932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00587615733dd4954be85d8bf79f1d6f","sha1":"d946195781dd40defa310b6a8d2f29b86df6a4ed","sha256":"9d00ea77a3240f291356c36261c5f45d7fa456f29c97a2f060caf0ed4b9c3231","sha512":"4274f057d878ce3ccb8a158cde25a71fc2ed657290085f7cb16b2b12c77f8850af7df49d9b21f729e30087944c4d0993b3ab7dd354b1dad05640ce5bf42422fb","ssdeep":"","tlshash":"fc012d6ea200c87cdd17867ae47204b8140e90af201453fec32ad432f6174e115ac8ce","first_seen":"2023-07-03T17:16:47Z","last_seen":"2026-08-26T11:10:36.398241Z","times_seen":472,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":987,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/fonts/EuclidCircularB-Bold-WebXL.woff","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:06.144Z","timestamp":1787742426144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Bold-WebXL.woff HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-26T16:37:38.004778Z","times_seen":554106,"resource_available":true,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/fonts/EuclidCircularB-Regular-WebXL.woff","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:06.145Z","timestamp":1787742426145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Regular-WebXL.woff HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-26T16:37:38.004778Z","times_seen":554106,"resource_available":true,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/xe0jpUv_7_XFNSeMfyfrZkLqPrcN-pIWT6_UXz51XO0.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.152Z","timestamp":1787742426152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/xe0jpUv_7_XFNSeMfyfrZkLqPrcN-pIWT6_UXz51XO0.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-ccfb\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52475,"size_decoded":23388,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51208)","md5":"c12e36364d03279e0e7870d65cbc9625","sha1":"c2260e9d6300b4098ab67223191554c59c66c1b6","sha256":"c5ed23a54bffeff5c535278c7f27eb6642ea3eb70dfa92164fafd45f3e755ced","sha512":"377df647e8dbf956cf5fe9896be15996c44d633d8697e3ebbaf3ddbfae31b89bfd0e2ec3737c8618066483c7f1d3b5158afba2bfbdf76a7351e84ec134ee3428","ssdeep":"1536:jZMK2PJ2mPD/tPD5nbzQ9KoJVJgH9ljxf1Jq0yNsTy4:6TM4NDW9HJVmzlyNs24","tlshash":"c83319efb162b3315af361d041ab150ea7be5589a488086eb164f3f41df0987503ff9a","first_seen":"2024-03-15T13:42:55Z","last_seen":"2026-08-26T11:10:36.400424Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/remote.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.154Z","timestamp":1787742426154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/remote.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-1d6e6\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120550,"size_decoded":40095,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"9ef03829bbe01a4f32cf9cdfc73ba643","sha1":"9ea6d2ff8621351bb5dfb0274fe782b795b46c0c","sha256":"047f94e2ed0ca1451de468524e9ef152cd7c2d4aa2def8cea83bed36cd99c269","sha512":"27a8aafa72dccd76371831e6524a6b4113863e6ea09a3456f35c284d8155b684a03c4a95c609f4db265dca52d9c9de0e6437d587394198ec4b42febae91135df","ssdeep":"3072:Ajgoz0IdK8wKysxzl5jqv36oQjuXlETwiBqPu6eqE0gBOCMI6r:CNwIdK8P1I36oQjuXlETwiBqPu6eqE05","tlshash":"58c3e798b9027422a273f8b5193f110d963b2595f8844a6c328ddcd2de78d9d423bfbc","first_seen":"2025-04-30T14:46:01.061766Z","last_seen":"2026-08-26T11:10:36.388962Z","times_seen":32,"resource_available":true,"data":null}},"time_used":1473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/www-player.css","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.157Z","timestamp":1787742426157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/www-player.css HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-5cad7\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379607,"size_decoded":61436,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5858fcdd274288761ba68e35ce6b434","sha1":"8fab5b2395cfec7570072eb0bb6d44ea1abd84a4","sha256":"d3e9bc168bcafb793c1f88803b8d62bae049d099b4d59eb15117f060ecba8e44","sha512":"e875522240555476c6814e37dfc60e49821ca4c06541fcc3bdb4630a555c0c4717c6b93cb2e2b1cb547c5b12bf77f8862ac67bda01f39a0a8eb9d858cec5829c","ssdeep":"1536:Ioi8ZHMCbS/SgV4BlILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDCAd6/:Ioi8ZiSgyBMSoyJufntccgo3N","tlshash":"5b84e932f491132cf22b9e9997d5964c7339d983e2e21affe11161ebc7c7285136720a","first_seen":"2024-03-19T11:15:06Z","last_seen":"2026-08-26T11:10:36.394081Z","times_seen":118,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/#","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:07.006Z","timestamp":1787742427006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-7424d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Gatsby:5.12.10","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":475725,"size