{"report_id":"ee648db8-3db5-4a64-a21d-6a648fb001d8","version":6,"status":"done","tags":[],"date":"2026-05-11T12:54:02Z","url":{"schema":"https","addr":"metamaskcard.live/","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"104.21.87.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metamaskcard.live/","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"title":"Spend crypto for everyday purchases with MetaMask Card, crypto card","dom":{"size":46704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2486)","md5":"d67c85fd8d80445b981889d5b12a65e9","sha1":"31d4b1a346f4087e277f180ce90962a6352fd17b","sha256":"94da0d61c19d2e5c8a5968aebb523341f11af46d71404d7c8bf5b079da78a6d3","sha512":"a27f71a761901ef21c448556b07d39529aef06b6f0f0931c7368d21b391ac2a8ad0c7d1353708061ac253e64cd1983925755d359bc3df7e8a4ffba00644495d9","ssdeep":"768:2vs4UIeLdzI4twyI4t0Ued40Ie9Z4Qd4y4nwr4jB4B42JA95dG2H:2kRIeLdzI4twyI4t0UedRIe9ZJd9K2oP","tlshash":"8f23e97144a5703b62578acefb1b774d62e7d10fd71b5600b2bc0aaa1bcbec29923509","dom_hash":"domhash40c1e4405b764f4e9df23e015ae3d380","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metamaskcard.live/","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"104.21.87.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T12:54:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metamaskcard.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-11T12:54:03.674355Z","last_seen":"2026-05-11T12:54:03.674355Z","alert_count":43,"request_count":43,"received_data":1500201,"sent_data":19964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamaskcard.live/","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"00fc6ce084f9c7ca9b2e80d3439cb4ce","sha1":"4403db464650802c30d39a6439573ad2079cc2e8","sha256":"b5505c37ca48c99e278eb83ca108e6f0799ae17c1018722f79176114f682d636","sha512":"72df9b8e4572eb6631ffe51cb868f3867cf9376b3bea0ebd8ccaf2df17d426c8c879c858a5519ea66806a533f2f08f8ca992452d562f9da9b12caeb6f28d0039","ssdeep":"1536:5nGpbipk7Nu/RSPOpzPdIzmJuKXY+bAWAUBb9Dbvrl:5nGhiWu/RKOpzPez/+7AU3/rl","tlshash":"7bd35fc9690bd8d88f5555ded473e805e4284a23cdacf5a3ea2ddec1742df22848723b","size":142436,"data":"","first_seen":"2026-05-11T12:54:09.962045Z","last_seen":"2026-05-11T12:57:15.310253Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/vue-3.3.4.min.js","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62bc32a300f72a83cd0e5880fa869317","sha1":"ac5a41d9892612b11fe97957fabbc6b732cde89d","sha256":"10cee495767ab51866c79f25885f85111320259c125423e992de49cf1d0b8860","sha512":"e9a935e713ee4826f4a2265657c2993c577a1bdfc5978d5dea50ccd82c39831e49f04e6905f129bf495fcd121315cc6ad491597e8904f44853d1779d932f091e","ssdeep":"1536:eTkYMeg8Kx7OldOjyx+nwzz/67T0nOqXYyb0G5ew5b9BbvrJ:eTkugHx7aTNzzi7TTinewvhrJ","tlshash":"2be360ca690bd4d98f1555ded473e808e4684a63cdacf493ea2cddc2742df26848723b","size":146999,"data":"","first_seen":"2026-05-11T12:54:09.898074Z","last_seen":"2026-05-11T12:57:15.278023Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamaskcard.live/secureproxy?e=jscdn/getFile","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://metamaskcard.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"uzo0gy9zznygdzh6sxdx\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers, accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCeWi89KKOIUtox8PizfhxK8jAC6bDK8uvqYrwbKlofeM2sk9lrccUYrR93qEB3nTIP9i0FyIFhi%2BBTCeaFQbSDacJCqzrl8y3CCtymjh7lKjab5yYbVvzbOjpQbb4tLe2bv4MU%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9fa153fbaac1c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f2dcc314f77c834f8a1dc091e77a698","sha1":"02ddc9e3c5026f1aeafa9098cb1ee9420a53e0f6","sha256":"ce58bf87319ddd62d94026ba708b11b1acdae99d417ad71e78385c5c48baeffd","sha512":"e5ffa46481a71e28bd2f56255d4e66e025bdc281820203e1f2e2cf92c43df8d5bab7824acf0942b788c184e7fcba92bed561ce9c6b96a30c508c89a6a6665437","ssdeep":"","tlshash":"3980000e0282020f0022a8b08ae82c300a8a038008228e280008a0080e2b0828c000cc","first_seen":"2025-12-12T04:00:11.329317Z","last_seen":"2026-05-11T12:57:15.308987Z","times_seen":37,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/apple-touch-icon.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/apple-touch-icon.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3990\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-f96\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SQ7B1h%2FXJPMLSix4OCJcA1mdC3FUSqOgyaxXYI4JkMk4gezwQMOtEpvZirSrJv04JVOVChJsd63%2B5a%2F827htAiiNGsIO56zxj3N%2FE1siyXWJpSa40XU843skiHhWiHcpeRVpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153fcef25c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3dc40dc71436fb7c15dba38d80fc3331","sha1":"a289fa60e01bf1ae8f62a151f407546943ce2976","sha256":"8a1e0e6b72f243a122d0a365ba26c692c03d58c1308db10958713d602d0c819b","sha512":"a0f467a18a8d072cd7bfd2e3d847ca8740692208641ba681a604ac6b5892aba7e6df4e25c987e0cda38c52866f798f7df4ce1d6760359f09b028affdfb53c4ee","ssdeep":"","tlshash":"27816ba25e21bfadff2901f10b1e2f44d905201bb3710388a927f40a28ca0ede922652","first_seen":"2025-05-21T00:41:02.261665Z","last_seen":"2026-05-11T12:57:15.267669Z","times_seen":39,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/favicon-16x16.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 796\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-31c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0S%2FTFfZDHYvnhmXLVwZa%2Bw6ca7KDxKx8KdKIXNK9bKdyUvuZPqFdX61XTTyeu3E7DgnEbZc6aLpwXNPakV3mYk6ywqsu3YxEeXD4G2b5orfc%2BI8NJdJXxCuFncApIzwVWpresA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153fcef29c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d03a1ff477c4ed658ce86f322b05bbf5","sha1":"32a790e4e8bdc347fd6bf513f50a0a1cf0b28fcb","sha256":"4d155a26a4afe21db19cb4415b4d1340b1617ee2d293584a5d67a3373d7fe310","sha512":"11e2d47cfcae8b30450bca908b5e6ec00a405583e23b4decb27c1bd81a1151f1018e77f934fc49d11457e6c60df7b9ecc6819cb42bf3533ea66db581efb2e4c0","ssdeep":"","tlshash":"8901819530c9b33c936770c24308923f902314bd62ab7cb0935da9a82c32b458933f06","first_seen":"2026-05-11T12:54:09.888725Z","last_seen":"2026-05-11T12:57:15.29824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/a2e987daa5b92a44.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/a2e987daa5b92a44.