{"report_id":"8bd023ea-5743-4bbc-ab11-5cc7c31abb84","version":6,"status":"done","tags":[],"date":"2026-02-28T12:50:27Z","url":{"schema":"https","addr":"metamask-guider.vercel.app","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"metamask-guider.vercel.app/","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"title":"MetaMask Help Center","dom":{"size":50625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18810)","md5":"75936c78d66c8612c71f8a80c5e72a5e","sha1":"894a6e34f2eb0c2257af96cb93e08e61e8d7fea3","sha256":"996638629a8e68b4a92495804bb339896b5dc85277be81069106d5086fb036d8","sha512":"56899ca07ac9980521591fa7ae6549d69ec1fb5f20b35267f4871a149be7bdcc4d6fc7747910ee01214b261070eddd04e9158466546ec1e6f5fe8dda5df21ee7","ssdeep":"1536:q1kc+UeheeyIeIKbeNWZea3eHaEGFn1nSFFFL7rcr:AzsaF11b","tlshash":"8f33e7f25150a53e815b4addbb3ab74c23aba05ee9890810f3fd57a867c3ec1f407849","dom_hash":"domhashe6c33af9d58de758d806bdaddfbecba1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metamask-guider.vercel.app","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T12:50:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metamask-guider.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-28T12:50:29.101371Z","last_seen":"2026-02-28T12:50:29.101372Z","alert_count":30,"request_count":15,"received_data":3513259,"sent_data":7362,"comment":"","tags":null,"fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Docusaurus:3.8.1","description":"Docusaurus is a tool for teams to publish documentation websites.","website":"https://docusaurus.io/","common_platform_enumeration":"","icon":"docusaurus.svg","categories":["Documentation","Static site generator"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/runtime_main.1dade103.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fe204f4ddc4b755f4ebded896be202","sha1":"4e58b10456b12357f7115bd85651b30af755ffd7","sha256":"b91301cb0cedcf297692a8c60cc60da84d072d48dd162b3d6bb8acf8e591989f","sha512":"ff80341a83f7c951670a6d5eb0361f7cfb5255b6d6182f8394c4223c21fc38f147a1f3f15e6758268d05ed480252637e542ae5f9e91bfe7ea09a8e6f1e945756","ssdeep":"768:QpgqLkLQD1tJfE3LlbutB6SrkUl4mxkXViZpuo:wgq0QxrfERyL6SYszZ1","tlshash":"f2c2e7ae976ce9ea7cb045a57e8194f4680ab4113c010cd2b0dac77944d4eb87635ff7","size":27026,"data":"","first_seen":"2026-02-28T12:50:32.336205Z","last_seen":"2026-03-19T23:06:02.685563Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71d67385bf52fe1cde36dc4f8c7ec494","sha1":"823c11d3592d89da428d469c76e7b68e2179fa48","sha256":"2c5dd9f27dc2a13ebe4ad4a1ad4e33765a4eb7b83049f0c3b853a77ac3d6f892","sha512":"df5c5e088fa9b9d34f80f03e1b30651f2dc81edcbf6aaadbbb3e81d8a35192fc4e0bdbfd17334a497944a4d4b16e9fc44a233d714871cf41f23b3f2b5c3f5ff4","ssdeep":"","tlshash":"cc211136ab72183351e24dcdb1771a0957d616c09301aec497cd84a8e95c162e3a3b9e","size":1116,"data":"","first_seen":"2025-06-24T15:28:26.418486Z","last_seen":"2026-07-27T13:58:20.401796Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/main.074d9967.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a11ed473b21a92ca4481bb619c35713b","sha1":"d6614d21435a7bafeceeb0dfa0c523d86c609e82","sha256":"39d36c6cf237261814d6efd6bf0d922216daf5341d90757ac5b5978b7f7ab7e9","sha512":"0c5a1c8ef0ab593ccc4ee1d86e450dd160f0a2d365fa6d1a3d493639986c138e5ad3574a1c0c3fd555b51ecdaab0b2b0632f24305d7460d73bcd03c780e201db","ssdeep":"24576:Sm8YDiee37Zh/nFXuC+N+q1Z9wZiRXQ7OCsk5MARXQ7OCsKj49WT+GlCB:Sm8YDbe3V5VtQ+cnKjKdjX+Gi","tlshash":"d1d55c51f90ca6ad72b3145efabb30196126b8e858dcc1df54eda2e8ddf9080b171d38","size":2782449,"data":"","first