{"report_id":"f9c82ac6-ba81-4322-9ff7-62b791da3cf0","version":6,"status":"done","tags":[],"date":"2026-05-28T19:28:10Z","url":{"schema":"http","addr":"meta-mask.live","fqdn":"meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.meta-mask.live/","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"title":"meta-mask.live/","dom":{"size":35995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35976), with no line terminators","md5":"0a43fa51a6c0de7aadc595dcd2f44eb0","sha1":"8e08411b60d4b46c1d4ba9b98fd13626737775b6","sha256":"bee547a60319433bd6f76c3ff72ee82a2cab658d3dbd40c5ed8557d5d17791fd","sha512":"343fc96c142a0b863f27b49ef89c5f62ac1b8b9d8394d15754c6da1bc3f3c47e7f672e0ead1574450dc6c443eb1a7f04cabcacbd6ffe369ded0bf0e6e0792620","ssdeep":"768:oGze6wS7ghCAgfpKYiiqAj06wS7ghCbfh9wrRcFgNryzP1nxxiYpSt7SL4:q4NqAjnfh9wrRugNryzP1nxYY6","tlshash":"92f2627572041d7ef6134de4e2b0333a70bac64bd45a210ca5ba01b65b9bdccd92f9a8","dom_hash":"domhashb07fd87dc2d94871c5cf9b5f2e966e07","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meta-mask.live","fqdn":"meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T19:28:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":9809,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":5,"received_data":184184,"sent_data":2748,"comment":"","tags":null,"fingerprints":null},{"fqdn":"meta-mask.live","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-01-17","domain_rank":0,"first_seen":"2026-05-28T19:28:11.702048Z","last_seen":"2026-05-28T19:28:11.702048Z","alert_count":3,"request_count":1,"received_data":35963,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"www.meta-mask.live","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-01-17","domain_rank":0,"first_seen":"2026-05-28T19:28:11.701663Z","last_seen":"2026-05-28T19:28:11.701663Z","alert_count":48,"request_count":16,"received_data":709906,"sent_data":7305,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/8974e40e-279cfba8a0413f2c.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb5f281b24e5436c75a61623048a27f","sha1":"1f943b81e44ac19c48cd9f4c7efa1334c5f3d219","sha256":"e6ea846f69acc8b3b1a6c7d3689515228bd26656685b186be41b9d2c54a9ceb9","sha512":"1e9b30e2503e328403285d1e28637786317d8516e252c2e1ac3c270ca8aaff4d87b1a5a2c31627206318a4643fb6cbe7102120a630f658a1de329405a3d70839","ssdeep":"3072:8af6hSJsv6dK8xsFyYBnQI1Tdtt41fbY6ycobcLe3W2pexzM8sO3J7mmPiB9r5cO:8af6hSJsv6dK8xsFy0nQI1TdttkfbY6K","tlshash":"14c3d8b97696b53307f481bfb82fc047e21dd658280f421c7869c9d91e3e54a92fae70","size":120930,"data":"","first_seen":"2026-05-28T19:28:20.113584Z","last_seen":"2026-05-28T19:29:15.572766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/518-4d5ea978f40259fd.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1b092e56453d86f7abdd3222774aa62","sha1":"cc6f4f46b7eb392a039b6db4bf90dc6bbc25946b","sha256":"ce4a933efb33c91922b2b753f66bd10bdcba9dd5728e980c9e6c06dbff8f4f48","sha512":"a2b2b7416a94abbed311ed1f3577e396e8beefee8c264256eef156f4c23e530cbcdc319ec23ae51266c09a4d2f4a7817995b2c8382304a992a5f9bc2882afa02","ssdeep":"384:Hzk96UCqyeVrqBINYxBJYSIN3MAun5orJ6qe9iHWmkSKe/:okUCqyeRqpBJYSIN3MAun5orJ6qciHWq","tlshash":"9a924499b289612c754380b4a2777017f23f2577384ad0acd72cc5f97a59888a2379ff","size":20928,"data":"","first_seen":"2026-05-28T19:28:20.107451Z","last_seen":"2026-05-28T19:29:15.567119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/768-b3c20dccada1ad6f.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24e02b26c0f7899ad6f158dec53c8d5e","sha1":"b94050860bfd085bbc090c2d73471537cfde9b17","sha256":"a7fac287c9d73f22de8ffbddf388b78a758d30250528347dd22f1addce1b952e","sha512":"6263780a34d09d19e351308842897dfbfd99497678e556619724efd45a87eeef3c8324f70a3fef8002888ae7ff71ad666ea1ac921236df1f360c6abd3432036e","ssdeep":"768:wyr2dcavaoSaELkkwr2d5gMEUuHbqinavaTaSaB1FQMoMLSaEcT/a0a7a+X0z9AP:wYg6uyTAfXocUGN","tlshash":"2d234349a244aefcf91744d8669ef02db12e395dcd1dc43878b868392f091d83727bda","size":47237,"data":"","first_seen":"2026-05-28T19:28:20.108649Z","last_seen":"2026-05-28T19:29:15.574094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/webpack-ee7e63bc15b31913.