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-ae48\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJtxAuRNYLa%2Br8HOVZ75gtjN8j7%2BmxyB2592LxJJHqJdWoU3LbaimCg5zLafuEY%2FoEml%2FCDhDxieEEPzBDV9UyLoGBCqTiCNDbKU%2BsSNjWo07%2BxSZBL%2FEgWmsQ3uSd9tzLHZNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e43c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44616,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (44614), with no line terminators","md5":"56b8e26d74659bec77befccf6f38793e","sha1":"4d5bd601777655d3fa454613762a5d33eba95494","sha256":"13b1e816b8bca2c8d1bda98eb4f136decfcc966d854c95088704288a5dcff9d2","sha512":"95c1ee66e2109cc183b787badb399b7373c840d993de3ea75d7576042b138402dfcec8eb1ca1564fa9b1db256dab9684b124439ee8aa7013a2bb1ba229b2d9ab","ssdeep":"384:cen+bsHAtfBVISuaK/J86acmE1fHgJXIR3mDnGDJTEVc2ATw+89vgGERJAhINjB3:3zEm0laqntEUJ6lKNi","tlshash":"d31341611d1f33bf753fa232e1bf95cd22288c54ef17db9aa706e62987827a14533844","first_seen":"2026-05-11T12:54:09.891814Z","last_seen":"2026-05-11T12:57:15.302394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/f9579a32e9e6abec.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/f9579a32e9e6abec.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-50d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rosyjJTeWiewEl87oUtSQMOsYsl%2BTj0u20GRl7Vv24qfy4IAGngu4HxUvG9Lb%2Bl4%2Be38gPYwbRmdcdOPJeJEtAUVY8JiRnXZkQ%2FpKcqW%2Bz3cTSnrepSbNnPI8%2BpId4WpWaiXig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e79c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1293,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1293), with no line terminators","md5":"364ba0f747ab9c1e1ac49ba9ee30bce7","sha1":"a7e596172bd7bfc4fd1bd4cf1da7e259ac97a108","sha256":"7a260ff7e4a9f9df42ae735df4ca7bcde50e40822d383602bb41a570c25f12df","sha512":"2f2b827d63fb6dc8e04bd546f57e7f5729eb861f4a07126e77494e88ed638250b020bb6aedfa7f589f3c4fc906c54e6b924c63ed9043f8f93ee75d24d259febe","ssdeep":"","tlshash":"5a2168466e36e13f253e15b8e5b4fe040f288727f70605887b46dd6894c88822abbd5e","first_seen":"2026-04-27T18:52:05.365028Z","last_seen":"2026-05-11T12:57:15.276831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/vue-3.3.4.min.js","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /vue-3.3.4.min.js HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:29 GMT\r\netag: W/\"69dbbad1-23e37\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MO9z4SKakM8elVVDkRksb9Y14QQkJ5RsoM9mDApIoatVTvNqqDBVhBB%2FrExeoXqZfeUovmV4T5SlB%2FLz1o2BLyYGZC0H1NWfJa9zB%2BIC6GQ8PESsLEPZMfaURIkuFME9zGT3%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e7cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146999,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62bc32a300f72a83cd0e5880fa869317","sha1":"ac5a41d9892612b11fe97957fabbc6b732cde89d","sha256":"10cee495767ab51866c79f25885f85111320259c125423e992de49cf1d0b8860","sha512":"e9a935e713ee4826f4a2265657c2993c577a1bdfc5978d5dea50ccd82c39831e49f04e6905f129bf495fcd121315cc6ad491597e8904f44853d1779d932f091e","ssdeep":"1536:eTkYMeg8Kx7OldOjyx+nwzz/67T0nOqXYyb0G5ew5b9BbvrJ:eTkugHx7aTNzzi7TTinewvhrJ","tlshash":"2be360ca690bd4d98f1555ded473e808e4684a63cdacf493ea2cddc2742df26848723b","first_seen":"2026-05-11T12:54:09.898074Z","last_seen":"2026-05-11T12:57:15.278023Z","times_seen":2,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/mm-card-metal_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/mm-card-metal_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 6354\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-18d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvmbyCc7YK64vHiOuR%2FZr%2B8n2qmB6xiiqgnWCa72wyxEkEQgwgOxttUCT2WBcH8PjPAGcFYtucpBUnSOLhMfAP0FEVWTSyRn15PqrX2H6d9t4MfOyjSQIUcBRDu5CK6PMtn9uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62ea1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6354,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"dfdb35794d7ced695b344d41b0dea851","sha1":"bb4edff90e56e315042ff4d52cc19fc8adbb0339","sha256":"e8211c29c4efe5e9dd55694c29829e0f283b0642191de069531d9412702ef281","sha512":"b1cf0fa3560e2ca0d9bd226861da995d16bc89f9d0f2702ddce7ef83d816a34866c358268ecfe56dc74c8c4d46da061a6f8d0d78d5e6d5d26d5f5c3d4629951b","ssdeep":"192:+zCKgRVYf5E0YVtvR+GMeeOlXoNLh53qs:SC3K5wMGMglXo1h56s","tlshash":"40d17ef63db77e97d80e203c4c26fa1226e2568812fea53b54233a00b7ac7935c56d91","first_seen":"2026-05-11T12:54:09.90049Z","last_seen":"2026-05-11T12:57:15.304409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T12:53:41.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCkO0yo9G%2FdFXyznwvo2WdnIb1XYM1sbB%2FHwipdNjcenLwbwBXpcKgB2z4FxCIuyv8fLIi0T3f2u2aILbliwzrt8ie%2FWPtWhEib8%2BX090NVcq75%2BqOlKLerWdFSlg5aqRyMrag%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fa153f3bc6a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46801,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2486), with CRLF line terminators","md5":"ec22cbc1d30c93b34d15c5f079667c6e","sha1":"9472f6065c6970cb0e5b3dfd8fcf4cc60d742799","sha256":"6b34a77eb4093c561f0912c2b13e4bfbc2acaf859686b34ee3d8d137753591c7","sha512":"743d4fe3136799a648fbfd44f6c056a72d5cdcb765b0d72ee9fa1632175635df9a628c8747cf36014951485ff077fa2ebc013b79a242eefd8efd087adc35dc08","ssdeep":"768:C8G41IenmzI4tfyI4tfBeL49IeS449w4b4/zr4WB4A41MAqK9Gih:C/WIenmzI4tfyI4tfBeLeIeS4KwmCfrG","tlshash":"f123c87104d5703762738a8afb1b675cf2e7c10ed71b9a40b2bc4b6b1bdbe819923509","first_seen":"2026-05-11T12:54:09.90311Z","last_seen":"2026-05-11T12:57:15.30054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":59,"dns":43,"connect":1,"send":0,"wait":221,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/002b311fc8a2a182.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/002b311fc8a2a182.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-6a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4BfdXpd3B27BvZTWKy49xuYRSjirfDoa2CvN4ewMbGi7FMnjmZbRIcP2eI757aEIFqwReTz73r1fP6v7VWYVgcLJUf3m2AA5m6LQdxE5ZwXBWyBY0u5St0nEnOm6k7WOfMbBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e20c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1698,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1698), with no line terminators","md5":"52d35a23c2430803fa71a0efa08805a2","sha1":"0562ff1a5f0088bc1a23385f3695d6be81bb30f5","sha256":"f1e1a258ffa9a6da831c9f9c01c762142736b916e64e786ecdb107eab842591f","sha512":"ab029e20ccdb643c0fd34af270acfaf031d6307aa28148be7f759a5f3a95e12e76fe9585320d94d84629cd27972b9f3194fe48ab6a28a0090c55d8226f92996a","ssdeep":"","tlshash":"80316938691ea232c8768a87b18abb111e996036856c0423b116076e4cff07b07f0fb8","first_seen":"2026-05-11T12:54:09.905036Z","last_seen":"2026-05-11T12:57:15.301437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/118e88afbfa68fe1.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/118e88afbfa68fe1.