_seen":"2026-02-28T12:50:32.351403Z","last_seen":"2026-03-19T23:06:02.698521Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc0f42b525ba96416d15b8c87376d5a0","sha1":"0921d459b21d0343d178df4ac185d77d20bfdd18","sha256":"18e08ac31249630466c15fc17aa84f30f7dd851c869e04bf96ee3c6f4defb422","sha512":"fc40f3f01cf66d810ce14e7d87d1ec6b09da404182b8c78c4543fc4399c5c6c81c5322d0fa366b8ef45d8e972cbfdb02228c8b3667f4b51b33218d07f5dde5dd","ssdeep":"","tlshash":"aee0204935c31c3016aa0a7d13b6a3047093332563112c719eb9f85df925e9b5992ddc","size":366,"data":"","first_seen":"2026-02-28T12:50:32.352898Z","last_seen":"2026-03-18T11:54:07.999777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52dc90f15693add4c977eb8a51028613","sha1":"8fd7cb72b69f9e164156b212164500caf6cec8b4","sha256":"ae9329e79fd35b30b1bf1d433ee02737fb3732bedab1bb94beb1c64c7b39455a","sha512":"36af1910889b316ef2de66386822bbb6400c9251ff6a901a28c2a088f6bff36188b3f55d369cb1ce817e4acd2a8930eb54b8581b09a2c7d21fd919a451a4762a","ssdeep":"","tlshash":"1b0189b93562517369ab20ddb4aa5bb4fa353770aa066001a07dd1d05438e8fcb2adce","size":813,"data":"","first_seen":"2025-06-24T15:28:26.421017Z","last_seen":"2026-07-21T22:43:38.025072Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamask-guider.vercel.app/","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T12:50:05.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 220540\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"3adf556a78282950649aac02b64aaecc\"\r\nlast-modified: Wed, 25 Feb 2026 23:34:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bnn8d-1772283005076-bf20518afe68\r\ncontent-length: 12423\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Docusaurus:3.8.1","description":"Docusaurus is a tool for teams to publish documentation websites.","website":"https://docusaurus.io/","common_platform_enumeration":"","icon":"docusaurus.svg","categories":["Documentation","Static site generator"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48816,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18238)","md5":"3adf556a78282950649aac02b64aaecc","sha1":"3f9ffc7d6ed0e44f216769905e13d63c9fe17c17","sha256":"0514c9d676f9fccc99b9e3d0779ab492cf78cea88c536869c2de01221df93dbb","sha512":"8830d444e6d33d4f6e1d92919f6b2fe6da7308425ae00a5855b5d89cd10de85e2e4dcd11a993421da4b9bc86d4c60f9816e7298f26e2b0e06018c0ef8cc2b23f","ssdeep":"768:lkDLZzMOCimeLeeHwIedAmCpKtez33eyJe2aAPuHiGK2aF7aZ+5YbK8KVzOSQZhr:aDLJ1meLeeQIeowtez33eyJeeu9K2q76","tlshash":"a123e8f751a090bf56834ad9bf355b4c726bb026e9410450f3ee87bc2bc6e95f90ad08","first_seen":"2026-02-28T12:50:32.319511Z","last_seen":"2026-02-28T12:50:32.319511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":49,"dns":23,"connect":1,"send":0,"wait":10,"receive":12,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/main.074d9967.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/js/main.074d9967.js HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.074d9967.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"ebc2589d5c6914ee179898f843c37ab7\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8m2m6-1772283005303-b1a959a576f1\r\ncontent-length: 877551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2782449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d8648288512e06f4d5ad8fbf2acf3a3b","sha1":"b0061c6a24916bbac8c241267d0cb07addda2819","sha256":"9fa170af34b7c1fbf610cba88fe7d2b9150f74b8dc4f3cc7ae11e70827d287fc","sha512":"f11c78813972fffc5b180ff47588e918735e39fd1b56031b30ccee35daf4346e362014d4531c529b885879d2084308a74a18a93416a717a832d285dd5ee6d11b","ssdeep":"12288:IbpyG48YDp1UzUPP7e37Znh/yMKfuUW4ULeG7A:Sm8YDiee37Zh/nFM","tlshash":"4e257d94b758f0794be37696787f1402b23a2d45948d4018b2e8ccf668ef5c8a237fb5","first_seen":"2026-02-28T12:50:32.322441Z","last_seen":"2026-03-19T23:06:02.676568Z","times_seen":12,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/img/solana-banner-gradient.svg","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /img/solana-banner-gradient.svg HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"solana-banner-gradient.