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b92836e51d7e4d4627a9dda48a2b59","sha1":"8e0a4551c6c127c6dc2535b3f5244e6c6f379ee4","sha256":"090689036126351f469af89b3724b96479e85ec99f53dc28bc773858673f0338","sha512":"767988214af1a2ea6a17cff6a4b21e37b919d38d80f632659a2355ccddc8a7138953be6ceebc83db4e20c9e69ea312e070c2765de55af6fa21f08af838559dd8","ssdeep":"","tlshash":"fd41b7ea3185f4f4275720d8442fc492b4376a7310aee8a1d70de5f57c356988371e5e","size":2030,"data":"","first_seen":"2026-05-28T19:28:20.111055Z","last_seen":"2026-05-28T19:29:15.57696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/pages/_app-3dc662a508fb500d.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acc5656da9e760b4a2d4343bbecf79e8","sha1":"fca99078056f12711dc41ef8f7cedb2f223c143e","sha256":"ce242106fc937967f6e237a96f75454c5a36b2793f3e6c2a5f9de219ff0217cf","sha512":"1c23a2522854bc41fff7592abd3ddf8a72c43a8123cec9f29dcaea9094532543402e8655ce7d1ddc9aab44da1b30b55b4bc64dd38f2016af189e489d93d93fcd","ssdeep":"","tlshash":"7d01ab1878d2b8896a575aa0403f200c63af1b48589d9cc22ed3e4f56f709ed8162f9c","size":840,"data":"","first_seen":"2026-05-28T19:28:20.104612Z","last_seen":"2026-05-28T19:29:15.570645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/873-c3942fec8ea7efac.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a17205dfe044c9c9f2d7b4ac50078ac2","sha1":"28bee51c32b9a2c9bdd50dab0e84be6cbfb8b329","sha256":"d0cf7787cd86bc3d43e94ab7b87e2018c8ac46552f5aa5a4aff3a5d3d479741b","sha512":"f7660f0dcf1ced3488fd72ccfbd03c277df697c914bb5929eb57107fdbb028e24cbc975854ee690ad6fe09e237e03a0fa86ddaaccceacc9552c4629fe5ed132e","ssdeep":"192:HiacoQUJPKvgQWkw0gmQdOEmTy2a/9SRFdlpKL/b:CaTQUJc/JTy8e/b","tlshash":"f51218b73699fcda230b90d5a82f040cb6b55cb17726f140a7e889c4e970a14b162f7e","size":9157,"data":"","first_seen":"2026-05-28T19:28:20.098498Z","last_seen":"2026-05-28T19:29:15.573446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/FenmIUqlRWJBgpcZHTGt7/_buildManifest.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae1c3ddcc65a52b78432950093ea21aa","sha1":"abcd8d7f8867d8d20476e6a4e63a5bc91ed41ec6","sha256":"d42301ee11ed5aaf70fae2bca4aa58882c22281042175cbf3abeceac4ef3e242","sha512":"5d8ca155a89680873afce28565fafc27a5c28fa3c9e4e7b1945bc9c92cc0cb8a5889537bc36146f7985c8f04f305d1d574d1a9079f433bee80ffb822273baf0b","ssdeep":"","tlshash":"f50189871005fe0619a2cc85b92f3323ded4c537167506e2cbed0e6c9a600a38fda83a","size":854,"data":"","first_seen":"2026-05-28T19:28:20.1101Z","last_seen":"2026-05-28T19:29:15.571597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/main-fe015bc011991627.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8676257f82eb6f319fdad077c2287275","sha1":"76d9e20670ae3c6970249868189e621a368538f0","sha256":"8038456b7dfccc7d9d6a8506220c712dfe6b14fd12528613fa40fb0c2045dd35","sha512":"df6dcd92bfb0915986f327b8890ec4c8c76ecfb7acc346a624c15088ea280ff3b5f75bf77e59493b6a0d99d4a66209023f3e53c95986733a344290007e9e35c5","ssdeep":"1536:7dBLFQDkflq49uNNu2YdWzZ1DVbNQ/sBrklVdvGEQ2Pkr:WMlqwRdM3DhNsqklbGEQgkr","tlshash":"96b3f9b676d1f8a203c741d4843b0006f36a1dbe142f6045b3aadcd6b96499d90f3f79","size":109206,"data":"","first_seen":"2024-05-08T23:29:52Z","last_seen":"2026-05-28T19:29:15.565289Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/7112840a-0145708eff7dc155.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce1098c0979f1198e20c5fa777796138","sha1":"d375d5d8dc3af6a3b1899ea3bf08f70e8a25c465","sha256":"d7acc6ca947015d2f1661808da78e997bb055487fcae49cd2cdac03a45fd4a7f","sha512":"4cdad82b048c7074b5829d184a83efaa2662d1091412ae395ca0cb42a2e7b96e33285ac09fe599a20822d8cc697209b5555a65295afa8900409cc44458866f31","ssdeep":"768:xcrUZpVYAFN09V16Lku0IkiiWFyHijnYI0pN7fKE1VaxnH4R/SH69LEBusXba+/2:xcgZpVbN4HNu0BWsHenYI0pN7fKE1Vaq","tlshash":"4c23b87d3681693307c584ea6c2f8487f30dd489655f42acb8ad84da3c3999b62fde70","size":47853,"data":"","first_seen":"2026-05-28T19:28:20.105749Z","last_seen":"2026-05-28T19:29:15.56636Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/framework-5429a50ba5373c56.