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-3ac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C160ji%2F2JSKULWKa%2FtvVQ9RmudTDLxHuOy%2B9ezfemmQUCSkz6f%2BZaBd0mMcFF5U0SGPuh0CixSvfSTYETk47Zr4rKcCnQeugPsySGmoxP76jeYpolx8anqgqk9%2BYO4qw%2BWIolw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e2cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (940), with no line terminators","md5":"4f294789610a10268425c76d495b511e","sha1":"76a3187577b488265460c56821ba4dcb52ad8bcb","sha256":"5f88637a2addec32002e4f778caf9f3acff0854887c44807ab011d393debd37a","sha512":"2235b1c723d59e836c96ee419614973041005f35dd7624f90bf351b3234ed0667ff2b5bcb1d01809a7ce15ba42c9bb4157f456d40f622d71121fd13841dc8287","ssdeep":"","tlshash":"50115b54540ee135a2f4cac7f5ca7f121929e120c958093b506903ad5cea6ec1af07f0","first_seen":"2026-05-11T12:54:09.90691Z","last_seen":"2026-05-11T12:57:15.272082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/66cbc2eb39471080.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/66cbc2eb39471080.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-bda\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7AiqRAlWoUprHuRXIOpIihBcoDctD9tSRkpewe8AvyoMdr4k4Ue91E7xKzBCrOikMYYWLCnoi97RVaEIJQ9TxoOMOtBv3xtxvIM1buu4OLqNsJQmfLi3qkndBb64%2FopmAW9%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e50c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3034), with no line terminators","md5":"41f817682c83c218eeb2bcc749426192","sha1":"111ca3902746710fb9f1f9b909c3d213b241fcb1","sha256":"316afdfcfa86b50eb5114f78b1833300ba55a95e8f385eb880d3bd7c53589006","sha512":"a964314638609b32ba46bd8d98836253da43c27fe98d0231ebf89959531b49a0322f3d8bc48020d72ebdc70e31b42b2ec4dd34bf711462b3027c93de474abb39","ssdeep":"","tlshash":"f651a95a4b60653ca8e7503f126ed3687b3c84a0ae03229ae459c63d17cbed01b27d84","first_seen":"2026-05-11T12:54:09.909129Z","last_seen":"2026-05-11T12:57:15.268265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/1023c1996f732bfe.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/1023c1996f732bfe.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-14eef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YT4LxBl%2FVQpO73wuLTK5RD9SaYT7q8SBwP%2BsAOkXOSzqYvHZ0iTmK5gFZzKRfJkz8N89bHdwd9vebzyEIAYmvXfxisskLipZ5Ktlw92fW7n9wkl3gCke6ZplRByik8i%2BBPYLRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85743,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"551ce68a0eb24f45d648583d5963f84d","sha1":"e982f10dcf5f006b466f19bf63a0216b32a9da79","sha256":"587e157f1b6e3739af494df8ecc43737a93e229fc4dc2c41258fb5f4c30cafde","sha512":"9e8ca4ad2e566a2023fd527a368ae311c0f32cc1a28953b70baefc4619c2d8cb66a3106652c73f2e167cdf00f143b8c3205e698365d486a2641291dbcae6e76b","ssdeep":"1536:g3SJFJXDJSwhwBwtwGwmwuw3w4wMbXlXZXUX6X05XUoXlticSh7S7QYW1XhgwX+N:g3UqOCm","tlshash":"148375924e09313d84bfb717c6a9bb99432cc442fbb795e6e6429d398bc97f00172d48","first_seen":"2026-05-11T12:54:09.911185Z","last_seen":"2026-05-11T12:57:15.255644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/76bd2d8b17d4c0e5.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/76bd2d8b17d4c0e5.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-18a7e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7TGXnpnZqc02So3%2FkY9yRAq%2BBwsMtu%2FazRqqqe%2BaHFqdaJq2BT7bRuP%2B6%2F409GiOjzcgPVusFymCPpcN6fX6h%2BL339jvgCwuHOSM4Wsrhr6WLNaC3DmNxlPcuCgEFK7uvS%2BcAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e46c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100990,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dfced3d91aea0ed6a741e277114249dd","sha1":"0c957e6465763acaa4fcc0a868bafac774a73972","sha256":"ae362cb0784d0a02f07df1dd3d97306971f0b979d1f2e974f6f00f30dbc8cbd4","sha512":"e7038746467bbc4a9ac0729715fa47b64311c288b359e47a35ae5602c11a08d5d23d276326c583183737c5d1b989dd1189fddbdac1f3c71756c10626458dced7","ssdeep":"1536:wGJtVJxNUuPToDNt4EgPUDjOuR6FA5kFA21z9JPf4tIAKIyIZI5osdF:JDPDE8dF","tlshash":"a9a3b9796a14313ce963523be1d5b6180635e4e0eb17d6e9f343f52e87ca7a20637a0c","first_seen":"2026-05-11T12:54:09.913612Z","last_seen":"2026-05-11T12:57:15.299399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/504bcd11f1b01373.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/504bcd11f1b01373.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-18247\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWarQ6iil7dU%2FHMRn0kh7NRt%2FRGNl5q3LM%2FY1G8yd%2FV3touaGWR2rqDj%2B4qFF8Xw0cZVyzwJHBz7v7sbhU8CmAR6nsc8LwrKSTS56BlX2fkoc0Gs8KVvcbdvsYfi2Upv7jy40A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e6cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98887,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d759ff33c78b46dceed37eb859d153fa","sha1":"f8efeea1cca2d9f195db6bae5aee1500438f00e3","sha256":"c0666f1c5bb87ea8c15ade3b6ae5dd349826dd7f28772d0e30671472491f861d","sha512":"40da3fc59c301114869a85797c5320f39b9d69e75381e8e5009b2f95d34b8e95fb3d14e2b43c77c04e0b5c46964c7f6413f5044a2c5a6b5cf812c899f5603752","ssdeep":"1536:35sYyTKsQWk7hut920CyWPVmkXvULB5C4l/:35sYyTKsQWk7nmkXvULB5C4l/","tlshash":"f1a385638f12122899379c2be4b9fd180634d890ff5319cda4a3a62c57ceb971737987","first_seen":"2026-03-27T04:21:58.773903Z","last_seen":"2026-05-11T12:57:15.297374Z","times_seen":7,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/card-hero_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/card-hero_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 21372\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-537c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THJp9HcR3Gr9vn%2B88pxBPjfPtQpxHk9PiLS2sw0uemifSYpS3vE5jrTo4UW4jbhyxOhJWAhOZ4e%2Bxux84aans83nnOs7N4HfTczyriKkFWDhAcjel9lIUqV1zKE%2FMItR%2F18IVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e84c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21372,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"f318636b185bd16dd3cd4fbb01e9a351","sha1":"49f22785ac6884d757fe41f888c4b0fc32d816f4","sha256":"6d9dbd71a9b182a6e6a720b0d29623ebdb157eccc0acf8fba108ce943deb8af6","sha512":"890a2c4a97843418df3622bce61897fd463eb753edbcbf5a5f2d94e5bdb0d107a0c01fb7ff69b8df9b88080e8bb9a8715b00c66f6a275afeea6f21fee8b01a2c","ssdeep":"384:SeIWY241kZfE4H7HA37P6dk5iECm2obzsqJQuGG/KCdUtfI2UvM80r:LY24gfzgudkwECm2objlGXCdSoM8i","tlshash":"94a2d1a5ef620d67ddf9d279682463202034eab76caa331ab5c84cf0c9647eb0905731","first_seen":"2026-05-11T12:54:09.921589Z","last_seen":"2026-05-11T12:57:15.274954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/seamless-spending_3.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/seamless-spending_3.