{"report_id":"9aa66796-14d5-437a-a174-ca50c59ca663","version":6,"status":"done","tags":[],"date":"2026-02-16T21:24:58Z","url":{"schema":"https","addr":"metamaskwalletinsure.com/import","fqdn":"metamaskwalletinsure.com","domain":"metamaskwalletinsure.com","tld":"com"},"ip":{"addr":"62.204.35.214","port":0,"asn":26548,"as":"PUREVOLTAGE-INC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"metamaskwalletinsure.com/import","fqdn":"metamaskwalletinsure.com","domain":"metamaskwalletinsure.com","tld":"com"},"title":"Domain for Sale","dom":{"size":2145,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f7927ca12b06f337fba7c35599a9fb2f","sha1":"27f406867c76ed9c89c2b365b21055e987ee4a27","sha256":"3724b8a67fbd8063d98f7eb24a21a50b35516007ed2b6a0f973e14fd05d2eff7","sha512":"cd42453d73596c1ea2a33dcc0f08b0f83aa7ecace7ab8c3db1979b6389ab52516fe5a5a72a9427a9029fdf7b1890f2d6c123c825b6eecf1e50ba08caa3a46f59","ssdeep":"","tlshash":"1841dc8686f308827002d06c2bbaaa403756c007854ece693e9c73b8dfc99945ae679c","dom_hash":"domhash038b230a277b7c5f3e77b2956ef8e17f","first_seen":"2026-01-27T15:31:28.459114Z","last_seen":"2026-05-31T23:36:48.718208Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metamaskwalletinsure.com/import","fqdn":"metamaskwalletinsure.com","domain":"metamaskwalletinsure.com","tld":"com"},"ip":{"addr":"62.204.35.214","port":0,"asn":26548,"as":"PUREVOLTAGE-INC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T21:24:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"metamaskwalletinsure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metamaskwalletinsure.com","ip":{"addr":"62.204.35.214","port":443,"asn":26548,"as":"PUREVOLTAGE-INC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":4564,"sent_data":960,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamaskwalletinsure.com/import","fqdn":"metamaskwalletinsure.com","domain":"metamaskwalletinsure.com","tld":"com"},"ip":{"addr":"62.204.35.214","port":443,"asn":26548,"as":"PUREVOLTAGE-INC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T21:24:37.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskwalletinsure.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 11:25:33 GMT","end":"Sat, 09 May 2026 11:25:32 GMT"},"fingerprint":{"sha1":"6E:D0:C0:72:5A:81:7B:EB:5B:A3:04:0F:E6:C2:D6:92:0C:67:22:32","sha256":"85:7E:4A:F9:1A:A4:E9:4A:73:4B:B2:87:40:07:8E:1A:14:85:10:E6:C1:33:7C:A0:FE:59:DE:BE:7F:59:8D:82"}}},"request":{"raw":"GET /import HTTP/1.1\r\nHost: metamaskwalletinsure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 2164\r\nDate: Mon, 16 Feb 2026 21:24:37 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e644ba0ae4cf4d02beb8470628382f0b","sha1":"f814f623651a2b6ee77921d9764af50d7f62db89","sha256":"c331a0daf0eab377616bd7ba11e2647901366acfe272e0b427aca248b7744d1e","sha512":"6a3a1afd2867f6adf1c8c0a6e90440b8f09a8042da7cf23663a402f896df1b03882421a9065afa1b7fda62a51352896407d3bcad79b2ad106ec7237b5f8d5890","ssdeep":"","tlshash":"7541bcc686f709823002906c6bb5ab402756c047854bce6a7edd33b8cfc59a499f679d","first_seen":"2026-01-27T15:31:28.463035Z","last_seen":"2026-05-31T23:36:48.720621Z","times_seen":6,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":287,"dns":28,"connect":127,"send":0,"wait":128,"receive":130,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"metamaskwalletinsure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskwalletinsure.com/favicon.ico","fqdn":"metamaskwalletinsure.com","domain":"metamaskwalletinsure.com","tld":"com"},"ip":{"addr":"62.204.35.214","port":443,"asn":26548,"as":"PUREVOLTAGE-INC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskwalletinsure.com/import","date":"2026-02-16T21:24:38.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskwalletinsure.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 11:25:33 GMT","end":"Sat, 09 May 2026 11:25:32 GMT"},"fingerprint":{"sha1":"6E:D0:C0:72:5A:81:7B:EB:5B:A3:04:0F:E6:C2:D6:92:0C:67:22:32","sha256":"85:7E:4A:F9:1A:A4:E9:4A:73:4B:B2:87:40:07:8E:1A:14:85:10:E6:C1:33:7C:A0:FE:59:DE:BE:7F:59:8D:82"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamaskwalletinsure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskwalletinsure.com/import\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 2164\r\nDate: Mon, 16 Feb 2026 21:24:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e644ba0ae4cf4d02beb8470628382f0b","sha1":"f814f623651a2b6ee77921d9764af50d7f62db89","sha256":"c331a0daf0eab377616bd7ba11e2647901366acfe272e0b427aca248b7744d1e","sha512":"6a3a1afd2867f6adf1c8c0a6e90440b8f09a8042da7cf23663a402f896df1b03882421a9065afa1b7fda62a51352896407d3bcad79b2ad106ec7237b5f8d5890","ssdeep":"","tlshash":"7541bcc686f709823002906c6bb5ab402756c047854bce6a7edd33b8cfc59a499f679d","first_seen":"2026-01-27T15:31:28.463035Z","last_seen":"2026-05-31T23:36:48.720621Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"metamaskwalletinsure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}