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abba1ab5a91e57321e4e354dcf9e831a","sha1":"da48186e0842f3ec11ea1f0bca8dbc15b1627c87","sha256":"a922d06946c153c130de6238a7d90e238f1341d19d42cee935017ad7495589e5","sha512":"17739f534ec4819cda999aef51f990a20926392a5201da782580ad86a7b8ad9e20b9e5c16db0cc71d0374274e12dee06d0697793c75d46ba3593b3bf7a03a540","ssdeep":"1536:2Yjv9NX6lMuuPhxj3hrpvj6yede7y3Uf7Q3:Dj33tpr61d9t3","tlshash":"07d309e83995f6516ab311a700ef2803737d2a1b280c4960e215fd9e75b842bb17bfdd","size":140984,"data":"","first_seen":"2023-12-23T15:39:18Z","last_seen":"2026-05-29T13:07:29.917051Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/870-601c81a9ef4c3362.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c11fbc8ecf7506ff3f42404c20082c","sha1":"cea65d7ccff81674ce77c35dbc30fa4d160b6871","sha256":"a656cdf4387df6d49776b35a7f72c3d30a8ba2c36325b31cf0f118a1f888669f","sha512":"d19b13fe7053c64208b4d35ffbf9d371d5ec1e4ddf6a4f4ce95df37dea0babe24e8c65c754c2fc3da42a4bb0ac71b611584bf9a6229cf1140b80c34f51137336","ssdeep":"3072:cIQTsfAWh4QUbiYvGhDmvo/KmaCGNPmRsmY3lA:JQTsfAWaQUbi4GhDkuJa1PmRsmY3lA","tlshash":"f6a31868b7a1703303e181fb552f444bf329995c080a51acf56cd8e66c7899a62fffb4","size":104663,"data":"","first_seen":"2026-05-28T19:28:20.09108Z","last_seen":"2026-05-28T19:29:15.562899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/pages/index-0fd8376a2647f099.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f9e09f7c314aadc9f533a4ac8c86bdf","sha1":"b746361cde97e71588c5333abb5b01ae0bf51e0c","sha256":"b3b84d692b5bf14327217c002f01f6ac9ea8e3272ce137d09b8d82a91c0505c3","sha512":"623ea832ee4bdf9c8fc4947b6cf7ead8a05e976ed7f5140a1f76441857c8e3ffee15d4cfd80bd728aa528011267a797d071229496cdcc1d05774406df7023f44","ssdeep":"","tlshash":"0af059983ad27c98719328f4007f691e336f2ea818dce8898662c8c92e3555d8123ecc","size":489,"data":"","first_seen":"2026-05-28T19:28:20.099858Z","last_seen":"2026-05-28T19:29:15.574906Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/FenmIUqlRWJBgpcZHTGt7/_ssgManifest.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-05-30T04:03:23.203855Z","times_seen":229438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.meta-mask.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 04:05:57 GMT\r\nexpires: Fri, 28 May 2027 04:05:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55312\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-05-30T04:04:15.048764Z","times_seen":24954,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":72,"dns":1,"connect":14,"send":0,"wait":26,"receive":9,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meta-mask.live/","fqdn":"meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T19:27:48.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:05:00 GMT","end":"Wed, 05 Aug 2026 14:04:59 GMT"},"fingerprint":{"sha1":"A1:5A:8B:89:93:F6:D9:C4:91:BD:53:21:6D:C3:20:2E:53:8D:74:09","sha256":"16:36:1B:4D:23:CD:8F:56:DA:F8:F7:B0:9B:AE:33:63:D0:25:67:2C:EC:EE:32:3F:E9:FA:BA:3D:5A:56:4C:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\nlocation: https://www.meta-mask.live/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::qqn5p-1779996468580-ee58d7773da8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":35644,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T04:03:16.546927Z","times_seen":15899389,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":85,"dns":57,"connect":1,"send":0,"wait":11,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/870-601c81a9ef4c3362.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/870-601c81a9ef4c3362.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"870-601c81a9ef4c3362.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"81c11fbc8ecf7506ff3f42404c20082c\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/870-601c81a9ef4c3362.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rwn2t-1779996468999-dae134880d6e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30816), with CRLF line terminators","md5":"81c11fbc8ecf7506ff3f42404c20082c","sha1":"cea65d7ccff81674ce77c35dbc30fa4d160b6871","sha256":"a656cdf4387df6d49776b35a7f72c3d30a8ba2c36325b31cf0f118a1f888669f","sha512":"d19b13fe7053c64208b4d35ffbf9d371d5ec1e4ddf6a4f4ce95df37dea0babe24e8c65c754c2fc3da42a4bb0ac71b611584bf9a6229cf1140b80c34f51137336","ssdeep":"3072:cIQTsfAWh4QUbiYvGhDmvo/KmaCGNPmRsmY3lA:JQTsfAWaQUbi4GhDkuJa1PmRsmY3lA","tlshash":"f6a31868b7a1703303e181fb552f444bf329995c080a51acf56cd8e66c7899a62fffb4","first_seen":"2026-05-28T19:28:20.09108Z","last_seen":"2026-05-28T19:29:15.562899Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/FenmIUqlRWJBgpcZHTGt7/_ssgManifest.