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 20592\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:29 GMT\r\netag: \"69dbbad1-5070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uw3eQ%2FiPO9Aicx1jdjgI%2FnHtsVf5OW3diNKrxyTK1wSeo0hm8jdedDOQPMzKCh4byUQECnImq9%2FMx6FfSF7GnLXSgBCB%2FHj5nq6lFo5ReInMcklK54TOuYs9mzyQJTE4hIFOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e8ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20592,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"f6caa55802491c2695302c48e7f03bfa","sha1":"bd53505864310d55a65f37f1cdd07ca0e08917e7","sha256":"e54c43e86b4cf399c529cf28691832a125af9dcd4747ef35619ab1f5513617b2","sha512":"b1882983c6754a3cfe715aacff804bbb5aec300a38731d6ff5dd50313d0141eb49bdf05b7e4d1dd3d4d76404bb4d58253669ba395992d31af877eeca072374c8","ssdeep":"384:/YNg7UgOA6sKPSP49veLQ3TO8w9B8mbgNA7keVwM/AtoXu:/YyNOA6snP4/C8w9B8eX7kiwM/i","tlshash":"7a92e070abe59037e664c439c8f19a4956f46a2cc373ff61e81636d98b19dd03b060cd","first_seen":"2026-05-11T12:54:09.923184Z","last_seen":"2026-05-11T12:57:15.280165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/global-benefits_2.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/global-benefits_2.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 15769\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-3d99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQy%2Bc28b%2F7bFyYUjTPHdcf%2BcyrtnULivzEc37jXr%2BsTOueu5IlyYQtdEKFAz7DQxGhDghQ%2F%2BglZx8O30G3pXTrhnpCpdda%2B2qEoS57E9IWN3u2xJLZji7dxwEW6c5jiG%2BlSJ7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e98c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15769,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"9e339da255ab6918e9e66746c9e50cb7","sha1":"841a301cf19c5ea39e5f2a06b3d7c17e23e5cb97","sha256":"72815e1bae92743100fb726c747d161b8b76d5eb18ced17b3aea09bd1bfb6487","sha512":"82c76aaa37965ff8fb09e97b32dd823be558823cb1d75311cbbaaf3c1cfb294fe9870abfe2a17857c38c3de7db8c0529c6e749999bccc5ca09e650128b7c74ef","ssdeep":"384:lYNg7Un3CfxzByncuJ4NcLKU7yjP5MfqM+:lYyQCRdfW27P5MCM+","tlshash":"5262c07497d49bb7d800e6784892e7ed01633bb4835278b87ca9e3104fc6f91c75a1ae","first_seen":"2026-05-11T12:54:09.924936Z","last_seen":"2026-05-11T12:57:15.26227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/fonts/ea533aa8097cccf0-s.p.woff2","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /fonts/ea533aa8097cccf0-s.p.woff2 HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcard.live/css/002b311fc8a2a182.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42612\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-a674\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1cDp58yG4NT4Bpbpq%2BJVmMruIbozFmi%2FSDONZV%2BUq5ZhQt0vbBqfY%2B9lprAxM7GfWkdRMwp%2FReC0qrZ9OT2GYNpU5oSXd6wpGOWYtqRRWOtQa35cP44bImvoSAWYWEy35Wunw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f96a42c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42612,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42612, version 1.0","md5":"b774dabdfbb02addd98914a25927758f","sha1":"199a6083ba759cbc9083e52f1ee07281fcd5f214","sha256":"94d6dbcb5864a6bc178849275630afd3ce067f1262bac7fd0995cc7580f722a4","sha512":"8d56911d6a1c0d692b0666ae248361b43e42496b069ceb891106ba2adf8911cca946fe9ea849979f81b41d22ae0e37e2b0b6a1f5a6496f272cacbeaaada0844c","ssdeep":"768:w6vrEYK8sd53MY7NNfiM72xRNZXndnfsS7N+xEXWrWKWA079V1:2BDckiM72xpXndnpW0Z3","tlshash":"0613f2a804f0c740569efd6a22a393074e087d7baaf1a57da9bf1b63c72500ed371a54","first_seen":"2025-03-03T17:47:39.924359Z","last_seen":"2026-05-11T12:57:15.270391Z","times_seen":74,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/dc75f1d0b9da038a.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/dc75f1d0b9da038a.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-3ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ugEYAaPt9D94dnh5Ll1ayijFzF%2FlnAOdD3u2fjW6qciAJ%2FyDQhw2khARhvGF6PgLIhHuERQtX1CnZJpfC%2Fz3MbqucvaztR5ls2GmUyp9Kyyn8XDofBeHfBEiHac2zzPzxMmfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e26c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1002), with no line terminators","md5":"25652869735590d5cb024a21a665c207","sha1":"c1718097eb53d8211897daa4a533d1f6280decbc","sha256":"7cf062926a1f4b49bdfdcf83f6e480323ff20cbcfba86d757cadb77edecee738","sha512":"6c4a6c30152512857c79e6a2b2cab33eebeb655efc07fd4f85726fb88920f064e28c330461585b35590383058895d2c828b2c63349378e9c1905e9483296b15f","ssdeep":"","tlshash":"d311ab14480fa53a86b5c98bb2c7bf92195aa425c9a8043630516b9d5ceb6ec22f0bf4","first_seen":"2026-05-11T12:54:09.927274Z","last_seen":"2026-05-11T12:57:15.293368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/34a116e21e123965.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/34a116e21e123965.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-17d29\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZU7J2yhCLJ52CsrzOq%2FLG%2FfWIVPZb8MpGvQmWYRVbziS5r1ls6WiVqSGcs1mp1rm%2FIY55edVqJb67KcJal%2FGeYFSYnLeD2fu64%2FtbVnvcKoRgLeVnjbHficnhoKRycOn2hssQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e39c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97577,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"50fc2be0f235ac9758b28c7a851d0dfd","sha1":"ce385f48185edf5217fc98bf6e68df6cc1735674","sha256":"1b445241ff2ba19120800f945fd4f48145886d9daff1bd2edf723145b0a98a58","sha512":"f1322f01d3c95de41df62b9ee725c42a2b2f94e27a1f55edaa926edc1249d4d5c1c0e345a06c76aa618464e78ff6587818f49b29c0aec11e9ef8ee9bf71e6688","ssdeep":"1536:7sUSzxl+ScdnLBpTa6GjTqZq5pc5gIYr9H+FhIHKInjCpCxeqrkSqcHk8jEK1wee:7sUSP+Sc1BpT+jTqo5pcqIYr9+FhTIno","tlshash":"bc9362735875953e493e6302da98d8d807566810eb1ba1d5f382fc1e2d8ebe00a77f8c","first_seen":"2026-05-11T12:54:09.928874Z","last_seen":"2026-05-11T12:57:15.259729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/50e8d794999f6012.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/50e8d794999f6012.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-b71b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3%2BGhcNdGlel7TfZDZJCMHpQXKmOKPvTQ01EfAKKgQzE1blu7rviC88rMFwWDQrD8ggqxXGHR%2FYTOsV%2FkaBSJAa2xHHK7deG99O%2F%2BBfhAdo%2Btq570oC8x5KL32ia4JNgBBqIVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e4ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46875,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46875), with no line terminators","md5":"a22c9e88c4cf809bed9f539633dee3cf","sha1":"0f685ffa72f1720ab0d2ee2e0203f20fa57d387c","sha256":"ff744ddceca01a2e5ecfda7f3b52d8b7594b3f9fb0df4e858ee39c28074166bd","sha512":"b48513573a1440c9f521383b22f085bf9a40f86803c2e458802c515ebe031a382dead906c5a5351af9e543c0455a92d3a842388c6f8f5a0f8d407b587a0b111f","ssdeep":"768:K/Td0k0k0LT8/0LLD4IKTSg0V0rooode0HPD0605t0k0l0SMj1h450MncxOyhZ/n:kTSsLy8w56t/a3Mj1gt6hbn56p77dR/M","tlshash":"662371a49e15723d986b512eeeeec65c027cc480be22d38af752653f43c63e60d2795c","first_seen":"2026-05-11T12:54:09.930116Z","last_seen":"2026-05-11T12:57:15.291114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/e81e2a929a8ced9a.