{"report_id":"88382c36-a1da-4bcc-a4ef-8f5e64e85bb7","version":0,"status":"done","tags":[],"date":"2026-09-21T14:24:55Z","url":{"schema":"http","addr":"metamaskimport.com/","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"ip":{"addr":"89.187.25.165","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"metamaskimport.com/","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"title":"Firefox Can’t Find the Server","dom":{"size":3241,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ad37fdcdd26a78c82e56d62d7740f7b1","sha1":"092e443108481c8a27f623b1064510af70c325b9","sha256":"d0bf54643c7e7a820be03a915f2081240c89c04206c366c863565c8c73e9b3a1","sha512":"d397a9f1cfc11c632ef03bd0359db1cbcea8d87696a7c97a8d66d423f078e6dac535479654dfae24a89f288c302f348ecbc9ce968abdbdbfb9a96871cb36e606","ssdeep":"","tlshash":"8b61441b42e719503c6ab1b42bfa33447af49163010ad4023e8da04d9fc4aa7f1f5bec","dom_hash":"domhashf5519335e67b9b64249f8ebe8a944214","first_seen":"2026-09-21T14:24:59.626606Z","last_seen":"2026-09-21T14:29:50.474157Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamaskimport.com/","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"ip":{"addr":"89.187.25.165","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T14:24:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"metamaskimport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metamaskimport.com","ip":{"addr":"89.187.25.165","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-09-19","domain_rank":0,"first_seen":"2026-09-21T14:24:56.081512Z","last_seen":"2026-09-21T14:24:56.081512Z","alert_count":2,"request_count":2,"received_data":3864,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamaskimport.com/","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"ip":{"addr":"89.187.25.165","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fa91b6a549b1490307f797a974c6ddf","sha1":"79823557c7e8f781591c11574ac805e6a551e74b","sha256":"1afe5942e3efa648732bc8cee9e37a820f7c1bd03eae3ffe2b17f190ff97f7b0","sha512":"770aae887d5396316de92e472a2dd661ea50c60aa71f865e51a2dcecbf1d1b17e8f095dda4a8d68522f83fbbcc43dcf83bf7e51b9dddb63675e5c0c605d3d878","ssdeep":"","tlshash":"f9318f1f41e76aa0295e72b529be73847ef092a34108e5073d4d944d5fc0caba1b4efd","size":1849,"data":"","first_seen":"2026-06-24T10:27:30.811513Z","last_seen":"2026-09-21T14:29:50.478191Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamaskimport.com/","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"ip":{"addr":"89.187.25.165","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T14:24:27.507Z","timestamp":1790000667507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskimport.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 11:39:56 GMT","end":"Fri, 18 Dec 2026 11:39:55 GMT"},"fingerprint":{"sha1":"7B:BC:87:69:74:3D:A6:E7:D9:5C:31:67:03:21:87:F9:30:D9:4C:89","sha256":"BE:A1:19:45:5F:29:93:82:1A:19:8F:50:71:A0:50:95:FE:27:36:6C:D6:0C:E8:A9:20:A1:16:E3:6F:1C:16:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskimport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 21 Sep 2026 14:24:27 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 19 Sep 2026 12:38:29 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3066\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3066,"size_decoded":3309,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4aae629f01a478ef3c3d0f67cf90ad65","sha1":"29fc6592668363582e59a5a3361874811e63239e","sha256":"a3fb0b76397207581896df03cdb852daf13e607b13bb15f2e629fcfbef930ad8","sha512":"2377e6dcb24ec7d15cc684497dcafce53a58df3b2e0666e189a1620346378a514577aadfba9fd4eb4e109b3a9698b53f1767e08358009c6ee6122c201a286463","ssdeep":"","tlshash":"0151321f02e71950285eb5b42bba738479f49163010ae5063e8da44e9fc09a7e1f0bfc","first_seen":"2026-09-21T14:24:59.628409Z","last_seen":"2026-09-21T14:29:50.475926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":104,"connect":35,"send":0,"wait":35,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"metamaskimport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskimport.com/favicon.ico","fqdn":"metamaskimport.com","domain":"metamaskimport.com","tld":"com"},"ip":{"addr":"89.187.25.165","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskimport.com/","date":"2026-09-21T14:24:27.938Z","timestamp":1790000667938,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskimport.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 11:39:56 GMT","end":"Fri, 18 Dec 2026 11:39:55 GMT"},"fingerprint":{"sha1":"7B:BC:87:69:74:3D:A6:E7:D9:5C:31:67:03:21:87:F9:30:D9:4C:89","sha256":"BE:A1:19:45:5F:29:93:82:1A:19:8F:50:71:A0:50:95:FE:27:36:6C:D6:0C:E8:A9:20:A1:16:E3:6F:1C:16:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamaskimport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskimport.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 21 Sep 2026 14:24:27 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-21T15:53:56.434024Z","times_seen":63089,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"metamaskimport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}