{"report_id":"c1abfc19-91ec-4f09-8be6-37a3318f5bdd","version":6,"status":"done","tags":["crypto","phishing"],"date":"2026-02-01T04:35:06Z","url":{"schema":"http","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"title":"MetaMask Download","dom":{"size":19835,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (382)","md5":"134bca48b0e86c7978b9e1354c524987","sha1":"ebaff4b4f0c36753caf862d8519e04615a3a6fc7","sha256":"5c737a3c6c37368c95c6e764360065956b6c86e48e9f1283c7c3b82ba7c8ee63","sha512":"24321f4e2b4669ca7e9897a7b40ce9e3fb5ec1e769e67f2c610d0c325f6d64b641bd4fe3bc57f8fae4ad5076168fe50ef882e3797b64137b994458e9930d5668","ssdeep":"384:3rltOpsEOK/1p3sChdj5i8kBytSgFk5yLtYLxp:gJh55QBiki+T","tlshash":"69928352acd04077228294c161717f2aee83e607d946c416f1fd4689bfe7f92dc2ba4e","dom_hash":"domhash60b2b737e6b230748a7e01cca047af10","first_seen":"2025-12-03T03:49:01.288382Z","last_seen":"2026-02-01T04:35:09.229691Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T04:35:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":1,"received_data":8924,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"metamask.asia","ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-07-22T13:03:55.700676Z","last_seen":"2026-01-03T04:38:13.228276Z","alert_count":122,"request_count":22,"received_data":1228215,"sent_data":9921,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"bowser:1.9.4","description":"A small, fast and rich-API browser/platform/engine detector for both browser and node.","website":"https://opencollective.com/bowser","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":325513,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3e54v103j8qbb.cloudfront.net","ip":{"addr":"3.164.226.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-11T23:08:14Z","last_seen":"2026-01-26T07:21:54.99392Z","alert_count":1,"request_count":1,"received_data":90092,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bowser/1.9.4/bowser.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"557e1db8c44d751c997a04f411a61598","sha1":"849afb67561b75e90bc3ca310db3a82742a064ac","sha256":"b52f6b6011741e76cefa2be41164bbc9b33bba334b9ad15b03abad37b609d983","sha512":"71f29b4aa47197ea065990fc2ea159309ea71b845f8bb518465fc9c6f84de161160f9066bcc0b84af5923e500aeeb6c241302b9c4c9a161578c7f04708be98a7","ssdeep":"192:zrtNwo1ZAhquwmrYTtZtqhrJQcgm7RgsedRZ:zrtNwo1ZAhquwMYTtZtqhrJQcgmqsmZ","tlshash":"e1f123ece54fa4fb48f46706584e21381bb0c8324d7f9e51be8ce151ea59cad443aba0","size":7901,"data":"","first_seen":"2023-03-07T12:12:07Z","last_seen":"2026-08-05T19:50:05.416791Z","times_seen":546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=604ec65d7935b45ce251b35e","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.226.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-13T19:54:04.055605Z","times_seen":266709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-13T19:54:04.055605Z","times_seen":266709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12c0659e2686c193368d09f53edc8090","sha1":"e2a481f856253ec2b3dfe266ab035bc1ca650b72","sha256":"7269e1e3bae2d22edc632e41922fd7e090dd785fdb749c05b577f78e9126075c","sha512":"fe04eacae07e7b041c6b24c6592fafd74e2c71b56b4835f9cd70958ae8ddfe37906bd712cd60f070140041b424f92748f576e522c165d0d8bbf223d586495465","ssdeep":"","tlshash":"4bc012bbe2718c2a609f396d1e4e2909686205939d105d5781184dd0b9a896c415ca07","size":184,"data":"","first_seen":"2023-03-07T12:02:20Z","last_seen":"2026-05-26T07:36:47.691174Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d91245b7090b7ac9187153b1a0b8e9a","sha1":"90a52252a72b5f1b62e91edc9c05f7b53447a015","sha256