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/e81e2a929a8ced9a.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-3a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOM0UqNIByICIQ1Rpyp3txEdhULvfhR7uey3i8SI9R1BxuxRgAU55aZ0QBEUWHoGfJhNXZ%2F1jiGoI18GOoMeb4Q7xkg%2Fz2BGyYDcFsWLUb%2FjpqHI12hztsii8ZCQYhX4VO3vwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e54c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (928), with no line terminators","md5":"2499eca9d4699ea5cd0a70d23aecf513","sha1":"aafaec4a65c84f09419efa1e785a0893229fa853","sha256":"e6b9844135cff6d414799fa387401af234f7bae0dc5eb97b26cc105d6cc35c4f","sha512":"5a02cfb2eb3cce1808b290053255b3e5d911af1b4d519600eb71f19cecfd5d47bd4a2d04c05fd583e4a1c8101cf085b75f12e1c242245aee34857fe24de57e80","ssdeep":"","tlshash":"871114724142e63cd423f526853dce4d023de096ee92072bfe18f45cc6cb75a7576049","first_seen":"2026-02-10T18:38:29.0822Z","last_seen":"2026-05-11T12:57:15.258541Z","times_seen":13,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/one-tap-funding_2.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/one-tap-funding_2.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 13337\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:29 GMT\r\netag: \"69dbbad1-3419\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjRsegfBY3GWuljdJGTesXpzRrqXO7aEvKjWqtlRzzEJTAnR7Xw3skIYf6gW5mvnI65n3JCsfn6c1DEgUt4%2BUrmRObvPGFVvbv2YsttrW9qsJNmFkKUEfbpYBqc9hXklcy4H%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e94c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13337,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"3a4f48c5c2f520ac0c53395f216d39d9","sha1":"b9d1513b4bb18050756711b7535d4f420aa95fc5","sha256":"0f98f75454f50c36f45f33b1d1d6bdd2ade80c9c7e165bd08e05e75953ec536e","sha512":"d2e46436effb1f6571ea3f3648076eba524b455ee0e85d748e47b05d15338230c7f09b8553186d31f33a1468544aa171a21e59c220686201420dde3484a24518","ssdeep":"192:+7acYNMtKwUODLQw/WzJP9/6+oT0aAi7jhi/Dzxh8HxDu7PRGCrI0e:MYNg7UJw/WZ9ZO0liGDNh8k7A0O","tlshash":"ac52bff563a0aa1bd1a0c9b42cb8dfd135c1512ee322bb833514cb3e53a10dd9c7c295","first_seen":"2026-05-11T12:54:09.933046Z","last_seen":"2026-05-11T12:57:15.289023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/fonts/31ed70c509aa5870-s.p.woff2","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /fonts/31ed70c509aa5870-s.p.woff2 HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcard.live/css/002b311fc8a2a182.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35144\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-8948\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UADQwAlsuEvr5aEZ%2F5%2Flggy9rpZ%2FSPeRK2xXY1bim0JnFfgl%2FSTgUctiAd8T1P2yocwvhpbCIba5J1gi4EpcRDho85aPFHP0PEh7jMZYCfF1M9OtD2eRojyCKFdBt7dzZqu%2Biw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f95a0cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35144,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35144, version 1.0","md5":"f97daa3eb20ea442f38049b8dfea5c5b","sha1":"f716a445ea3bd03d23ba74315832f686d491d702","sha256":"d44b37016d8fb2e94dc6eee5f71ba9dcdcdb35dd4100db0e37a19f4a256bce49","sha512":"85118f5f47bb611d1465fad299c5b552ae4ca992cbe0a45e17d66076d7fd24b802a575fe97ce4cb715ed766c559d2a4b362f4fd0fc8cf2cac5828a5c647a039e","ssdeep":"768:pyvAUFRTAUw6nJjLgK4y2jDYOWFOxoDVtEQc+bVvyfuxzFmTqciUf:p+AU3Q6hqpfYOWBVtEAlyfusqcZf","tlshash":"22f2f1af526de024fa8e43daafc5f923e17d52ece159f971077e21657308c4c8810ba8","first_seen":"2024-09-21T14:17:32Z","last_seen":"2026-05-11T12:57:15.308272Z","times_seen":45,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/fonts/7a00e16d33add871-s.p.woff2","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /fonts/7a00e16d33add871-s.p.woff2 HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcard.live/css/002b311fc8a2a182.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35472\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-8a90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4WthC2vHYeROtm337HMyRzhn0igrOF2gkHz9IJe0SAqbQGeX9u4KEq8lRZktOql8iulQ%2FgxClM5KHHasu7l8HnOLmY8%2FkUSMCRremU8l2Cfz3FRanjvNeQFNZ340jcaPPRJGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f96a55c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35472, version 1.0","md5":"1855615443e520b746505f319cffd69d","sha1":"cfb7a439d24865ec094b4adf3eb9b219f08431b5","sha256":"07114fb30f812d395e1670387b4f1e9ee6f8bde090045fa2d085d78183e3dabd","sha512":"48c81bc6aa4eda517269441a63a5827d96aea1e6a32c4953cadb18225da43916b26506a1463a9752b28e0b9be689926da7322ad6589849bf1d48383ac1bdb4fd","ssdeep":"768:2gnH/aUut6pkr6z69+KhNXOqD/Ur0j0uH:2gnf/ucir6z69+MRDHZ","tlshash":"93f202e7925510c6cfe9c9be52721cbaa7bf52b258a7b31f00142bf2e65658304d1632","first_seen":"2024-09-21T14:17:32Z","last_seen":"2026-05-11T12:57:15.305205Z","times_seen":42,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":547,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/7b212c1e124ce17a.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/7b212c1e124ce17a.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-1868e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTgUYfOy9Rp9iC3vs10kbPAjjF6gEdxMyLnFdXc%2Fs5jmIJ3oKL2gzAlyr2DhENf1VuUUe82u5U5%2F8hmkfaE37pp4ogfzQ1YYfwzMrmmzssrgnrBpI2Z2c%2BMX%2FUJgcbwqhKWkYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e3ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99982,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"033819d49ee392b03cb1b51f1a081e0c","sha1":"4c00812529cb644734e45c02ea26ff0a2160da01","sha256":"eab8243fa1c255aaa1236c23fae8800542a000c684bbc79b45d1c986a874b23c","sha512":"ab7174ecd08abfbfb63b6c979a31307f9c606b51ace12f4fa0d492af35890c19a966aa144881fa36b04855e5b2668d83c3c2d60e668bf28a855decf234fb071f","ssdeep":"768:EfsEbhSXCqF4139Ok/08VWJfeVBkckeDNfMFk0nMkpuOkOd9CRszQt0oZ+Y+j+yl:v41tdMFk0nM8SEtpy0v/sCuix7","tlshash":"3ba3c6a75d17363d983be807d8f9ad4c9238c4d4b733459aa943ba399bcd7d1023384a","first_seen":"2026-05-11T12:54:09.936308Z","last_seen":"2026-05-11T12:57:15.306534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/298b448a740eb375.