{"report_id":"e14e8f85-11f0-41dc-8475-4bc184edca93","version":6,"status":"done","tags":[],"date":"2026-05-20T20:20:27Z","url":{"schema":"https","addr":"megamask.io","fqdn":"megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"66.96.162.138","port":0,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.megamask.io/","fqdn":"www.megamask.io","domain":"megamask.io","tld":"io"},"title":"403 Forbidden","dom":{"size":1415,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d0b8084da1920301bfcb8752fe0c7062","sha1":"9df88f94a0f524c3d21f067c86eed99ab48f6541","sha256":"ed261c3851a2ce4123949d669d5ad598fa360142f2e98bef63d3ced82e355e15","sha512":"b8e5e03925bc0a3599d7e21fec7b399cc2882d2d93dc214b8efa953fe001a0d41fdc67e2c7ad23fc754b2abe30d401b0a0181fbab02ef79fc0b5f8c907be75fc","ssdeep":"","tlshash":"8c21da268ba74657f053d4b42b9a27a42b44d02b860bde64bfcdb295cf82954c6d338c","dom_hash":"domhash3d4cc6529ace8cc99864388e401c2b1f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"megamask.io","fqdn":"megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"66.96.162.138","port":0,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T20:20:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.megamask.io","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-07-08","domain_rank":0,"first_seen":"2025-10-07T05:09:54.967543Z","last_seen":"2025-10-07T05:09:54.967544Z","alert_count":6,"request_count":3,"received_data":3263,"sent_data":1403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"megamask.io","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-07-08","domain_rank":0,"first_seen":"2026-05-20T20:20:27.2777Z","last_seen":"2026-05-20T20:20:27.2777Z","alert_count":4,"request_count":2,"received_data":577,"sent_data":960,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.megamask.io/","fqdn":"www.megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T20:20:08.404Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.megamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":230,"connect":16,"send":0,"wait":0,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.megamask.io/","fqdn":"www.megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"195.16.73.219","port":443,"asn":56655,"as":"Gigahost AS","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T20:20:09.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kxcdn.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 07 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E5:F4:68:86:C8:9D:5E:2C:27:13:12:E5:FD:45:08:C3:39:9E:4C:BE","sha256":"31:29:9B:70:E1:AD:07:98:B4:E8:01:B6:8D:4F:B8:74:43:64:1B:14:37:FD:3F:19:C6:07:00:7D:78:F1:73:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.megamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: keycdn\r\ndate: Wed, 20 May 2026 20:20:09 GMT\r\ncontent-type: text/html\r\netag: W/\"6752de12-59f\"\r\nx-edge-location: noos\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":1439,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"aced3fea9748fd1195082cf5f0d9a49e","sha1":"1a79b5a75ec04e4e848ff1fac2ec61dee8497f9f","sha256":"1d2009e4aea51a8e6a0f6404f282d8948f473e26f80e45c7ed9bbb12e470d661","sha512":"5f4aa3faafadb75dcc8d32042d974e676319cdfcf9fa769bae82ce959ada32b234aad5c5dfc43065932964ebe305297b4a9fabefcdb96ee8e14f9d4a3c8bdaf3","ssdeep":"","tlshash":"56210d168ba74656b05394b42bda27642a049027824bde647fcdb245cfc2944c6d33cc","first_seen":"2023-05-03T19:16:04Z","last_seen":"2026-06-17T14:18:20.012628Z","times_seen":74,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":41,"dns":1,"connect":16,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.megamask.io/favicon.ico","fqdn":"www.megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"195.16.73.219","port":443,"asn":56655,"as":"Gigahost AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.megamask.io/","date":"2026-05-20T20:20:09.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kxcdn.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 07 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E5:F4:68:86:C8:9D:5E:2C:27:13:12:E5:FD:45:08:C3:39:9E:4C:BE","sha256":"31:29:9B:70:E1:AD:07:98:B4:E8:01:B6:8D:4F:B8:74:43:64:1B:14:37:FD:3F:19:C6:07:00:7D:78:F1:73:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.megamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.megamask.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: keycdn\r\ndate: Wed, 20 May 2026 20:20:09 GMT\r\ncontent-type: text/html\r\netag: W/\"6752de11-59e\"\r\nx-edge-location: noos\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1438,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"0bb51d3825a552745d3597103b0e52c4","sha1":"a55f8044109556e1bd4f356fabfadbc614c8b52c","sha256":"3c69bc39bbd289e5e0c51a61a1af86c531d9a49f2d36cffe82ebc0ce4055ee01","sha512":"2696603b30af44d7c88e97e6f9af9347db7179291aacd81c7168ebd546e1b3018518e4edc3834d454103fedbfe6610b934fb946a53cfd24c79c52d8cf9d575ca","ssdeep":"","tlshash":"73210d1a8be39646f05284b83bda23781a1491278647dd747ecdb288cfc6944c6d33cc","first_seen":"2023-04-18T12:43:06Z","last_seen":"2026-07-19T20:50:42.897231Z","times_seen":94,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"www.megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megamask.io/","fqdn":"megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T20:20:06.036Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: megamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":452,"dns":0,"connect":98,"send":0,"wait":0,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megamask.io/","fqdn":"megamask.io","domain":"megamask.io","tld":"io"},"ip":{"addr":"66.96.162.138","port":443,"asn":29873,"as":"BIZLAND-SD","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T20:20:07.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bizland.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:12:4B:4E:DA:84:AA:92:16:53:E7:11:30:B0:1A:89:63:54:A6:4D","sha256":"93:E8:A5:48:E7:DA:4C:0C:BE:98:1E:A2:E3:E8:41:16:ED:22:3A:73:F1:AA:5E:51:7A:B7:07:D8:86:38:32:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: megamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 20:20:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 87\r\nset-cookie: request_id=a17405d1-6106-431c-a9ca-052661a794fc; Max-Age=3600; Path=/; HttpOnly\r\nlast-modified: Mon, 28 Nov 2022 19:54:15 GMT\r\ncache-control: max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\netag: \"61-5ee8d3c71f25e\"\r\nexpires: Wed, 20 May 2026 21:20:08 GMT\r\nage: 0\r\nx-request-id: a17405d1-6106-431c-a9ca-052661a794fc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"5e8986f400e1f3298d965341583ee187","sha1":"78ccd06fa0f14f6d8ce6d6f04be1da1f981495ae","sha256":"73042febd8d108b9e871504df791ce024853879a85f71bf91a7bad7e875a4cca","sha512":"570ff4ad05e74aa067852097c55cf515d2d556977cd59686a7e9300cb54cca647d6c29942a1cf9b64a9484ed653971b6d7937582c5f63058ebaa5d2088ec1b7b","ssdeep":"","tlshash":"f9b012c1880960017702e0ccae5151c1c56643051cd00cc090654f240d0c41790c4aa2","first_seen":"2026-05-20T20:20:28.946744Z","last_seen":"2026-05-20T20:20:28.946744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":207,"dns":1,"connect":99,"send":0,"wait":170,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"megamask.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}