":"4b19310762a20b2fe75c72debfc8123beecb3342b931663d921adbc5fc64037a","sha512":"71f47340e4c16d62b27b2ae8bf0dc36e014a907469de83c609f150cd0a81a5dd07245c7fcb83df4a621152431d4b11cb803f93b65b6a97a6427a5fba6a457281","ssdeep":"","tlshash":"3e31cc5f6afd4032563334b9150f2104f62a2a036184cd453cacaaa8ffb4a72a1b9a53","size":1566,"data":"","first_seen":"2023-03-07T15:04:45Z","last_seen":"2026-02-01T04:35:09.246935Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-37075177-6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34048f4543cb3f19aab191e8956ac5f0","sha1":"9a0ee9b94a528160220c9b7c8cce9175e588c839","sha256":"2e47d21c13a318e0f138570e192e56c7c0bffde628895969857da4933cbc32d0","sha512":"6b8c9a6b40b261b47bedfda5faf611b578b9c977264cee67a1a20c658496fa5a4c1ab9b72f35ddc131dba2546aa78b0adbe76f26c951444e8828b6e7bd2fb6b8","ssdeep":"6144:Ga2dvz5HSaoCsxcV/Gu+rP+Q8g7lTpiRpy83wuONG3+:FUvFSaoCsxi/Gu+6Q8V3wNo+","tlshash":"6b6408cd73d6742683a3a478503f118ba17b7992f84cc899e186d8d42e70aaa4137f7d","size":324863,"data":"","first_seen":"2026-02-01T04:35:09.233144Z","last_seen":"2026-02-01T04:35:09.233144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/js/jquery.min.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a728460147fb9af7faf0e587b9fbf42","sha1":"f3a55f44fb81cf8ee908a3872841f70d6548f8c1","sha256":"8c574e0a06396dfa7064b8b460e0e4a8d5d0748c4aa66eb2e4efdfcb46da4b31","sha512":"c6326be84aed0d20ae924246119b19ce4fd705f967d46c6c9dd89b1180984163f0708b9e0e8917f319304bf617f3c35d83657fcbfae1340bc34e689f0961c6a5","ssdeep":"1536:DYUqmRbwh3Kvk8QRExoulFTz7bkKz1A+uezbp9Bl+u5x/90yWZmnEJSxy3Y6nRwT:qSi3a7PxkKmO8MP63vkxEyUtCu+","tlshash":"5293d7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e49a07bf7d","size":92555,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T14:02:52.785475Z","times_seen":1928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"afb473d9c5e6d6363f77556923ec9d77","sha1":"15c4dfa5cb552bdb985711f16018d6e5b569e065","sha256":"19ffc475a1d3f89c7e3b8649d188a934cebbbc7b8d189936a977ca1122870f49","sha512":"82e06b414fb15e479a19d52c478cbc99bb1652c053f84778c93e13a5432ba9922d89668bbc22d6fb2028adeba10a5fd4c33dc6fe04dbaccc4d1e9a7836f4edc0","ssdeep":"","tlshash":"2ad0a7663c479abc4b200da1c4b5a634409cd10c9882ea440cafa824212537e551c46d","size":210,"data":"","first_seen":"2023-03-07T17:55:07Z","last_seen":"2026-02-01T04:35:09.247453Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/js/webflow.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"631a7d3ebb657b0926e21d4c95002e25","sha1":"6745523a5233813bdafbba412ff43afa6199c737","sha256":"94b3185eff8d48c0db402f227d910832d0ea342b6018db0cbea95577509fd161","sha512":"61532d8df2d7f32efbfd126c676967f4c2fcdfc085c62e75b96f68a408342e08f6976f8f1e472b1b047ede2b189d874a2a1d15c7aca8d9ab48c7258a47fb0034","ssdeep":"6144:ui/F2d9aGkD1vCAcFFAoldAPt9W6MaT1IMOZKL:Ba0GBGPq6t15RL","tlshash":"2ac41b897251707902d60269d01f1907f337266aa00ec89cf669d8ee6dbcddd2277f3a","size":565891,"data":"","first_seen":"2023-03-07T14:39:03Z","last_seen":"2026-07-19T04:54:36.742533Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamask.asia/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Aug 2021 01:25:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119be9e-15d84\"\r\nexpires: Sun, 01 Feb 2026 16:34:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-13T19:54:04.055605Z","times_seen":266709,"resource_available":true,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/fonts/EuclidCircularB-Regular-WebXL.woff2","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/css/metamask-staging-2.webflow.