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/FenmIUqlRWJBgpcZHTGt7/_ssgManifest.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/FenmIUqlRWJBgpcZHTGt7/_ssgManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fd86j-1779996469012-4706d0ca2a32\r\ncontent-length: 77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-05-30T04:03:23.203855Z","times_seen":229438,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Syne:wght@400;500;600;700;800\u0026family=DM+Sans:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Syne:wght@400;500;600;700;800\u0026family=DM+Sans:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 28 May 2026 19:27:49 GMT\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9ba5b01f06e894b2be69e73a0fd66b7f","sha1":"60f1d94f9a34338c50702dc1d2a2b67b88df1223","sha256":"ecd81bccb47e959730e0f019c9e624dbbe7ce20813003503b033e22e3be216cf","sha512":"05bfb7462a33524d7b95e8c2ec958356879dae51731d52aa6f9c5c0da9abe3e882d445297cd91526b6e1113fa52ba0fa09c17f6f9ebfef895367fc410144f432","ssdeep":"192:Jwi+EwD+rw8+Owl+NdeYMt0YdefMtbxdeCMt+CdexMt9rdeEMtIV:2kisTmHzRQPVlSO","tlshash":"c212bd91046ba404eb531cc623ce7d32ee4f71546454d979affe1c8cbcaac2a5322b4e","first_seen":"2026-02-26T15:32:59.062162Z","last_seen":"2026-05-29T09:11:46.206244Z","times_seen":8,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":200,"dns":1,"connect":29,"send":0,"wait":48,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T19:27:48.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 394321\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\netag: W/\"9d1e1836e9c31b0369d01961757b5a95\"\r\nlast-modified: Sun, 24 May 2026 05:55:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v565x-1779996468737-174b223dc3c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35644,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35624), with no line terminators","md5":"9d1e1836e9c31b0369d01961757b5a95","sha1":"ba76e16eec31d5aa03784800e2ea3913631b29bc","sha256":"17dfb0c67294aabaf7ace734f6acd7f5022f7e52288551a6224098bc89476dc1","sha512":"387261257e75307e66ee03b3252e28b846bb135065ee1572a5d0e3cd27db66590d9be60d3f417ffe3a749b739988502bee6047c967d73586c005fb0335d3127c","ssdeep":"768:B3ue6wS7ghCAgfpKYyiqAj06wS7ghC4fh9wcRcFgNryzP1nxoiYpSt7SLZ:r49qAj0fh9wcRugNryzP1nxlYf","tlshash":"39f2627572041d7ff6134de4e2b0333a70bac64bd45a210ca5ba01b65b9bdccd92f9a8","first_seen":"2026-05-28T19:28:20.095241Z","last_seen":"2026-05-28T19:29:15.569924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":114,"dns":38,"connect":1,"send":0,"wait":10,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/framework-5429a50ba5373c56.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:48.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/framework-5429a50ba5373c56.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"framework-5429a50ba5373c56.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\netag: W/\"abba1ab5a91e57321e4e354dcf9e831a\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/framework-5429a50ba5373c56.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zsmpn-1779996468982-942ae2485255\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":140984,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"abba1ab5a91e57321e4e354dcf9e831a","sha1":"da48186e0842f3ec11ea1f0bca8dbc15b1627c87","sha256":"a922d06946c153c130de6238a7d90e238f1341d19d42cee935017ad7495589e5","sha512":"17739f534ec4819cda999aef51f990a20926392a5201da782580ad86a7b8ad9e20b9e5c16db0cc71d0374274e12dee06d0697793c75d46ba3593b3bf7a03a540","ssdeep":"1536:2Yjv9NX6lMuuPhxj3hrpvj6yede7y3Uf7Q3:Dj33tpr61d9t3","tlshash":"07d309e83995f6516ab311a700ef2803737d2a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2023-12-23T15:39:18Z","last_seen":"2026-05-29T13:07:29.917051Z","times_seen":712,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/873-c3942fec8ea7efac.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/873-c3942fec8ea7efac.