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"a4a5b3a30f3710053d3dfb716bf4a9b5\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jqlzq-1772283005304-ddeeb17f3e42\r\ncontent-length: 641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1559,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4a5b3a30f3710053d3dfb716bf4a9b5","sha1":"ec0753653259be68b9fb3e56b6c7d265e275d945","sha256":"96b51cccb61e47ec2252e5f04578582a48120179c80cb7e6d7e7e069e920b137","sha512":"7630086db66487cf6680c6c2c01b7cd8b5d6dbe08315430da46eb836051e5cdd6a53c9ad39481b9004c442db7138298a6401389c6fd83ee8c9aa82020deabb72","ssdeep":"","tlshash":"f731c069e65c8465f392860eab44fc616a32a5ced7771285f1a80e1c2b1d0f34c49eac","first_seen":"2025-09-09T17:39:19.769569Z","last_seen":"2026-03-18T11:54:07.99518Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/img/supportlogo.svg","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /img/supportlogo.svg HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"supportlogo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"c16a0e9dc2448e12405f80117e9c05c0\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5l7lf-1772283005304-8cc83332850a\r\ncontent-length: 1345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2641,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c16a0e9dc2448e12405f80117e9c05c0","sha1":"eceb5bfb3c8eb8798d4c7c131129d6a7e312998e","sha256":"84a1f1637b1cdd254d4a5b47fa84ce2b5c45b8cb1fa96d52405762532fc11b7f","sha512":"12fade0518c4b50571af5ab3e2a856b346b801790094a3f82c0346ac318fd93dc3f35246158d0ebe4fdd178827c099c3cebf7725f8667841d2418c27c95d4238","ssdeep":"","tlshash":"fe5186e106e0e1c1a266ceeadd0799c2ad2f30fefc5543c685f1da1b6913de2948cc14","first_seen":"2025-09-09T17:39:19.763011Z","last_seen":"2026-07-28T13:56:49.510703Z","times_seen":427,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/fonts/Euclid_Circular_B_Regular-4a3055af2b5d3eb95690b2b833db56ca.ttf","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/fonts/Euclid_Circular_B_Regular-4a3055af2b5d3eb95690b2b833db56ca.ttf HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/assets/css/styles.0ae6bf2f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Euclid_Circular_B_Regular-4a3055af2b5d3eb95690b2b833db56ca.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"f29cfc3fa5ade3421e1a2c66f9e01a34\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q82xj-1772283005466-a2991508263d\r\ncontent-length: 50493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141448,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 36 names, Macintosh","md5":"f29cfc3fa5ade3421e1a2c66f9e01a34","sha1":"4e43c088720b0e9055676db98585002e85415306","sha256":"28adb1cb90966cf01a39261fbaa799ec355e8c4aa17f982cc2690aa828efaeff","sha512":"37e7a51dd2b13f5826c0a2fc05afa53f11336090218a7429e7b55ef5efae9133c0050f41286007c8667a414abd07fd74cca858d12f80623058b7b02961b95254","ssdeep":"1536:229lI7ugIgGh1uwfFSSVC/lXHZtQTGSqKLgJibj:L9mS3gwuUwSVC/lXHZkGpJej","tlshash":"eed34b43f3c1e64ae31b6f774d23d2b46116f82c8f775b8a789a2a24dc8b6945dd0248","first_seen":"2023-05-23T11:24:12Z","last_seen":"2026-07-25T06:34:21.484384Z","times_seen":200,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/1df93b7f.a11d3711.