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/298b448a740eb375.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-89f5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RWuSmaN96RN0RVRFIQD%2FoKO%2FVtQZVltF%2FMbWXy1oYu0lcCqsuDut9xrhERFMG6oGfl0aadubm9bTxpXY%2BfNJX%2BlOBcfUXizJ0GvJVY%2FI3XLTKsJ8u3jVTB2WmAbFzBPdbqNzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e6fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35317,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35313), with no line terminators","md5":"0e915968ac8e9839af34fb0c82eb9faa","sha1":"521246a21daa6a80c7bc5fb3e4b46ac5902ddc32","sha256":"c3a81d55f2516998078ab134b824a45261b517d1a00583c82205116df7a969f3","sha512":"6a7d3fc38fa82115dd570ffdf9174dc87ac794c08288682bc6baccb780c79764073ef67d15661e65806462919abb0008ee992ed5a1bd7eb11c8decbfb3072ab3","ssdeep":"768:IKM8O7G8rKGMe3APxPWPAP3pUe1n+xn+ezn+e4n+ebn+ePn+e9n+ekn+eIn+einl:q/HKGMzPxPWPAP3pUe1n+xn+ezn+e4n2","tlshash":"e0f244a35d25623e943f641bc8bbe10c0738d454eb5a51dafa42ec2e9fd9b901633c8d","first_seen":"2026-03-27T04:21:58.729555Z","last_seen":"2026-05-11T12:57:15.30968Z","times_seen":7,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/entravel-exclusive-lifestyle_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/entravel-exclusive-lifestyle_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 19443\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-4bf3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCLOBLnFdO1LTrs%2FM5fZqKJ0ALG7EeN7Y%2F30XMJWOTcnvHChVEksUHVCcAokvOZlgJQwH6Cqf6qZrRJ2MP2GQHSV13fjGREynJYSqELUklrB9mDWa4PqUambSOOtgh7i8knvPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62eabc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19443,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"2a92f9e634b7f3698deca9ae3a0a874c","sha1":"b5e04c33eb56654642857f090dab555e326956e0","sha256":"de410778469426ae6e64c78b1a0764c518b4c869dfb0e6122d80a7f774e39691","sha512":"790d7ceb026f55ab313999d9841b3f49be353822e0845fe8f40c69c013a61702bb3f287f3596ba64a777ba05d94b9b09d69b1b9e4350bc7e16a57e2c853a8bf5","ssdeep":"384:SfOQrQrPPm26UJYtgzXp6pxi8mf87CJiQWC9g4fZXvXDJ1g1:8hsrPPm26Z2XMiRfWkXW4hXvDLg1","tlshash":"8692e17c9628da01c8befe318f956dc351a05317c69e23dcabe04917750860f5e68e0e","first_seen":"2026-05-11T12:54:09.94093Z","last_seen":"2026-05-11T12:57:15.307353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/premium-card-v2_2.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/premium-card-v2_2.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 18893\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:29 GMT\r\netag: \"69dbbad1-49cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BA9QK%2B5TpOZWfsE37WLNm%2F3RkFVNX3amAAqwO8q6eQPkD6uYai4Hv8jMR9eNck%2BRC1d9Azoj7Y5jPcmvxhCBv9xegFhC5CW0%2B02h0yZ07bYdY7OfxI0ssrBDJ6dJ3L%2Bu8RDZ6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62eafc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18893,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"10263269eab5a91a85a465936c06cddc","sha1":"f00e8c9b416bce887e481b2bf5cf3809db825ecc","sha256":"832776996dde529a1ebfd1789166108b344b3b5be1e5cbc5e42461133b614e56","sha512":"d27c255b99b2a10b4a6bf8a39da36d67e314c0060ccfd4d60d9dece1675fd9d8cef0a8de539025e92f06290f5934c2d6a09f2258f1556df90c56dffbd17ad4c4","ssdeep":"384:SG/ro0/Asy0kHIo3UwM8RI75gDNndnoQMhpb5Dnm/qGQNjGfnvvd:/opCkHkwMH8NndoQMf53NKHV","tlshash":"1582d0541c5715c7f42402b7678e9eaf20be36b1f9e7bca939d970925118894fe10b02","first_seen":"2026-05-11T12:54:09.943284Z","last_seen":"2026-05-11T12:57:15.266015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/null?e=jscdn/getFile","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"POST /null?e=jscdn/getFile HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://metamaskcard.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"uzo0gy9zznygdzh6sxdx\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prIRGCntnWIxdYO%2F5W3715ShvtNYr0kGeKDlOHn9%2FYPwyIpCRO8aZmBPHJbJYGQjgDEO%2BpedOU4oF3vnHh%2FFfzKTo5G%2F%2BKq2Jo6UH3NVLI5%2BI00J4ODhaKiKI9Q7OLLn%2Bq9BUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153fa0cc0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cc1936e6c20f6a866226130b869d9953","sha1":"65d15aaa085d0c6292e27fecd97ce7c90deb4ee6","sha256":"11f4864b57acc22316998d012efc32274ea8c3f3230acab7bc8ee576c594b203","sha512":"29d5ff85814c6470cd6665b01d1f2b4b9f2303605c922f6f685375875ad1aeb23d80d386497164fc8cdc713968557cbe55b55b8c571ae27dff53c55790f382d6","ssdeep":"","tlshash":"7dc08c6e271b3c48c6a321751ac3f4b0c29da2a284f847006844005331c32169acbb51","first_seen":"2023-04-11T14:00:01Z","last_seen":"2026-05-11T12:57:15.271396Z","times_seen":915,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/secureproxy.php?e=jscdn/getFile","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://metamaskcard.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"uzo0gy9zznygdzh6sxdx\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pzmn0Ob6wAhGdKIjBbyfL27BdXnb61X2EiElqDN9Nk2kXanUTfihcA2ZqT0as8G2IiV9%2F%2BtdtMiwK21mDsmyN52eUeSHP2GUJwq3cYMtTL1wIwZbL%2B%2Fgu6Vlu7zZned8nnDbVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fa153fd4870c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-05-11T12:57:15.261304Z","times_seen":33,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/e1c63b9090117b9e.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/e1c63b9090117b9e.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-422\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T97J9W9A%2BotSKcNL1gVeYpu5%2FjwGDnQqsm62IkDLe0EtrpAS1FH6EL13W1CFkmIKSen43r7v%2Bxv7e%2FJIOZH6K7E61y%2BTZ%2BCEFcVaMpfRuV%2FG14eB%2FTySth5gdmH3rpgRSgAuCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e2ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1058), with no line terminators","md5":"6a04c63a7a738acca1d67ce2111464ad","sha1":"8d63f014ba392e61a558027509fdaec16e0c4684","sha256":"cc305926a71ee1f3f7c6c282dad5fef1ac6b632faf2ed9120ff67843457f5862","sha512":"37b5ed1a939217e8c57f03b44d2e4d7d9925633f2b5c82ab0ab84d23103028c5db147c6fe99e7d10092b4c751ec0d28402cba59ef406d2b15fa5f84cffc901ab","ssdeep":"","tlshash":"4a11be1890096231ebb2cdc7b7cf6f112929f510d968097a2150135d5cfb27d06f0bb5","first_seen":"2026-05-11T12:54:09.948742Z","last_seen":"2026-05-11T12:57:15.294567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/ab0888582feb9a0f.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/ab0888582feb9a0f.