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"873-c3942fec8ea7efac.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"a17205dfe044c9c9f2d7b4ac50078ac2\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/873-c3942fec8ea7efac.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fd86j-1779996469000-9be513cc5fde\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9157,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9157), with no line terminators","md5":"a17205dfe044c9c9f2d7b4ac50078ac2","sha1":"28bee51c32b9a2c9bdd50dab0e84be6cbfb8b329","sha256":"d0cf7787cd86bc3d43e94ab7b87e2018c8ac46552f5aa5a4aff3a5d3d479741b","sha512":"f7660f0dcf1ced3488fd72ccfbd03c277df697c914bb5929eb57107fdbb028e24cbc975854ee690ad6fe09e237e03a0fa86ddaaccceacc9552c4629fe5ed132e","ssdeep":"192:HiacoQUJPKvgQWkw0gmQdOEmTy2a/9SRFdlpKL/b:CaTQUJc/JTy8e/b","tlshash":"f51218b73699fcda230b90d5a82f040cb6b55cb17726f140a7e889c4e970a14b162f7e","first_seen":"2026-05-28T19:28:20.098498Z","last_seen":"2026-05-28T19:29:15.573446Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/pages/index-0fd8376a2647f099.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-0fd8376a2647f099.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"index-0fd8376a2647f099.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: \"9f9e09f7c314aadc9f533a4ac8c86bdf\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/pages/index-0fd8376a2647f099.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fd86j-1779996469005-42b33bc2fb78\r\ncontent-length: 489\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (489), with no line terminators","md5":"9f9e09f7c314aadc9f533a4ac8c86bdf","sha1":"b746361cde97e71588c5333abb5b01ae0bf51e0c","sha256":"b3b84d692b5bf14327217c002f01f6ac9ea8e3272ce137d09b8d82a91c0505c3","sha512":"623ea832ee4bdf9c8fc4947b6cf7ead8a05e976ed7f5140a1f76441857c8e3ffee15d4cfd80bd728aa528011267a797d071229496cdcc1d05774406df7023f44","ssdeep":"","tlshash":"0af059983ad27c98719328f4007f691e336f2ea818dce8898662c8c92e3555d8123ecc","first_seen":"2026-05-28T19:28:20.099858Z","last_seen":"2026-05-28T19:29:15.574906Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.meta-mask.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 04:05:57 GMT\r\nexpires: Fri, 28 May 2027 04:05:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55312\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-05-30T04:04:15.048764Z","times_seen":24954,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":84,"dns":1,"connect":14,"send":0,"wait":15,"receive":17,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.meta-mask.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 04:05:57 GMT\r\nexpires: Fri, 28 May 2027 04:05:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55312\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-05-30T04:04:15.048764Z","times_seen":24954,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":127,"dns":1,"connect":15,"send":0,"wait":14,"receive":6,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.meta-mask.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 18:27:43 GMT\r\nexpires: Sat, 22 May 2027 18:27:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 522006\r\nlast-modified: Tue, 16 Sep 2025 13:27:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34608, version 1.0","md5":"559e8363d74f653c3f4f0a70caed2053","sha1":"0f50393efc7790d897e00024335d2c3398c13916","sha256":"68b623f0e45b905041b2edb9b2e4f563a505f13db1cd06b5f1946eb2e1f47048","sha512":"52fa63b0757b446e366b062b11b38fd9e81c5f752541b265d358d0e8a789eeb36bc322deb3e2719717401d91f9c3fa1f5cfb80a26ad9ae7451b068a88f3d5d3a","ssdeep":"768:VCLAKNFxbb9iPf3U0gTLKtAE54FB+6sfkxEpIX5yNz0zRjcUfgg:VCcgeHmTmL54F16a2aVpfB","tlshash":"d3f2f19ad9096d0dd938077603a230e6ec95197b3150f19e313a34231e7fae0a7dd6bc","first_seen":"2025-06-03T14:30:46.285622Z","last_seen":"2026-05-30T03:26:10.866308Z","times_seen":3339,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":194,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/metamask.jpg","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /metamask.jpg HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 280441\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"metamask.