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45196\r\nlast-modified: Mon, 16 Aug 2021 01:02:18 GMT\r\netag: \"6119b91a-b08c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45196, version 3.66","md5":"2d75957df3bb3aa6ed84f6591b0d5a1a","sha1":"906424e75625f63b0188471067065794d0348536","sha256":"8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b","sha512":"79733ed5303ca93cdec16b9da25cd95ca397343d5ee529f4074ea878fa0f9916a6ffef297b51d5b9b3cd3bf8e199e203f91598166429bcce398f7c9055557c40","ssdeep":"768:I31VpnYUI+dibkAK4rZJ5CkE9cfnRN0C6fZQ/UAqD2zsUz8ANMDuu1ftOl6GXv:Ep0IJ4FJ5MhQ22zsUzoDp1Olhf","tlshash":"cc13f1586f3cc766d23960ead86c893d483aa8b6ac420fd4fa47173b0e44755934bb70","first_seen":"2023-04-13T20:09:28Z","last_seen":"2026-08-04T06:05:55.389747Z","times_seen":846,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T04:34:45.434Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":0,"dns":0,"connect":349,"send":0,"wait":0,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-37075177-6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=UA-37075177-6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\nexpires: Sun, 01 Feb 2026 04:34:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 01 Feb 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 113017\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324863,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"34048f4543cb3f19aab191e8956ac5f0","sha1":"9a0ee9b94a528160220c9b7c8cce9175e588c839","sha256":"2e47d21c13a318e0f138570e192e56c7c0bffde628895969857da4933cbc32d0","sha512":"6b8c9a6b40b261b47bedfda5faf611b578b9c977264cee67a1a20c658496fa5a4c1ab9b72f35ddc131dba2546aa78b0adbe76f26c951444e8828b6e7bd2fb6b8","ssdeep":"6144:Ga2dvz5HSaoCsxcV/Gu+rP+Q8g7lTpiRpy83wuONG3+:FUvFSaoCsxi/Gu+6Q8V3wNo+","tlshash":"6b6408cd73d6742683a3a478503f118ba17b7992f84cc899e186d8d42e70aaa4137f7d","first_seen":"2026-02-01T04:35:09.233144Z","last_seen":"2026-02-01T04:35:09.233144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":67,"dns":1,"connect":9,"send":0,"wait":28,"receive":22,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/images/download-extension-p-800.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/download-extension-p-800.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb12-6c35\"\r\nexpires: Tue, 03 Mar 2026 04:34:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 407, 8-bit colormap, non-interlaced","md5":"ef0d0b1ba0d66b79c24bceb966e7165f","sha1":"acec89109c680595e7283448cf970cbbed9c9312","sha256":"87644982f01044c06aa36da2713d8b652ffa95af674e22cbc7019f6415ad12d2","sha512":"ec2e4e3d28db1630615fcf0935488373d67eca66d90f5bb9131329fe21dc6c093e317d71a83962bb30dff97df3ed8574b51f99f007980c134ceb38fca22769fc","ssdeep":"768:5k0uP1iPP0wnFT+YbXROW+I7B7QprayxotWBWKf:y59/AFDR7+xplmQBWKf","tlshash":"28c2e1876cfa080fe6de4d7bc030f49fcb24e1bbb3682824966a5637455851e139d39a","first_seen":"2023-05-22T04:42:49Z","last_seen":"2026-07-19T04:54:36.728503Z","times_seen":78,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/images/Brave.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/Brave.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb10-4a81\"\r\nexpires: Tue, 03 Mar 2026 04:34:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"fbe69790d36bf636e87e83f5413218a7","sha1":"709f392de11c5f48cbbbefa95d0a6cb56e2592db","sha256":"cd70b79d81f32aa721dedf46ea682f1f0c1808d2ffe09da63730b2a01380c214","sha512":"01e965f180ab6c42d04d12e4d5d0d056eda222fd09b6c7fb81c956e08a3fa431f0e586c09cb86eaf162bf1f6ab011c7c0d0d246d2cc2703be85246cd84120c96","ssdeep":"384:1a7wmIyRm5Z6fHi4QHvh+5uHwpHY3dYgvINBqfantF72NSUCY+/:w7wm/ALmQPhSWwpHSZINgfoENSxp/","tlshash":"fc82d180101dc1f588fcfa37557ca799f4939db530697a289fe30b01089edc6af8454b","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.695382Z","times_seen":608,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/fonts/EuclidCircularB-Bold-WebXL.woff2","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /fonts/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/css/metamask-staging-2.webflow.