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-4720\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mOSLyOTupzvNL6BiVaA5nrHpMhH95wUaUIwCY%2FphCBeIK60Kp4SaVXs7qr94xPpnNEItEatH%2B2pkcHicjWrrF%2F7b6MwxkZkEDAN1rahs4zUJAyc9baQA3QAHWSPNSxNAgRy2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e58c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18208), with no line terminators","md5":"6c1353d30c624ec7241b9f07444214da","sha1":"ffbc9c185f71bf779f4fb7662a2bc6e6ae083ecd","sha256":"c3b2acaf0e0330a3b3621e2c0151ccda630b693086366735519e1be64d5ceb25","sha512":"566000a0f1e9f52e5e7ee9266d2c3e021e63be3fb5506460b430e4d53abb57f494becb191d6f31baab20cda898f18adef65396a5d8e1b7a194c82e2f9a083082","ssdeep":"192:+03syolvg/MmQg3cQuxToCXIck0vM6DDD/iKXd0D16S/ZkGzBRU4RzWrCC:i5BFI5C8n+GzBRU4RzWrCC","tlshash":"db823f65fb00bf39a417053beda4f559a334f4d1ca578fbaf672b20585c2d922e026c4","first_seen":"2026-02-23T00:31:49.200048Z","last_seen":"2026-05-11T12:57:15.296299Z","times_seen":10,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/245c74e0aee85b01.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/245c74e0aee85b01.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-13b18\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLCyrJS8iTJv4AYCTeW7FvmGHrrdpX0%2BdumAszsky4ZENVYRt8CEw0150wXpYZbBbDRNQOh6%2BOLJCs%2F1dkg%2Bx9SYLtHq%2BP8maL4%2FKTIzmoOWJrIIAyVVAJyPAJ7G7f5vQNlqeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e74c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bce08ce2e4537605c6afd4657ab4da2f","sha1":"e71c2cb716df68c6f9b38f253df9995b2359fbd6","sha256":"eec6763a08d3ae6f0ceacc1e958869e232285e792634552dd4e3aa2aed3be9d0","sha512":"6296ffb7040f917033b4ebc64a44205eff351fbccdcae3078561127ece9b25f36cbc62d2d1877855b0cec88ba800fa13de1df41ffa74149a03401a7e0fdd5262","ssdeep":"768:lzWobKKFijUWKOCNBGvxr2Y+TQq9uS1nYH+7Io3WSUe3xLk:l+xmQq9N1nYHU3q","tlshash":"007323a24e1f322e683f9237d1bfa549172c8c69d70bd39a6643d93c878a7e01537c49","first_seen":"2026-03-27T04:21:58.6937Z","last_seen":"2026-05-11T12:57:15.269113Z","times_seen":7,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/mm-card-virtual_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/mm-card-virtual_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4979\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-1373\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZj2SRpde6FG9YIvZGqCn1xA415ko4sVU08zlBS5km3H%2BttiPi3%2BoafNoOOSK%2BpUZa2ARq6pD6tgEmJ7Hytnv%2FAMNK6J9e0Yb%2Baw5lUG8py6yT054mVqlz0OJA9WmEW%2BVWKPnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e9cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4979,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"a906f517a0eab48845659583488efbd8","sha1":"a32b17bacd1577b32328fddfbce4e7c02a8e96d5","sha256":"c3551d6127bd74ad5af524f401d2b9df3487b029fe2ef11112b9606137db212f","sha512":"6cebb3899e225034bc2694a3f2ca14de9560125a854a1f7ffaf5481b12445584aae6048d29f21a2c27d2a7139fdc2aead99feb0695ea011838cbc746bd989d90","ssdeep":"96:+zCjOgl2vLf6aCYWZzL3+oSm/sKbGH2pA3C/COBbauB44FWU4A2V:+zCfl2vuaQDHrLGHZS/CI/WU4A2V","tlshash":"20a15c34aa502a74c4cd417b3306f65d63b850463057f0ae55a7eba1ca60ac2fa73e57","first_seen":"2026-05-11T12:54:09.953252Z","last_seen":"2026-05-11T12:57:15.263388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/fonts/cbb70915db1e6525-s.p.woff2","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /fonts/cbb70915db1e6525-s.p.woff2 HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcard.live/css/1023c1996f732bfe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54608\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-d550\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihW97Fm1sbuDWSLwjZ8Ga9KOvsgg2ogKkkpf%2BuzJInDHRFYP2yHT3JEnDS29qbkI%2Bebitn%2BkRsDX0G1l4RunUxDFG53h6FmIHlWXVLSXHZvcyUNApOVwzoy4qL2zpeBKghMyXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f96a2bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54608,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 54608, version 1.0","md5":"4470005f2640dc44268f3f7c3d5e1b7f","sha1":"ce498ef38e9495b54316159403533354449e98ab","sha256":"a17328a2b8cb4e3da93f4506ab6ff9bf505c864b9916a822a9317a2f460e5102","sha512":"63da7dcd3d2512e9886698ac2f70dc6fdd00b57078be79bab42b42feffe5b924cdfce48b3f53db0ed73ca0531eb2bb311f7d1b144627022f552dc847665c0ed3","ssdeep":"1536:jeQhvHtOLPanQIFXgt7xwXJnonKmoGYOAkiS:Nt4anUvwZnOYOD","tlshash":"e433f210c427e2bc71003a11f9692bdd56572e9a8825f5e8b57aff28d0ece8097146eb","first_seen":"2025-03-03T17:47:39.900843Z","last_seen":"2026-05-11T12:57:15.26704Z","times_seen":41,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/4af878ef5d3c8929.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/4af878ef5d3c8929.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-64a3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bu3jL7EA0NKTSb5mUsPVig8sCLFeWTMRXzQ3rDLglGSIruVNwm%2FOa7IvgnRDwRFFbMjzOUR3NpszDxCaEphhwc5OTy2Rc%2BFcnxi6wgQR7MX1V4q8KJHJcUFO3awUMwmszXV97A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f60e31c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25763,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (25747), with no line terminators","md5":"f9744bee56854e9c645ff9093561a802","sha1":"49d23b0c246644de27f380f99cc310e685bfce09","sha256":"a089402f2b2f3c545c82d8f3f96711a082bc1e2f99fa0f1180de178521bd9c49","sha512":"fd1265ab94245d4cd0ce5beb9ecd64c71fa4f742f808805d285d9e7c0567e854f4179066b2d8855288224a9f9beb9411641b013c55ee4ae3b2fd7a038f6f6b93","ssdeep":"384:gqPmpkPmtcht1Cw+JrXlzfZEthF4W28KiTuhqI6MUNY3v7puGo+YA+ioCkj4Fswe:3Slc7M1uGivioQ7lZM","tlshash":"81c2d7b2a916757876374c3b72a4f9782524c482e17386b9a742ed3d45cab7f0322f4c","first_seen":"2026-05-11T12:54:09.95511Z","last_seen":"2026-05-11T12:57:15.273484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/full_control_with_metamask_card_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/full_control_with_metamask_card_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 13017\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-32d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpB0c8qXvAdfh%2FXhTbGd7ZRkurUga1G8kWMiLmqNmuiAPn5JqEAQ6FeNn%2FZaqkEIGRO%2BlZGp0BMOJ9scuhUg1%2FwAf1x5L%2Fjr9qT%2BxwIi04i8QHq8Ix1yGGnal3OBR2nNoGr6bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62e8fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13017,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"723f71a43758363a81b4cc877fb23dfd","sha1":"ba3e8a79438a76f144885a088dfcf08ced14857d","sha256":"d0da984732b9a3fdbde767d70a62f7f8256492218ac8293d3297360a69a7dbe7","sha512":"313ea704f8c049bf974a09295c73cf1cef9275a8bf450963d88758d682f9c84a7c703ad3294f89f880c04591554a5e4e0cf13b397a1dbf1f50bfb4b736bc0179","ssdeep":"192:+zCYYS1ONLKbjK3m/BKKEMABhGJ21ykvGfyaXMVmLPsP9HeSnjsHrLA/1IP8eSCZ:SNKLiEakvGqaXMkPKH5KA/1veSCaPY7","tlshash":"0142cf40234494dfca7686bd6e1ca90fbc21296130f2acb5db623364d67256bc94eeb4","first_seen":"2026-05-11T12:54:09.956238Z","last_seen":"2026-05-11T12:57:15.281073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live//secureproxy.php?e=jscdn/getFile","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:42.