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: \"cda90e7e154e0e671543ac806fbb62f0\"\r\nlast-modified: Mon, 25 May 2026 13:33:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /metamask.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v565x-1779996469671-180caba7344d\r\ncontent-length: 7458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"cda90e7e154e0e671543ac806fbb62f0","sha1":"06894f7c30f0929beebf219db4eca1d7ae85cb20","sha256":"50c182d9efca7840f5a50365b67d70c1e6b2c9dfbc9706f9fc73beea83ebc2bf","sha512":"1423066eaed4e9998b0bb7e27d79673a0a15c1c79aede0b537e1d5e1e4939aa37f2f55cb3a9435bcf70b8065e027fb735136d1bf1b3a0693d299f31ffdeefd7d","ssdeep":"192:YOr9TB1NtQXkex8r/4Sjv+9bEyfwP0rA6R6:h91Tn48T4Sjcb0P0rAI6","tlshash":"f7f1af3fcd8dc509f809d47783e3eef8cbbe9ad1e5e10d0a41a897459424cd2920ba65","first_seen":"2026-05-28T19:28:20.10193Z","last_seen":"2026-05-28T19:29:15.568651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/css/3aae3641fe369184.css","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:48.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/css/3aae3641fe369184.css HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3aae3641fe369184.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\netag: W/\"af5ab82f2265d2a44e0d027f4266d057\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/3aae3641fe369184.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rwn2t-1779996468979-0942841a1166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52045,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (51844)","md5":"af5ab82f2265d2a44e0d027f4266d057","sha1":"a58d9c893401fd34c75f4b712191694d08123a28","sha256":"2744b116d2f07fa308c3017d62db792fc4ce6635f23ebf75e204a8386c26f3c4","sha512":"83b8b5b32e19b478b7eb48954743ab0ff1f2aeb2596b599e970997488ea995fedf26b8445ad2e8bf773c4a6365fd9180450b4cafcff858ff73f4af67843a03c7","ssdeep":"768:6H4uk7m5r2pkpPZPSWFW4PLAH+sGm8sTpIh7c861:6H4z7m4pk9a+sPFKK1","tlshash":"ed33b6697a10103ebc1391f6e6d8ea9db015b4c2dd3b17b9be9221019fd63fb0e62714","first_seen":"2026-05-28T19:28:20.103488Z","last_seen":"2026-05-28T19:29:15.576169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/pages/_app-3dc662a508fb500d.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-3dc662a508fb500d.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_app-3dc662a508fb500d.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: \"acc5656da9e760b4a2d4343bbecf79e8\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/pages/_app-3dc662a508fb500d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fd86j-1779996468987-7e0f1978e40e\r\ncontent-length: 840\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840), with no line terminators","md5":"acc5656da9e760b4a2d4343bbecf79e8","sha1":"fca99078056f12711dc41ef8f7cedb2f223c143e","sha256":"ce242106fc937967f6e237a96f75454c5a36b2793f3e6c2a5f9de219ff0217cf","sha512":"1c23a2522854bc41fff7592abd3ddf8a72c43a8123cec9f29dcaea9094532543402e8655ce7d1ddc9aab44da1b30b55b4bc64dd38f2016af189e489d93d93fcd","ssdeep":"","tlshash":"7d01ab1878d2b8896a575aa0403f200c63af1b48589d9cc22ed3e4f56f709ed8162f9c","first_seen":"2026-05-28T19:28:20.104612Z","last_seen":"2026-05-28T19:29:15.570645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/7112840a-0145708eff7dc155.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/7112840a-0145708eff7dc155.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7112840a-0145708eff7dc155.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"ce1098c0979f1198e20c5fa777796138\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7112840a-0145708eff7dc155.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zsmpn-1779996468999-1b4b24840226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47853,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5251)","md5":"ce1098c0979f1198e20c5fa777796138","sha1":"d375d5d8dc3af6a3b1899ea3bf08f70e8a25c465","sha256":"d7acc6ca947015d2f1661808da78e997bb055487fcae49cd2cdac03a45fd4a7f","sha512":"4cdad82b048c7074b5829d184a83efaa2662d1091412ae395ca0cb42a2e7b96e33285ac09fe599a20822d8cc697209b5555a65295afa8900409cc44458866f31","ssdeep":"768:xcrUZpVYAFN09V16Lku0IkiiWFyHijnYI0pN7fKE1VaxnH4R/SH69LEBusXba+/2:xcgZpVbN4HNu0BWsHenYI0pN7fKE1Vaq","tlshash":"4c23b87d3681693307c584ea6c2f8487f30dd489655f42acb8ad84da3c3999b62fde70","first_seen":"2026-05-28T19:28:20.105749Z","last_seen":"2026-05-28T19:29:15.56636Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/518-4d5ea978f40259fd.