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/js/1df93b7f.a11d3711.js HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::bnn8d-1772283005841-a0b5fce96581\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"dc032682e424dc13f5b1e9a7ffbb2bf6","sha1":"0eb75dcba9333c6f013ddc24571e53196b0fc287","sha256":"6a52aafe4492b7ba00506558cfad43b6e2696456ed3f969f0b201c46e1369fa9","sha512":"9831a558cb3a71383379f78feea55a496060300d48170d5150dfd3765d6c82ab3b254d83e292df23914e82bfb8e28bd9644ed253bc04d2f00a53ad1183ba65bf","ssdeep":"","tlshash":"e2a0223e00c30f0eb3c20000a08a0a3800000023afa8fe0020ceaf383c083cfb300a80","first_seen":"2026-02-28T12:50:32.33144Z","last_seen":"2026-02-28T12:50:32.33144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/platform.twitter.com/widgets.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /platform.twitter.com/widgets.js HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::q82xj-1772283005299-642a84179127\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ee9ef5df20d2d4bc3c383c63d7bada11","sha1":"61ebbfe52594a457744053d68a5f31458b664cbd","sha256":"953c60346ba536095c5c6e3200826876b84ccb0ae7d4dc848c0787c57e88962a","sha512":"0a83cb439f16d29eb373a84b6d21e906780daf09bc59f3af7499042611b29b4defac395ab6d3fc4a8985bc360421980e6d529f16ad892398590eef65e4a366e6","ssdeep":"","tlshash":"24a0120d05c0084e328404101111127444000022fed2b100408f2622510568e5340149","first_seen":"2026-02-28T12:50:32.333803Z","last_seen":"2026-02-28T12:50:32.333803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/runtime_main.1dade103.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/js/runtime_main.1dade103.js HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"runtime_main.1dade103.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"12a615ff52ba74494d4555e3eda00d7e\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kzhbx-1772283005302-bf93c36a0a62\r\ncontent-length: 11949\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":27026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27026), with no line terminators","md5":"10fe204f4ddc4b755f4ebded896be202","sha1":"4e58b10456b12357f7115bd85651b30af755ffd7","sha256":"b91301cb0cedcf297692a8c60cc60da84d072d48dd162b3d6bb8acf8e591989f","sha512":"ff80341a83f7c951670a6d5eb0361f7cfb5255b6d6182f8394c4223c21fc38f147a1f3f15e6758268d05ed480252637e542ae5f9e91bfe7ea09a8e6f1e945756","ssdeep":"768:QpgqLkLQD1tJfE3LlbutB6SrkUl4mxkXViZpuo:wgq0QxrfERyL6SYszZ1","tlshash":"f2c2e7ae976ce9ea7cb045a57e8194f4680ab4113c010cd2b0dac77944d4eb87635ff7","first_seen":"2026-02-28T12:50:32.336205Z","last_seen":"2026-03-19T23:06:02.685563Z","times_seen":12,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/img/supportlogodark.svg","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /img/supportlogodark.svg HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"supportlogodark.