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 44544\r\nlast-modified: Mon, 16 Aug 2021 01:02:24 GMT\r\netag: \"6119b920-ae00\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44544, version 3.66","md5":"9024d0bf73943172297c4628d0054e20","sha1":"36c3795e7b297d06589e15ef59592683d9ed0974","sha256":"88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df","sha512":"3b621d07add00dcbbefa4b14279c78260d361b9848226d472780896865ecdb0c5096b1ad013ed114ad6c9b5fc60814cd678fd124d5265e9479abc2730cbf9bd6","ssdeep":"768:OYwXmLSu2ENQ2CMecobgGcYjYHI5FhZF2UIlN9/j7gAfHxiPiX0gaIutLAP:OYUm1NQ5gGPZF2UI397nEPinanA","tlshash":"1513e1e1f7961a8e4e500f3e236083be577c1469ff3349866588276d2ba51bf2073c56","first_seen":"2023-04-13T20:09:28Z","last_seen":"2026-08-03T15:51:51.461118Z","times_seen":783,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/images/favicon.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:49.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:00:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8ba-5fc\"\r\nexpires: Tue, 03 Mar 2026 04:34:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b7919ea38a8beed9b4763858c4f7412b","sha1":"1aa57bcd7ca8a0c3352923c9ee06c472f23d5b63","sha256":"214080adac9969108cb602cb68617e332db1288e95e18c29c10f9396c6d3744c","sha512":"7c2b72c2ab01ba3654182244ee3d95b7de954bbfc95ab9778c2360136134a920c1e8e58ba92f75e4ed20cf0595596b0e38020430c09f44a191aea972677fe07e","ssdeep":"","tlshash":"d53129d763af541cf59f8a630326c86074793853832240c98fd2fda422be818b27c29b","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.743233Z","times_seen":821,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/images/chrome_1chrome.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/chrome_1chrome.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb0e-f32\"\r\nexpires: Tue, 03 Mar 2026 04:34:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"162fd1e613c0f3a992365a980a4fd6cc","sha1":"3401907394d4810392719d9696ce0088a8847618","sha256":"90af37bb98146aba902ae19d013dc16ead7ea6f5050f339a5728eaf2a068c7ec","sha512":"96e832135c825622d2f9895d0ecf594d53acd49b3e225f195ffa35caa4ab982c0fcded0d30b3395615bc079c5854fc0b0bcc610dc514b08ee446d042a429d02a","ssdeep":"","tlshash":"a2814d1b8ca55e7752410d8424d9eecdc8623a35af45f669cea873093f166839044baa","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.713289Z","times_seen":608,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T04:34:44.866Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 01 Feb 2026 04:34:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://metamask.asia/\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":290,"dns":12,"connect":277,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/css/normalize.css","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Aug 2021 01:00:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8b6-1e5c\"\r\nexpires: Sun, 01 Feb 2026 16:34:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4951cc88307c632cf285d3ba988ab283","sha1":"031d58bc40b4242b27d8171a01bb0ecb5f9d22d7","sha256":"5c4a6fe64efc5d07833c35af9630d0f9b3d4d09a63f9358e441374e9102c9e81","sha512":"3351c28bc636eeca8938edebe26f5e6b93090c415d67e1446d68e442554d7f2226536c42b3f535d446172044344051b80306d957675ed9061022e9b88d34652f","ssdeep":"96:MrWcFPpkRUwojaszRO5LVSrwnTgPjnRo5wUEKsB+NE4t+49NaN71UB9:M/9pVjasdEvQnRo2UEKsBqBt+W67w","tlshash":"25f1b79923a04b5192395df5b3a7838577481127832c7c6eb4d340fc8fc9b1553baf99","first_seen":"2023-04-05T04:20:34Z","last_seen":"2026-08-11T15:30:47.437481Z","times_seen":783,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/images/download-ios-p-800.