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/518-4d5ea978f40259fd.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"518-4d5ea978f40259fd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"a1b092e56453d86f7abdd3222774aa62\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/518-4d5ea978f40259fd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v565x-1779996469001-721df748b66f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20928,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20928), with no line terminators","md5":"a1b092e56453d86f7abdd3222774aa62","sha1":"cc6f4f46b7eb392a039b6db4bf90dc6bbc25946b","sha256":"ce4a933efb33c91922b2b753f66bd10bdcba9dd5728e980c9e6c06dbff8f4f48","sha512":"a2b2b7416a94abbed311ed1f3577e396e8beefee8c264256eef156f4c23e530cbcdc319ec23ae51266c09a4d2f4a7817995b2c8382304a992a5f9bc2882afa02","ssdeep":"384:Hzk96UCqyeVrqBINYxBJYSIN3MAun5orJ6qe9iHWmkSKe/:okUCqyeRqpBJYSIN3MAun5orJ6qciHWq","tlshash":"9a924499b289612c754380b4a2777017f23f2577384ad0acd72cc5f97a59888a2379ff","first_seen":"2026-05-28T19:28:20.107451Z","last_seen":"2026-05-28T19:29:15.567119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/768-b3c20dccada1ad6f.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/768-b3c20dccada1ad6f.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"768-b3c20dccada1ad6f.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"24e02b26c0f7899ad6f158dec53c8d5e\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/768-b3c20dccada1ad6f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lt5cz-1779996469002-5977f77251bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47237,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47215), with no line terminators","md5":"24e02b26c0f7899ad6f158dec53c8d5e","sha1":"b94050860bfd085bbc090c2d73471537cfde9b17","sha256":"a7fac287c9d73f22de8ffbddf388b78a758d30250528347dd22f1addce1b952e","sha512":"6263780a34d09d19e351308842897dfbfd99497678e556619724efd45a87eeef3c8324f70a3fef8002888ae7ff71ad666ea1ac921236df1f360c6abd3432036e","ssdeep":"768:wyr2dcavaoSaELkkwr2d5gMEUuHbqinavaTaSaB1FQMoMLSaEcT/a0a7a+X0z9AP:wYg6uyTAfXocUGN","tlshash":"2d234349a244aefcf91744d8669ef02db12e395dcd1dc43878b868392f091d83727bda","first_seen":"2026-05-28T19:28:20.108649Z","last_seen":"2026-05-28T19:29:15.574094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/FenmIUqlRWJBgpcZHTGt7/_buildManifest.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/FenmIUqlRWJBgpcZHTGt7/_buildManifest.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: \"ae1c3ddcc65a52b78432950093ea21aa\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/FenmIUqlRWJBgpcZHTGt7/_buildManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fd86j-1779996469009-682dec11838d\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (854), with no line terminators","md5":"ae1c3ddcc65a52b78432950093ea21aa","sha1":"abcd8d7f8867d8d20476e6a4e63a5bc91ed41ec6","sha256":"d42301ee11ed5aaf70fae2bca4aa58882c22281042175cbf3abeceac4ef3e242","sha512":"5d8ca155a89680873afce28565fafc27a5c28fa3c9e4e7b1945bc9c92cc0cb8a5889537bc36146f7985c8f04f305d1d574d1a9079f433bee80ffb822273baf0b","ssdeep":"","tlshash":"f50189871005fe0619a2cc85b92f3323ded4c537167506e2cbed0e6c9a600a38fda83a","first_seen":"2026-05-28T19:28:20.1101Z","last_seen":"2026-05-28T19:29:15.571597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/webpack-ee7e63bc15b31913.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:48.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-ee7e63bc15b31913.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\netag: W/\"c5b92836e51d7e4d4627a9dda48a2b59\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-ee7e63bc15b31913.