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"bf1459c2367f120be6e5f10d8244cef8\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jh2hj-1772283005305-8a08a36ddc7b\r\ncontent-length: 1345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2641,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf1459c2367f120be6e5f10d8244cef8","sha1":"8082544ce60f7b9298d19046ae39a61e2273705c","sha256":"f78966c739c5698df72792324119a3669f3efffce6ffca23cb1418bcf7fd4709","sha512":"c5f4e934c64b4b9cc3153d6da92ece476f10d84956fd0ef99f562d1ac0dfdc1f309ffd116347cbedf5257c7b8c7ca3eade1af997dabccba4973e0f1665a0f954","ssdeep":"","tlshash":"c45186e106e0e1c1a266ceeadd0759c2ad2f30fefc5543c585f1da1b6913de2948dc24","first_seen":"2025-09-09T17:39:19.754062Z","last_seen":"2026-03-31T02:28:55.803687Z","times_seen":16,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/fonts/MM_Sans-Regular-0861ce41df3335e955b1fe61d228ea26.woff2","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/fonts/MM_Sans-Regular-0861ce41df3335e955b1fe61d228ea26.woff2 HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/assets/css/styles.0ae6bf2f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"MM_Sans-Regular-0861ce41df3335e955b1fe61d228ea26.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"4cbaa8abdc983890e00c5ab88d51b8f0\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c788l-1772283005470-307cef69979b\r\ncontent-length: 31380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31380,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31380, version 1.0","md5":"4cbaa8abdc983890e00c5ab88d51b8f0","sha1":"8ab06e77fe9d5994375883d6cef99d362ce6c3a8","sha256":"dcb31e46212fa0beb44d0a8a0642b92b902c391a68892d8372113f23dbcdaf39","sha512":"813de3c3321a7bb4d4f87ef586372702beb2fa0e88d75612b41001aa8ea24fe1230e3266bb270d33bd33e8197d9a3e4842a8aa9858666d001c79bdfd04344d45","ssdeep":"768:Hr21dfocSD36YeD3VP83wIuufeF6KygKG:Hr21dJgMDu3wIYTn","tlshash":"2de2e1409fa9b0698bdf4a7393cf15b01f181bb1f0b1ab2877a76152524fd17e28a162","first_seen":"2025-03-03T17:47:39.859766Z","last_seen":"2026-03-31T02:28:55.780378Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/js/a7456010.6b0c3a96.js","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/js/a7456010.6b0c3a96.js HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::bnn8d-1772283005847-315b72ce3c4c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ee532eb7f9e4315cb125d0f750e086e7","sha1":"319a64e82fd4b22cffd6a90f06e93b415504453f","sha256":"225703ad6a546fec3a453023b4f5a7f261f224dad5e5476cde7e31e045fc1cad","sha512":"83ab71cc4de853374e527dae8710b8d6c22d235add9c84bc26abd13b5e1ba77cfa5ff8110ad65783707161530a15b20e2e20dff8515ee417d1b3883180205d04","ssdeep":"","tlshash":"c6a0112e80ca0e0a328008002082023a00080022aba0ea2022ceab20200a38ee300880","first_seen":"2026-02-28T12:50:32.342529Z","last_seen":"2026-02-28T12:50:32.342529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/fonts/Euclid_Circular_B_Medium-da9107f189000fddc6e7b6877df90fb4.ttf","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/fonts/Euclid_Circular_B_Medium-da9107f189000fddc6e7b6877df90fb4.ttf HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/assets/css/styles.0ae6bf2f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Euclid_Circular_B_Medium-da9107f189000fddc6e7b6877df90fb4.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"e5a8e44f6ed4560fa934c8e0233d1597\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jh2hj-1772283005471-3835b9b7f75c\r\ncontent-length: 50941\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":141624,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 36 names, Macintosh","md5":"e5a8e44f6ed4560fa934c8e0233d1597","sha1":"95b5de4ce13943de49522275baac524cd5b4498a","sha256":"e8ef669e66e118292d482bbc0c8b7a288960a274cc671bfb036b4c4e4581cf58","sha512":"2661043c0f413f9227d51816da836dbe69437b87b49d1b1f81c15b3ed33fd289868ad09c84433a4fd937e04b60cc430d5aca46d545adc89592ebb98341281eb3","ssdeep":"3072:+P5HHHHn32m4G1hWGMze7JCStVY4/jnhXqZjNOF3EpXvzJ:+PMSD3OvzJ","tlshash":"c9d33b47f380e209e35e6fbb4e73d2b49117f8298f675b4db99a2534dc8b2d84da0244","first_seen":"2023-05-23T11:24:12Z","last_seen":"2026-07-25T06:34:21.493531Z","times_seen":67,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/assets/css/styles.0ae6bf2f.css","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/css/styles.0ae6bf2f.css HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9129\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"styles.0ae6bf2f.