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/download-ios-p-800.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb14-6f71\"\r\nexpires: Tue, 03 Mar 2026 04:34:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 407, 8-bit colormap, non-interlaced","md5":"76b177e6396123e166446db3c18d77be","sha1":"c3ce0d1c5993bcb081fdd8d19d342fc6ff62cf49","sha256":"13c6d99edad1de7e82983bd0c7fd154513e4c06e29a665d94ead2512f60d33ce","sha512":"e9df5cbdecfaf28c280a799a41a7ed3d4e560150b6fb3f4cbc9f4af12785d4e5b82d661f8cbc084326cb7f9364b05fd8999636a65ce4428053b1209cb3e6a72d","ssdeep":"768:NpCfuLz9zPEGz5pzq4Rf4TMZ4qY2xBQCkNZ:NOuN4GzfPRKMZ4q/BQCkNZ","tlshash":"9cd2e185e72bcb2706b3193e0d989965ad5742a880220f66b74d2bd8754c6c3a14ffbc","first_seen":"2023-05-22T04:42:49Z","last_seen":"2026-07-19T04:54:36.74458Z","times_seen":78,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/js/webflow.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /js/webflow.js HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Aug 2021 01:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8d8-8a283\"\r\nexpires: Sun, 01 Feb 2026 16:34:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54438)","md5":"631a7d3ebb657b0926e21d4c95002e25","sha1":"6745523a5233813bdafbba412ff43afa6199c737","sha256":"94b3185eff8d48c0db402f227d910832d0ea342b6018db0cbea95577509fd161","sha512":"61532d8df2d7f32efbfd126c676967f4c2fcdfc085c62e75b96f68a408342e08f6976f8f1e472b1b047ede2b189d874a2a1d15c7aca8d9ab48c7258a47fb0034","ssdeep":"6144:ui/F2d9aGkD1vCAcFFAoldAPt9W6MaT1IMOZKL:Ba0GBGPq6t15RL","tlshash":"2ac41b897251707902d60269d01f1907f337266aa00ec89cf669d8ee6dbcddd2277f3a","first_seen":"2023-03-07T14:39:03Z","last_seen":"2026-07-19T04:54:36.742533Z","times_seen":91,"resource_available":true,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=604ec65d7935b45ce251b35e","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.226.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=604ec65d7935b45ce251b35e HTTP/1.1\r\nHost: d3e54v103j8qbb.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metamask.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 20 Jul 2020 17:53:02 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Sun, 01 Feb 2026 03:45:08 GMT\r\ncache-control: max-age=84600, must-revalidate\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nvary: accept-encoding\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\nage: 9171\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: UKpBUMKxVKezngtMQEH-mQeXCDB3arBLbkkFB4dZnCZCJxW9sMuHvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-13T19:54:04.055605Z","times_seen":266709,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":12,"dns":0,"connect":8,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/js/jquery.min.js","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Sep 2021 11:59:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61320e22-1698b\"\r\nexpires: Sun, 01 Feb 2026 