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"POST //secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://metamaskcard.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"uzo0gy9zznygdzh6sxdx\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 11 May 2026 12:53:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Bnl2OTO0eSrKD0U%2FEwutnoK8XCLIXILZfDXlgasqViAln9j8habifZVPtWuAk6Wm2wWFmM0Yv9be6rO9ILV%2BxwhKX1%2F8V%2BrO4Sg99SE0SLEeLEvYkngjOliy81IYzbVAuqNUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fa153fdea77c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-05-11T12:57:15.261304Z","times_seen":33,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/343664d0e29cd8c4.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/343664d0e29cd8c4.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-4fdb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CimrSRJCvLBauI5juDcqjoNo7aHdnFFgOwWO034nlhlXNBepe19V2hSAi7Z2mMuHV%2BarugczJbqZLYe%2BrcAUWYt2fdyQq4D5k7wwgDJoHB4M2grVvFnmoVBdvdsec3BaDe%2BCjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e34c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20443), with no line terminators","md5":"758f65ee9d020fd8572bbdbbe2572624","sha1":"573d320931be8213cb6e0cc1162d5c4faa5ff44e","sha256":"c10d83f810bd0cc8d162ac2a2b2a9e86b1e96569c92d75bceb097608d6158756","sha512":"9c2b0b94fb3961010df16076f0310efdad82e0b00fdac470743a8f4b41b9caf3ca0e211b6343da83c23ee41ba38d6314ef82131dc60a87de9889a7197d86aa78","ssdeep":"384:vB0FA14OFXMku/D0wBai8JS9/pA0W8vFdsG:5wA1486D06A0WE","tlshash":"db9274e6ce6e373c4b1281148bcfaa38336d9440e9f179f5b25794f94ac82a6731d253","first_seen":"2026-05-11T12:54:09.958011Z","last_seen":"2026-05-11T12:57:15.305754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/1bf7c84330a11a79.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/1bf7c84330a11a79.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-1767f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TxPbea3O%2F7IJsX%2B5%2B2uE4tIDe7u%2B7YcynB%2B6HfDLw0XAgoa6PbsTQYNBoHP9%2FKCcdfBOOZJniE1NiZUuK4DzZ0ZI8yx%2FNIB4w5vnH0Eb8rGgdjPq%2BnJy4xh3%2FzO6w9HALn2Lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e5cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95871,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"42b63b40f9fdac3a7f2cf03df36850e1","sha1":"1ce90b54d42cd6d9e17877e697f62709366cee87","sha256":"9134e6b680c1c1f36a38f39367ab01693441624de3258f4e866b7b0b4ccd9f24","sha512":"f7819c7b28e49a0f4d366443f522a92a80b1af8740333e7897458baad5b1e7d43f0c96e170d13d5d4cb57dc529c9056eed424c133021d010f7cab7272c501ab8","ssdeep":"1536:A2m60Nt7bWdWUvLo/egILWe9m91QLAPRVfNJu:A2l0NBKcegILWe9m91QLAP3fNU","tlshash":"009355bb5e16323dd83ba017c2a6f158032ca256ff4b15a6ba02ea785fc57d1113bc5c","first_seen":"2026-03-27T04:21:58.660323Z","last_seen":"2026-05-11T12:57:15.30323Z","times_seen":7,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/css/22afd965e73007e2.css","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /css/22afd965e73007e2.css HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: W/\"69dbbad0-14273\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bwWJYj8nxS7oU8snzWwd1aA4IbH%2F%2BJXk3jWJY14one5Jco3gAEV5iLtUaVV%2F3e8ETHXGpuDLIapDQlqYrBiK6K5hUgXmChSC04Nhk6%2BNmgg2lEL%2B%2BXsX8bV8lB7gJmvk4umtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f61e63c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82547,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4339c6077eef0d7d0f94bcdb79ef1c99","sha1":"85826acb3731fac98d634cc4885049c700bfe374","sha256":"886753cfb11e2e84a8f48821e32bffd364d73bcda495c0a335ca61a407e469e4","sha512":"b213e9463765c7907410da8021d2d79f16c598b05af7d08b25009639e42ef349702afeaa65d3aaa35c57178c03b0cd4fd60407ba3d4f3d06d7c3801a54d9ed67","ssdeep":"1536:ScR032VGAL9YsZ9aec/TXdixHcJoHyv19Ivgdc4g1FzyI:ScR032HZ9aecDdiq9Ivgdc4g7WI","tlshash":"1083a5b90f19662c9437b817c7d9a59d0338d013eb0b62d6f742f9297bc93e2163648b","first_seen":"2026-03-27T04:21:58.700313Z","last_seen":"2026-05-11T12:57:15.303833Z","times_seen":7,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcard.live/images/blackbird-exclusive-lifestyle_1.png","fqdn":"metamaskcard.live","domain":"metamaskcard.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://metamaskcard.live/","date":"2026-05-11T12:53:41.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcard.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 13:41:57 GMT","end":"Sat, 11 Jul 2026 13:41:56 GMT"},"fingerprint":{"sha1":"81:18:58:C3:5B:0D:98:B4:79:1C:64:95:B9:06:1D:53:0F:7C:74:7B","sha256":"E3:0A:94:F8:ED:72:F5:06:4D:D9:AB:DE:C0:B4:C0:85:EE:2A:77:C8:07:E9:8C:30:AB:DE:3E:FE:66:BB:20:F0"}}},"request":{"raw":"GET /images/blackbird-exclusive-lifestyle_1.png HTTP/1.1\r\nHost: metamaskcard.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskcard.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:53:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 15079\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 12 Apr 2026 15:31:28 GMT\r\netag: \"69dbbad0-3ae7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DGduqYEQlPBXtcvx5ab1Bp6DW0rwIVvb0b0y0Vj0vctJdfez2KiNmkVkxIWrSj82bi3GKo0l4TjYjQdieSTdGJQSSTsFSVxaut3FAxqzpbORedtKLvqQiuCaLuUOFq4rcNPDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa153f62ea6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15079,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"841382a40323687e4952673ff092dfd8","sha1":"6e53e457721937c14d3ce060b952c77ffb437aab","sha256":"3b309ff70073b47642139428dd1cc239f7943a0a84b68cfb1484db78ee40b747","sha512":"08cd3a6447b1beec1202e24fc8359aec8baa4cc6e31c93262edaab9a751a07275d4d46d91bd3aeddae6081ce4a5fae5cc215edf5bb24faee27e9b5a3492939b7","ssdeep":"384:SAv+X2OvQIH50M2yNdL14h7luJh1rEER8rMXpT7G:bi2OvQM509yNbQ2h1XR8rapTK","tlshash":"a662d0c13141e2a2c3a163fe5a1cd80dfe7a2305ff0a434ba2764f3955c44781665fe1","first_seen":"2026-05-11T12:54:09.96084Z","last_seen":"2026-05-11T12:57:15.264574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"metamaskcard.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}