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"357ecd2ff868933914bb1c6a30c9bb06\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::przrp-1772283005301-c9614c0d2a80\r\ncontent-length: 61072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323354,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"987fe07eeeb109cfafffed516dd06e65","sha1":"e0b10e82c94e244e63b80ef2a2d0409396436574","sha256":"8b42052ad2946d1adf5ce01a5a34f2decbdcbda5bb384bbae5ef7b328e067da5","sha512":"e81f04bc108a91be93bd3d85ef1503b8297d5ee23d5057352942cc43a1b958ebcda6d35c7dd588bdf88481f98e68bbc9d276ff82492d946a4d8c4bb1bbc86a22","ssdeep":"3072:scb0hnsUQh2YmYuPrgj+qScJqC7HSxFLi2Ax1zm95Tr1/O:fyqScJqC7HmAxE9a","tlshash":"8e64c6b6fa20613c6927531693c8f56ca739f881ee1357d6f203a52556cbff20623a4c","first_seen":"2026-02-28T12:50:32.345035Z","last_seen":"2026-03-19T23:06:02.656773Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/www.googletagmanager.com/gtm5445.html?id=GTM-K2DVTQG","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /www.googletagmanager.com/gtm5445.html?id=GTM-K2DVTQG HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jh2hj-1772283005326-7b001ae2cc67\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"418928271c72faa22e59fa9c99400294","sha1":"2a31e208a6554083f7436d13c36d673da551e1ca","sha256":"49541b76885b8fcfcbc77bc60b98e9832c7323bc7794b7f9ce9315d1d9fa7a7c","sha512":"c2660a6dc52aa172c9869898f5dcba2dbd1d8bfb8d70ed8d35033ec27f63a2b6b4f6ae5865441b367cf52eb20e5288365decaf00880b663436d6141e08c044ab","ssdeep":"","tlshash":"cfa0122d05c81c0832850430113b21341020451369d5aa01088d2510100c38e9340044","first_seen":"2026-02-28T12:50:32.346859Z","last_seen":"2026-02-28T12:50:32.346859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask-guider.vercel.app/img/favicon.svg","fqdn":"metamask-guider.vercel.app","domain":"metamask-guider.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask-guider.vercel.app/","date":"2026-02-28T12:50:05.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /img/favicon.svg HTTP/1.1\r\nHost: metamask-guider.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask-guider.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9128\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Feb 2026 12:50:05 GMT\r\netag: \"58e0a8f7ce3f16698fea53edb16877f6\"\r\nlast-modified: Sat, 28 Feb 2026 10:17:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bnn8d-1772283005873-581ecfa652b3\r\ncontent-length: 819\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58e0a8f7ce3f16698fea53edb16877f6","sha1":"4bf537ad49e058c5c03f8742b6cd7ff331d924bc","sha256":"6dd7454a0b096292efb50b87c073e152642fba24fe09c856200174f649489403","sha512":"8634090ed7d74a764b961fafcf22eb76f8c3398b91ff1b6e2a1f1c017d6e24c3fd8de9cf22a12d69ef4a106ab192143e6c77e1200eb863b8e34cfb301cc6ab44","ssdeep":"","tlshash":"f14134e5927cf5b2565747e1af7e4c78187a30cd525b198c398c07008669bfef2d4d84","first_seen":"2026-02-28T12:50:32.348629Z","last_seen":"2026-03-19T23:06:02.605637Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"metamask-guider.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}