16:34:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65481)","md5":"3a728460147fb9af7faf0e587b9fbf42","sha1":"f3a55f44fb81cf8ee908a3872841f70d6548f8c1","sha256":"8c574e0a06396dfa7064b8b460e0e4a8d5d0748c4aa66eb2e4efdfcb46da4b31","sha512":"c6326be84aed0d20ae924246119b19ce4fd705f967d46c6c9dd89b1180984163f0708b9e0e8917f319304bf617f3c35d83657fcbfae1340bc34e689f0961c6a5","ssdeep":"1536:DYUqmRbwh3Kvk8QRExoulFTz7bkKz1A+uezbp9Bl+u5x/90yWZmnEJSxy3Y6nRwT:qSi3a7PxkKmO8MP63vkxEyUtCu+","tlshash":"5293d7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e49a07bf7d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T14:02:52.785475Z","times_seen":1928,"resource_available":true,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/css/metamask-staging-2.webflow.css","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /css/metamask-staging-2.webflow.css HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Aug 2021 01:10:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb1a-2111c\"\r\nexpires: Sun, 01 Feb 2026 16:34:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e70056bfbc747993fb4fcc3066df4edc","sha1":"9483693523671d01c5d2e980f745d94affd21b76","sha256":"1bf587c69a91fd129d95528d3580dfeeae47163c18fec1cb1335ed40d8cac814","sha512":"60820382c3ebad99294e04f52d693d0ad399bebecf261e72f1108d1082bf19ab827f9df4af593df4518139c00f20cf8b546e8c3957bc24454fcf121395b1e476","ssdeep":"1536:9sxHJFu3mk3kQoVi1sR9AOnw6IqAXAm8whgZ4GDHNmd6BNqXgCknzFExxH7OUnJh:+xqTCRW6ylKnqWO","tlshash":"84d341a719612104341f6ca4cba6bb10e2b9c053864ffdf639d2544ccf869c969b3b6e","first_seen":"2025-05-13T14:35:53.293295Z","last_seen":"2026-02-01T04:35:09.239744Z","times_seen":11,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/images/mm-logo.svg","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/mm-logo.svg HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 16 Aug 2021 01:00:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8c6-2ef3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12019,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51bcea2625eb2c6e9268a7377a792c86","sha1":"5eeb306e6584eed1747c36c11724f193711d430e","sha256":"5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b","sha512":"b70f1531c4d61f0494b516da54af09eabaec98a040993052dc63e39ac7d45e1dd112f5dc898dbfe57f77e5ee60ed8acf31b0b4eca8451fe93f77a962026dc742","ssdeep":"192:7h/+7QQKF3oE3WAiq4rKp/svCULRoWBkiCcxj4kPeErXoXDK:7F+7Qb3oCK+xsvtoWBKcxj4kPeErXoX2","tlshash":"b8421fdd37a85dacb923c7a9e3053136302608fb2a95d364c9736a78692221d9d7fcc4","first_seen":"2023-04-08T08:49:53Z","last_seen":"2026-07-19T04:54:36.703137Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/images/Edge.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/Edge.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb10-8762\"\r\nexpires: Tue, 03 Mar 2026 04:34:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"372e0f14122bc985fc25c9adf18e8dd1","sha1":"0da9b96762170fcdca32a35630e161064d45b3f2","sha256":"6643f9327bc18e8108d0bc474eee816d0807a10dc8ad3702797e8f81f23c888b","sha512":"39a8579538a2820bb1368402ebe0bb19f09990579392424f7f12c35b0520558da834c0f8c0a8a441b98a5bcfb736dca6e8b3f39c89becf01583c13c6547f60db","ssdeep":"768:gBP4YSEhe60ThEXgogOap816L9GfXWu6uDfNZnHAl:yQYSEhuEXdgZp880TXnW","tlshash":"0ef2f0f40646c78a7c9c19a87d064d5fdbabd0257b3ce9e38382e0c745f16913e9886d","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.730387Z","times_seen":608,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/images/webclip.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:49.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/webclip.