_decoded":75557,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2587)","md5":"63caa2389e24d63b2841c94aaa64812f","sha1":"b5e608f7b782459faef95d086c11b99198cc1e14","sha256":"9e38b4774876790e4db88b3a4131951910d87202a1128389c9943a495137550e","sha512":"ae37dedca04e2d0edb6b862202084d5e4436c447bc402bf9776024171c8e9ea10ff895c73bc5c1b39e240cd61a119310b707a63358d66925088bad339fccd058","ssdeep":"6144:/4wuadoN5eqmeYh0Vk2cpkwHEtnaLCfbGyOUuE/hZMf6tCNWDs9mVQceX9/vX8Y3:gwuay6OXeiSewl","tlshash":"f2a4c810ef9c10494307016aeef826d45a3ed4735e8b8dfff8a7262985c51dc12e6e7a","first_seen":"2026-08-26T11:07:56.796068Z","last_seen":"2026-08-26T11:10:36.386433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/youtubei/v1/log_event?alt=json\u0026key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:19.919Z","timestamp":1787742439919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json\u0026key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1787742439913\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtIcjJZVTAzaE81RSi0r_qvBjIKCgJISxIEGgAgbg%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20240317.00.00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1787742429481\u0026flash=0\u0026frm=1\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=1024\u0026biw=1280\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C992%2C560\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 3546\r\nOrigin: https://metamwallet.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3546,"data":"{\"context\":{\"client\":{\"hl\":\"zh-CN\",\"gl\":\"SG\",\"clientName\":56,\"clientVersion\":\"1.20240317.00.00\",\"configInfo\":{\"appInstallData\":\"CLSv-q8GELfvrwUQr5j_EhC8-a8FEOOSsAUQ3ej-EhCQu7AFEPywsAUQ86GwBRCigbAFEKDJsAUQ6sOvBRDiyrAFEIO_sAUQvvmvBRCh_bciELaVrwUQ56-wBRCa8K8FEMn3rwUQopKwBRDbyrAFENWIsAUQ8ZywBRComrAFEPqnsAUQ-pX_EhDPzrAFENnJrwUQlpWwBRDfyrAFELfq_hIQ48qwBRCIh7AFEPOc_xIQxbmwBRC3q7AFELiqsAUQvZmwBRD-srAFENCNsAUQ6-j-EhD2q7AFEIfDsAUQ4fKvBRC9irAFEJaZ_xIQ782wBRC9tq4FEOe6rwUQpcL-EhDPqLAFEJCysAUQ7rOwBRChw7AFEOuTrgUQpoGwBRCJnP8SEPSrsAUQzN-uBRDT4a8FEIOFrwUQiOOvBRD8hbAFEJL9tyIQnsewBSogQ0FNU0VoVUotWnEtRElqWkhzV3FEOW1uNWhFZEJ3PT0%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"events\":[{\"eventTimeMs\":1787742437897,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426132,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742425340,\"latencyActionBaselined\":{\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742425343,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426132,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426132,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742428472,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742428555,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426386,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742437506,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426145,\"latencyActionTicked\":{\"tickName\":\"rsf_pej\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742427371,\"latencyActionTicked\":{\"tickName\":\"rse_pej\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742426146,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742428401,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742437905,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_EMBED\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742437910,\"latencyActionInfo\":{\"serverTimeMs\":41,\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742437923,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787742437924,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"47-KLtONJnumZR91\"},\"context\":{\"lastActivityMs\":\"-1\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"tJf-Ze3HHPrJz7sP3KSfgAo\",\"clientCounter\":\"2898\"}}"}},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:20 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-26T16:37:38.004778Z","times_seen":554106,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/sddefault.webp","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.312Z","timestamp":1787742425312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/sddefault.webp HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18434\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\netag: \"6a8de32f-4802\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18434,"size_decoded":18706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d288755975f12c1b804cce683a56b56b","sha1":"af27df3ca58c18ccfa231b3ad5089e11b29fb4e1","sha256":"f27731898ea8846c9a9f428fb8cbe2da7c832a4bb6032af7b4b7f0c64f81de55","sha512":"a748cd20ff72c281d54c7032d0b647523dd88566be2fd46520b7239addfb02fd35aaf5eeb8de43b851227ccc317c7257ddc1b9deac9b3c322ea9a2e46413a91c","ssdeep":"384:fvFtmBazYR/XdqDGdIQZwiZh51j8dYeWV2YKV0W6JGj3BXHJV0NYH1qrXQ3Q+:frmBaIfgV1id1Qd/WV23jjx8NYorXQ","tlshash":"b982c0d97eb570e7e12f4d3dd2ac96a63e30958a9c2f9d35ed0802168e50c804c48f7d","first_seen":"2023-04-30T19:30:40Z","last_seen":"2026-08-26T11:10:36.387694Z","times_seen":364,"resource_available":false,"data":null}},"time_used":1284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":820,"receive":464,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/base.