Report - mcpin.com.ar/MetaMaskLK/MetaMaskSinhala

Report Overview

Submitted URL
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala
IP
200.58.110.176
ASN
#27823 Dattatec.com
Submitted
2024-04-26 15:47:16
Access
public
Website Title
MetaMask
Final URL
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mcpin.com.ar	unknown	2014-12-16	2016-03-21	2024-04-18	5.9 kB	672 kB	200.58.110.176

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	mcpin.com.ar/MetaMaskLK/MetaMaskSinhala	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed
2024-04-26	medium	mcpin.com.ar	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/	287 B	2023-03-08	2024-05-01
Pretty URL mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/ IP 200.58.110.176 ASN #27823 Dattatec.com Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 03:48:08 Last Seen2024-05-01 18:42:40 Times Seen60 Hash aba402298eeb1e8df50a07e74fbb25db 5ba80ba7283c8e7847f21a1ae0cc985d98a133ba 2ba0df33a3720a8294d9b64f7dc2f694592b47659d330c803cc349207c9091f5 Loading...

	unknown	18 kB	2023-04-11	2024-05-01
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-04-11 19:41:57 Last Seen2024-05-01 18:42:40 Times Seen39 Hash 77041cbd00a74a2da1db3ebbaed494be 9b9fbe162e3284a23df16a64979c1dc0dde47759 e7007679d764f44fe41cda2c0392a0f52c37ad3422864143e0b8999eed313d4b Loading...

HTTP Transactions (12)

URL IP Response Size

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala

200.58.110.176

301 Moved Permanently

256 B

URL User Request GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text
Size
256 B (256 bytes)
Hash
9b66c714c6b638d4a2bdd2e24745fb0a
32fe8bd92f0ae2bdf188c06601bd706691ea1850
880714216c4d44afbd91ac9602e521197fcee3f1a5c0f593cdeca2478df072f1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
content-length: 256
content-type: text/html; charset=iso-8859-1
date: Fri, 26 Apr 2024 15:46:52 GMT
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/

200.58.110.176

9.2 kB

URL
mcpin.com.ar/
IP
200.58.110.176:0
ASN
#27823 Dattatec.com

Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (442), with CRLF line terminators
Size
9.2 kB (9220 bytes)
Hash
671e98f6528906185ebe53c249a1bdd4
621961c59df2a106958ce9a34ae5633f64dbe998
50d6b779bdb35e42882e78377f5354f7447d3f4d52072634f8fb7c7a90236a6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 15:46:54 GMT
Server: Apache
X-Powered-By: PHP/7.4.25
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im96RHEwTnB1TEM2UnN0a0RjVEltdnc9PSIsInZhbHVlIjoiMldpZ3FPU3ZDMWRaNWNSRGVQVlZuRkd4b2huanY0SzhNSmN6WjBZdGJaTmVmUnJFak1ua3lvWE9yOHVyMlplUmZzS3RTNnA5S3ZFeTQwRDM5dzN2MWZCUlA2NEo3QnAzS2hNakhNSlpCeXJ1WitsWWU4a3U5WGVxRWRkZ0NLNlkiLCJtYWMiOiJiZjEzY2ZjMGIxNTc5M2Q4ZGViNGNmNDRkZmZhYjRiMzM2M2U4NGI3MTE4MDU0ZTgyYmNhYzU1NjAwMjIzYTFhIn0%3D; expires=Fri, 26-Apr-2024 17:46:54 GMT; Max-Age=7200; path=/; samesite=lax
mcpin_session=eyJpdiI6ImxuODNVY2VvRWx5NFloUHpwWE4vZUE9PSIsInZhbHVlIjoicXJFKzVaVlREcTJjeXl0RWg3TklwQ0ZVNVBOK1h0YmQ2YUl1QjdYWWNJaFlWYldQMXRPajIzaGc5bmo5QVg2N0NrYzR3UUtBdzlrV2gvclpaSDlpOFR3NU1XYVpLWXcrOUhuMlJNbXRYYjNoVEdlK3BxL0lFQW1jLzZSYlBDK1AiLCJtYWMiOiI0YThjNjBhMTQzZGQ0NTkwODIzYjFmYjFlZWJkNTkzZjMxNDVmMDkxODM1NzAzOTJhMmQ2MjhkMmNjNjYwZWMyIn0%3D; expires=Fri, 26-Apr-2024 17:46:54 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9220
Keep-Alive: timeout=10, max=200
Content-Type: text/html; charset=UTF-8