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:00:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8bc-2df4\"\r\nexpires: Tue, 03 Mar 2026 04:34:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"48400a28770e10dd52a8c0e539aeb282","sha1":"151bcd0c431ed79f30193731de564106a5b11956","sha256":"27712ebee35bae5474f124f7cbf6cb2ca60d5121e561d284c9f11a4e69efd663","sha512":"2c379b81f9f94dab3d756c8a60d00efc992ab34947952b3c2fbbb1d52476659c5c1d7bd9f6d676e05f852ac6be0b1a38af8549bd5be6ea15884aceb0cbb7ee10","ssdeep":"192:1SwLv+UeDeSdXPDbr88+EdNTL8+hvMTvj9kCNH+BdQ5lURjVM79uoaaQmN7sRB9S:U+R0Dn88pdNv479kOebFrMZsaQygB9xg","tlshash":"5a32c0aeeac14d97b496f3b8f417059eca98cf5141e81d620bb0db5ca8700b13a619f7","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.739376Z","times_seen":704,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T04:34:44.047Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":0,"dns":0,"connect":273,"send":0,"wait":0,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T04:34:47.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 12 Aug 2025 07:28:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689aed1c-461f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"bowser:1.9.4","description":"A small, fast and rich-API browser/platform/engine detector for both browser and node.","website":"https://opencollective.com/bowser","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":17951,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (382)","md5":"124a2400d4015115fbd77384dc7fac2d","sha1":"a5e857d383ca4c59233068373dc327c58c5cf249","sha256":"5a5356512031b979d980b61672963154d61c8d586d2a774e7e2c2ef3f4023781","sha512":"6ee45e7d366f2a2845d739f62382dd4e589c999483ee1e0eb6707b7d3500a5512c936063d2a80461920c62c54067f75c605dfa8d77dfdeb60b09737fc49ecbe5","ssdeep":"384:IArltOpsEOK/1p3sChznF8Yapzd11XBk5g/tYKxa:IbJh7FOpTkA+J","tlshash":"138264229ce040771282d5c196767f2afe92e507d982c416f1fc454dbfeaf92cc23a4a","first_seen":"2025-11-03T03:05:10.461294Z","last_seen":"2026-02-01T04:35:09.242514Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":525,"dns":0,"connect":259,"send":0,"wait":263,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/css/webflow.css","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /css/webflow.css HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Aug 2021 01:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119b8b8-98c5\"\r\nexpires: Sun, 01 Feb 2026 16:34:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39109,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"13fc860cb6eddbf469d986e1a6b6480b","sha1":"6bb85ecdc704734f59d4984d202f75b02048a58d","sha256":"ba6716203b5a6f128eab828aef79dcdfeab87ec1ee605392e4a9d6955de30842","sha512":"0c89d6cc7116d30e517946dbc8a21ad0cca75fb983b64190f5984340eb88cd848a2a1817b9ddffefa60b35cf0d89519e309734faf29326d29278d2da36d7eb09","ssdeep":"768:ef7A1YRh+HrFIoF7XF/Dw82aWoS+lyKA+vdxUFPF5FiYFIF4qOqClERcCi7CkQtw:t1YWHrVtJPUdjVCOqCO+ikQm","tlshash":"d30395b58bf40530b816c1a56991b3253f2d4043a70ede28bad1741fdfce2c79963b69","first_seen":"2023-04-05T04:20:34Z","last_seen":"2026-08-01T12:16:39.159584Z","times_seen":449,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bowser/1.9.4/bowser.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/bowser/1.9.4/bowser.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metamask.