{"report_id":"ed69e728-ff2f-4da3-8b60-8ffd19723e71","version":6,"status":"done","tags":[],"date":"2026-03-03T04:00:12Z","url":{"schema":"https","addr":"metamaskcheck.live","fqdn":"metamaskcheck.live","domain":"metamaskcheck.live","tld":"live"},"ip":{"addr":"172.67.220.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metamaskcheck.live/","fqdn":"metamaskcheck.live","domain":"metamaskcheck.live","tld":"live"},"title":"metamaskcheck.live/","dom":{"size":73,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with no line terminators","md5":"d59556e6021fcce46c416f73f2412538","sha1":"4c631f626e52e5634eb896069ea181c285c30ca0","sha256":"c1e292ddeacd91a61f01623657dfa3a287706645cab8002467d3c09761b12230","sha512":"87c445c80437433e6e58e41ac3f5c2baefbbaef6cc67b84c41b97c3533983915cb3dbd42f9397ed17a1aa0bde5ed123548f3d7c04391a063cc21337e509ab976","ssdeep":"","tlshash":"9ba002fd99e1000a5d647ef10fc522410c2e42f8a112de10199d7965e44d53adf53da4","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2026-03-03T04:00:16.818003Z","last_seen":"2026-03-03T04:00:16.818003Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metamaskcheck.live","fqdn":"metamaskcheck.live","domain":"metamaskcheck.live","tld":"live"},"ip":{"addr":"172.67.220.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T04:00:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"metamaskcheck.live","ip":{"addr":"172.67.220.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-03T04:00:12.862136Z","last_seen":"2026-03-03T04:00:12.862136Z","alert_count":0,"request_count":2,"received_data":1551,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamaskcheck.live/","fqdn":"metamaskcheck.live","domain":"metamaskcheck.live","tld":"live"},"ip":{"addr":"172.67.220.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T03:59:48.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcheck.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 17:29:58 GMT","end":"Fri, 22 May 2026 17:29:57 GMT"},"fingerprint":{"sha1":"5D:6E:B2:BE:3F:59:EB:CC:ED:DE:92:E5:98:2D:8E:0D:B2:15:4F:2E","sha256":"59:50:10:9E:E1:D7:96:6E:96:07:A5:F0:21:F3:CC:2F:84:DF:DE:AC:42:D6:6F:AD:CD:80:01:2E:B9:57:F1:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskcheck.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 03:59:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"22-6BL32UgP0k4edri6NbEpmyKbgo8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUVEF2uKgoiMpRURxhtQ4LtnP5E%2FLpGmJBilY3P0jA2VgOaFVhiSg3JBQuQ%2BoO%2FJVraqRhWYSLPrcPLd%2FhnJdCAywZ56NFSm15Wp6gMAx%2Bun%2BQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d65bb097bd332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"25e3267e9bcc85c734d8b41fc3af54f3","sha1":"e812f7d9480fd24e1e76b8ba35b1299b229b828f","sha256":"060ebbfd3c1c2c21e75ffbdc8b7511148f98f8885400e7df033a134efd0899b6","sha512":"d2927c165539be73961b65f36aae69aafa770608780f08c60edc447cf8ef0061b362de1c81bc108ae1da867af1122dbbb3f99174412462f86c413a7081ed0361","ssdeep":"","tlshash":"2680008c0c20000a08808eb203c82000082e00e8c200ea20082e2a02308083aa2a2c30","first_seen":"2026-03-03T04:00:16.824204Z","last_seen":"2026-03-03T04:00:16.824204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":30,"dns":20,"connect":1,"send":0,"wait":58,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcheck.live/favicon.ico","fqdn":"metamaskcheck.live","domain":"metamaskcheck.live","tld":"live"},"ip":{"addr":"172.67.220.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcheck.live/","date":"2026-03-03T03:59:48.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcheck.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 17:29:58 GMT","end":"Fri, 22 May 2026 17:29:57 GMT"},"fingerprint":{"sha1":"5D:6E:B2:BE:3F:59:EB:CC:ED:DE:92:E5:98:2D:8E:0D:B2:15:4F:2E","sha256":"59:50:10:9E:E1:D7:96:6E:96:07:A5:F0:21:F3:CC:2F:84:DF:DE:AC:42:D6:6F:AD:CD:80:01:2E:B9:57:F1:88"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamaskcheck.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcheck.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 03:59:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhlS4CRVErXuYjpjwTfQtRhZc872eE3gVa27sMPAsgBvWNYfNuO0hRRLdyHI5%2FGyTSjMkR38UwVzbNzhIZiIYY3LHXp4QiCw23hyWi9wAlsYJQ%3D%3D\"}]}\r\ncf-ray: 9d65bb0ae9bca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-08T02:57:53.412179Z","times_seen":8753,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}