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/files/loading.gif

200.58.110.176

200 OK

41 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/files/loading.gif
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
GIF image data, version 89a, 200 x 200
Size
41 kB (40957 bytes)
Hash
cac6f4f6ddbe92403ef75aab346d1f59
92b129fe5eae789c5bdf9c88e56e6574004ab1b8
2eff2ae61047456178738bb7f10017cd66509ef3a547d5e3666267c7f4943b66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/files/loading.gif HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 06 Jan 2022 12:40:02 GMT
etag: "9ffd-5d4e92b458c80"
accept-ranges: bytes
content-length: 40957
content-type: image/gif
date: Fri, 26 Apr 2024 15:46:55 GMT
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/index_files/jquery.min.js.download

200.58.110.176

404 Not Found

8.1 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/index_files/jquery.min.js.download
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
data
Size
8.1 kB (8141 bytes)
Hash
aa3c0f60531291babd80b5fc5f63bc3d
3903ec132f51c52f08082e70676236e3e7ff5715
0f7de7fe9d4944a1edfa09b7a8a85fc2e7ee8d346bd93791fb410c6c5cc12170

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/index_files/jquery.min.js.download HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/files/favicon.png

200.58.110.176

200 OK

1.5 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/files/favicon.png
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1532 bytes)
Hash
b7919ea38a8beed9b4763858c4f7412b
1aa57bcd7ca8a0c3352923c9ee06c472f23d5b63
214080adac9969108cb602cb68617e332db1288e95e18c29c10f9396c6d3744c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/files/favicon.png HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 12 Jan 2022 08:32:10 GMT
etag: "5fc-5d55e67e11680"
accept-ranges: bytes
content-length: 1532
content-type: image/png
date: Fri, 26 Apr 2024 15:46:55 GMT
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Font_Awesome/font-awesome.min.css

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Font_Awesome/font-awesome.min.css
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Font_Awesome/font-awesome.min.css HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:54 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Euclid/EuclidCircularB-Regular-WebXL.ttf

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Euclid/EuclidCircularB-Regular-WebXL.ttf
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Euclid/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Regular.ttf HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf

200.58.110.176

404 Not Found

6.6 kB

URL GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Requested by
https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type
HTML document, ASCII text, with very long lines (6693), with no line terminators
Size
6.6 kB (6609 bytes)
Hash
637c64dcfa59899545c1dce3f050200d
8cf7d3405932c23d2b4ee4c3473a611cb924c05f
bc61d266b689e585d2ae0c93c625d665dff0f4dfcbfc0263df35ca4c1bb1494f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/fonts/Roboto/Roboto-Medium.ttf HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
x-powered-by: PHP/7.4.25
cache-control: no-cache, private
date: Fri, 26 Apr 2024 15:46:55 GMT
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2

mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/

200.58.110.176

200 OK

569 kB

URL User Request GET HTTP/2
mcpin.com.ar/MetaMaskLK/MetaMaskSinhala/
IP
200.58.110.176:443
ASN
#27823 Dattatec.com

Certificate
IssuerLet's Encrypt
Subject*.mcpin.com.ar
Fingerprint83:66:A3:3D:3C:86:68:F1:72:1B:30:D5:A9:22:1B:D9:64:36:AB:E8
ValidityThu, 11 Apr 2024 03:46:49 GMT - Wed, 10 Jul 2024 03:46:48 GMT

File type

Size
569 kB (569199 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MetaMaskLK/MetaMaskSinhala/ HTTP/1.1
Host: mcpin.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/7.4.25
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 26 Apr 2024 15:46:52 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by