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2561\r\ncf-ray: 9c6ebd0a6848b4f4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d90-1edd\"\r\nlast-modified: Mon, 04 May 2020 16:06:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1476848\r\nexpires: Fri, 22 Jan 2027 04:34:48 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fQ0EXiIyMQUvcjJ1Iu%2FHx6veGM6hrpP2xaHhxZg0dzwMVPw2QI75W6oyZxR%2BvrFmGMkNdtKO9SA4oNRL%2F%2Fcjtagu4GvivoTIArVeiQqGlrFt3z6tzorNw61xSJ%2FIp4m%2FACT48Vxh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7901,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7791)","md5":"557e1db8c44d751c997a04f411a61598","sha1":"849afb67561b75e90bc3ca310db3a82742a064ac","sha256":"b52f6b6011741e76cefa2be41164bbc9b33bba334b9ad15b03abad37b609d983","sha512":"71f29b4aa47197ea065990fc2ea159309ea71b845f8bb518465fc9c6f84de161160f9066bcc0b84af5923e500aeeb6c241302b9c4c9a161578c7f04708be98a7","ssdeep":"192:zrtNwo1ZAhquwmrYTtZtqhrJQcgm7RgsedRZ:zrtNwo1ZAhquwMYTtZtqhrJQcgmqsmZ","tlshash":"e1f123ece54fa4fb48f46706584e21381bb0c8324d7f9e51be8ce151ea59cad443aba0","first_seen":"2023-03-07T12:12:07Z","last_seen":"2026-08-05T19:50:05.416791Z","times_seen":546,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":3,"connect":1,"send":0,"wait":13,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/images/download-android-p-800.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/download-android-p-800.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb16-77a8\"\r\nexpires: Tue, 03 Mar 2026 04:34:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 407, 8-bit colormap, non-interlaced","md5":"82627227a1ab5f7f49daca3260d1b964","sha1":"104e097bfc0c67d04a81fe5b56ab644dac148304","sha256":"5b8eaa78003163540fcc8338d3905798c11153211a28c60c59b125a4784954d0","sha512":"33c996a5b3d9519484cfaac9deaa4c14df72eab803be05ffac588bcfa40072981e3819ef0472054a898ea4c523c9480c702ba7ac3f8622fbc7129d1521e1ce6f","ssdeep":"768:6lV5tNrGADNpBr6GbCel2Mc88XEYKL9ZHgYq24w:GVJr/hGGum2M6uHgb24w","tlshash":"ffd2d12b1328dc13e64f9a5a429c516d281671eb50ec20b4e11f5bbe7084231f9fbea6","first_seen":"2023-05-22T04:42:49Z","last_seen":"2026-07-19T04:54:36.705312Z","times_seen":81,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamask.asia/images/Firefox_1Firefox.png","fqdn":"metamask.asia","domain":"metamask.asia","tld":"asia"},"ip":{"addr":"43.163.105.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamask.asia/","date":"2026-02-01T04:34:48.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamask.asia","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:41:30 GMT","end":"Sun, 19 Oct 2025 07:41:29 GMT"},"fingerprint":{"sha1":"C5:F4:3D:6B:93:86:E1:A0:6B:F1:F6:19:34:E2:06:31:4A:73:B0:4C","sha256":"E7:3A:3B:6C:8F:D5:65:25:43:91:7C:B5:A6:FF:53:08:22:08:45:13:D7:85:72:D0:CA:0A:1B:FC:FE:7B:E2:4C"}}},"request":{"raw":"GET /images/Firefox_1Firefox.png HTTP/1.1\r\nHost: metamask.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamask.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 04:34:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Aug 2021 01:10:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119bb0e-290d\"\r\nexpires: Tue, 03 Mar 2026 04:34:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 100, 8-bit/color RGBA, non-interlaced","md5":"715129c60a9f70f0ccbb6c4395799e95","sha1":"4dfc6120523fda842c83261ddd922a9ce15a66d7","sha256":"52c88349bd9d45937236e20a4c9928f8a15db9dc7418436900e667b344e079c5","sha512":"267a7abe0e3f88cceb61696b41d34ca5b94ddfa156d8420858e4e18af20dd5be61fddf7e9aef5fd2958d2199573f3b3ecc17e44bdbfa110474dee869d43bf0b3","ssdeep":"192:T0JyM8a8xYuu5N36OhGsUySlmblD55Ecv/w1tC/zY6rA0+ckM+HgsFmy676os6Cf:TW8WfFGnmbl9donxc+TMmgOh67C","tlshash":"2122cf498fb920aef91e26841fcd810cef1e106ed0dd9df875e361ec8e1b058dac8128","first_seen":"2023-04-30T19:31:42Z","last_seen":"2026-07-19T04:54:36.723443Z","times_seen":608,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"metamask.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"metamask.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}}]}