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.391Z","timestamp":1787742426391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/base.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-268c3e\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2526270,"size_decoded":802840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (555)","md5":"1c36949319ad82f0fae9ae73dc670df1","sha1":"8fafa3ada0b599ee5c2021721fde681a7d5431a4","sha256":"b842acf69ab4e757cfe2cebfa24a2e41269722aca87c5475437bd8b03ca304c6","sha512":"c2182114eca072ec76f1e9f2ff7c39ea8c1a0923ce7321cfaa3ce34061426fefb4d279bf011cc1329c9276978ad144c5d573f1708e733b9cfab0313a0bbffc37","ssdeep":"24576:3LBnSXHzpfJNsFeFtwru6Ilrmrs/8ahHn:BSXTpBScz/9hH","tlshash":"a2252ad9b2a6b4529263f4b8803f1107b13be555b0488d7cb28ad9d56e38e8d513ff38","first_seen":"2025-08-05T03:14:40.85559Z","last_seen":"2026-08-26T11:10:36.396353Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2823,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/embed.js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:08.431Z","timestamp":1787742428431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/embed.js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-e6af\"\r\nexpires: Wed, 26 Aug 2026 23:07:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59055,"size_decoded":20843,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"541d35d49ef83c98aa0a8240f1974b15","sha1":"2afef80e8eb5f739387f26cc77661a1b4b82fb91","sha256":"bdf613f8b57a45ba565b286d5e8ca637881fb5de767f550b8d770653e57f887f","sha512":"b07e85613f64b921a4133d915fa985e72b07489779a81740d5af8ce1b89b2ad9b640925e43f4db7a8bcde35e86c3da9cf470fa26314970dc99950eed340d90c5","ssdeep":"768:T+19wkKPas9ZPV4+RA333ZcAPqN/9jZV35/8Jdf76y:owkSfd4X3Z0/9GJ9b","tlshash":"22431a8d77a1b121d562f0fa183f100f727a5ad9a84495ac722ecdc5ad74e4d603bf38","first_seen":"2025-04-30T14:46:01.067594Z","last_seen":"2026-08-26T11:10:36.399181Z","times_seen":32,"resource_available":true,"data":null}},"time_used":2030,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/YVgfHZMFFFQ.html","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.342Z","timestamp":1787742425342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/YVgfHZMFFFQ.html HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-21f03\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139011,"size_decoded":53976,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57123)","md5":"85066e7ab88f2061326850a108f5f8ea","sha1":"b5ef22a9fa22f374e00f967ec68cc1a96aeb0219","sha256":"32ba94cedf4bdaee0ca8262fc9fbbfe7e6615f54caaa534639e5317d5c352b45","sha512":"281759abbcb840ea011601862d73368c5b857c1b651927ea47c5ff8720ab4aec77b5283fd4e9d87531846ba16073338b3ebd78877a307e49e65018343bec8f2d","ssdeep":"3072:KJ6u6KXH7bqK/SjXoyd/JCfJZ+y/7U0NNCWzvYV3:KkuJXH7bq9j6fJZ+y/7U0NNCWzvYR","tlshash":"b6d33bb046545436c4835a87ecb5ff3e79e6025f8ac2886dbebaa3dc06e9d644ddf001","first_seen":"2025-04-30T14:46:01.0711Z","last_seen":"2026-08-26T11:10:36.397023Z","times_seen":32,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/fonts/EuclidCircularB-Bold-WebXL.woff2","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.395Z","timestamp":1787742425395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-26T16:37:38.004778Z","times_seen":554106,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/9sy2a0egs6zh/5n9UZwFnPyMTphfiT6SDMv/67001204dd8d16fa99070e902c512b9c/home-hero.png?w=1111\u0026h=1046\u0026q=80\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.613Z","timestamp":1787742425613,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /9sy2a0egs6zh/5n9UZwFnPyMTphfiT6SDMv/67001204dd8d16fa99070e902c512b9c/home-hero.png?w=1111\u0026h=1046\u0026q=80\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 109\r\nserver: CloudFront\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncache-control: max-age=300\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b301fa8d72072cc0289eb055d8389e68.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: iPp4nifcj-9jES2lZU6KknI8gg70hLMyf6dIrGt8BQKLcVtAjXv-HQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T16:40:44.948617Z","times_seen":18116396,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/Explore-illo.svg","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metamwallet.icu/","date":"2026-08-26T11:07:05.616Z","timestamp":1787742425616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/Explore-illo.svg HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-8fe3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36835,"size_decoded":13826,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46fb450c5ecf6da758bca0975551f056","sha1":"629157e884b450ecf5a94d38d736db3c7428245f","sha256":"8ba2b37fd4f2f3c19c10109bc6111d3d71692c78f9351f1eb2a8cab5231b77b5","sha512":"36db89031900beb7785e3e3fbd310b02a6b25ddef3bafca436d2b0ad6b55ab5b2baa75107dc29ea1a4db20e1e8966cde083be0ade8b433c70e3ea74364b1e409","ssdeep":"768:GB1GpmmcoiGHeQBpQp0jogmgDeqRIkkvtZc4UUVB:gFohAXmDXIdxr","tlshash":"b0f2c5ed7b345cdad9c8d3dbff0680bd285791b7d5808a00c258ef1e289589e6c19ac3","first_seen":"2023-04-30T19:34:47Z","last_seen":"2026-08-26T11:10:36.399782Z","times_seen":784,"resource_available":false,"data":null}},"time_used":1753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamwallet.icu/index_files/cast_sender(1).js","fqdn":"metamwallet.icu","domain":"metamwallet.icu","tld":"icu"},"ip":{"addr":"43.132.222.65","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:06.388Z","timestamp":1787742426388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamwallet.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 17:55:53 GMT","end":"Mon, 23 Nov 2026 17:55:52 GMT"},"fingerprint":{"sha1":"FD:5F:36:3B:C8:3C:91:F0:9B:8F:8C:1F:03:6C:AF:91:36:5D:37:60","sha256":"93:AF:54:5C:7F:19:AB:E5:5A:DB:CF:4D:DA:03:E8:82:83:A9:D2:80:3B:5E:8F:97:B1:D1:1B:BA:3C:0E:22:A0"}}},"request":{"raw":"GET /index_files/cast_sender(1).js HTTP/1.1\r\nHost: metamwallet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/index_files/YVgfHZMFFFQ.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 18:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8de32f-cd7b\"\r\nexpires: Wed, 26 Aug 2026 23:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52603,"size_decoded":15776,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3537)","md5":"f0a9f2f65f95b61810777606051ee17d","sha1":"872bf131cb4befd0242339f072f2f9b9fbf8019f","sha256":"9cdf2602ac04f7e2bed582d4299c73d464fc4ab069e3ad5a20ee2b6635a015b8","sha512":"6823914507ba31e0f61b95cc53f09543c3c14e5530e9ef1b00338fbbd7c25d2e398f5f628df4ed25d6ff88e0f8bee506efe62ba704778ba7cff09aec9579d9f0","ssdeep":"1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM","tlshash":"92331d4c6971723ea2d3ecf020bf40a97a7a787db444896e7944dce2587168d812eff4","first_seen":"2023-09-16T02:52:20Z","last_seen":"2026-08-26T11:10:36.395304Z","times_seen":33,"resource_available":true,"data":null}},"time_used":2012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"metamwallet.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"metamwallet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/YVgfHZMFFFQ/maxresdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:08.469Z","timestamp":1787742428469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:34 GMT","end":"Mon, 02 Nov 2026 08:37:33 GMT"},"fingerprint":{"sha1":"8E:D8:92:6C:01:A3:D8:52:72:40:66:4B:CA:3A:5D:1E:B6:1A:F1:F1","sha256":"B8:C7:1D:B9:82:FE:BC:6C:1F:20:2F:DA:4A:2C:3A:C5:73:6B:04:C9:CF:22:E5:F5:66:E5:3E:0B:59:A2:62:7B"}}},"request":{"raw":"GET /vi/YVgfHZMFFFQ/maxresdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 11:07:08 GMT\r\nexpires: Wed, 26 Aug 2026 11:07:38 GMT\r\ncache-control: public, max-age=30\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 1097\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1097,"size_decoded":1517,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"e2ddfee11ae7edcae257da47f3a78a70","sha1":"6e902fa6302eb30cd204579bca6a59b37233e262","sha256":"20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711","sha512":"c97040681510ad0184ccf903708ca9edd0a6b49dfef62c0d8a569425de60c8087637f6510fc9bda938d323b430590663467b140ab31f2a8ed42c296ae566f718","ssdeep":"","tlshash":"5d113ee6ba6a46bbc82203b0973103f3c7521ea7408a627526c8053238e9b8ba810825","first_seen":"2023-04-05T13:42:35Z","last_seen":"2026-08-26T16:09:47.336564Z","times_seen":6329,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":16,"send":0,"wait":29,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamwallet.icu/index_files/YVgfHZMFFFQ.html","date":"2026-08-26T11:07:08.475Z","timestamp":1787742428475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metamwallet.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamwallet.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 02:10:11 GMT\r\nexpires: Fri, 20 Aug 2027 02:10:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550617\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":16157,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:04:40.979802Z","times_seen":544396,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":16,"connect":36,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}