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v565x-1779996468980-b48051116c92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2030,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1591)","md5":"c5b92836e51d7e4d4627a9dda48a2b59","sha1":"8e0a4551c6c127c6dc2535b3f5244e6c6f379ee4","sha256":"090689036126351f469af89b3724b96479e85ec99f53dc28bc773858673f0338","sha512":"767988214af1a2ea6a17cff6a4b21e37b919d38d80f632659a2355ccddc8a7138953be6ceebc83db4e20c9e69ea312e070c2765de55af6fa21f08af838559dd8","ssdeep":"","tlshash":"fd41b7ea3185f4f4275720d8442fc492b4376a7310aee8a1d70de5f57c356988371e5e","first_seen":"2026-05-28T19:28:20.111055Z","last_seen":"2026-05-28T19:29:15.57696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/main-fe015bc011991627.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:48.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/main-fe015bc011991627.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-fe015bc011991627.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:48 GMT\r\netag: W/\"8676257f82eb6f319fdad077c2287275\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-fe015bc011991627.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::628h2-1779996468985-2dbaaae6b699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109206,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8676257f82eb6f319fdad077c2287275","sha1":"76d9e20670ae3c6970249868189e621a368538f0","sha256":"8038456b7dfccc7d9d6a8506220c712dfe6b14fd12528613fa40fb0c2045dd35","sha512":"df6dcd92bfb0915986f327b8890ec4c8c76ecfb7acc346a624c15088ea280ff3b5f75bf77e59493b6a0d99d4a66209023f3e53c95986733a344290007e9e35c5","ssdeep":"1536:7dBLFQDkflq49uNNu2YdWzZ1DVbNQ/sBrklVdvGEQ2Pkr:WMlqwRdM3DhNsqklbGEQgkr","tlshash":"96b3f9b676d1f8a203c741d4843b0006f36a1dbe142f6045b3aadcd6b96499d90f3f79","first_seen":"2024-05-08T23:29:52Z","last_seen":"2026-05-28T19:29:15.565289Z","times_seen":46,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meta-mask.live/_next/static/chunks/8974e40e-279cfba8a0413f2c.js","fqdn":"www.meta-mask.live","domain":"meta-mask.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meta-mask.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 14:15:08 GMT","end":"Wed, 05 Aug 2026 14:15:07 GMT"},"fingerprint":{"sha1":"38:00:26:3E:75:5E:C3:FC:24:D3:43:4F:42:6D:66:E4:F0:A7:49:CB","sha256":"45:A3:0B:37:0F:23:A0:47:3C:68:DB:6E:2D:8B:58:46:FC:14:E6:2A:A6:19:6D:6D:35:36:C9:94:35:34:C0:AD"}}},"request":{"raw":"GET /_next/static/chunks/8974e40e-279cfba8a0413f2c.js HTTP/1.1\r\nHost: www.meta-mask.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.meta-mask.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 142502\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8974e40e-279cfba8a0413f2c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 28 May 2026 19:27:49 GMT\r\netag: W/\"acb5f281b24e5436c75a61623048a27f\"\r\nlast-modified: Wed, 27 May 2026 03:52:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/8974e40e-279cfba8a0413f2c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::628h2-1779996468999-1328fc5da49c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":120930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9875), with CRLF line terminators","md5":"acb5f281b24e5436c75a61623048a27f","sha1":"1f943b81e44ac19c48cd9f4c7efa1334c5f3d219","sha256":"e6ea846f69acc8b3b1a6c7d3689515228bd26656685b186be41b9d2c54a9ceb9","sha512":"1e9b30e2503e328403285d1e28637786317d8516e252c2e1ac3c270ca8aaff4d87b1a5a2c31627206318a4643fb6cbe7102120a630f658a1de329405a3d70839","ssdeep":"3072:8af6hSJsv6dK8xsFyYBnQI1Tdtt41fbY6ycobcLe3W2pexzM8sO3J7mmPiB9r5cO:8af6hSJsv6dK8xsFy0nQI1TdttkfbY6K","tlshash":"14c3d8b97696b53307f481bfb82fc047e21dd658280f421c7869c9d91e3e54a92fae70","first_seen":"2026-05-28T19:28:20.113584Z","last_seen":"2026-05-28T19:29:15.572766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"www.meta-mask.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.meta-mask.live/","date":"2026-05-28T19:27:49.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.meta-mask.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 18:27:43 GMT\r\nexpires: Sat, 22 May 2027 18:27:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 522006\r\nlast-modified: Tue, 16 Sep 2025 13:27:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34608, version 1.0","md5":"559e8363d74f653c3f4f0a70caed2053","sha1":"0f50393efc7790d897e00024335d2c3398c13916","sha256":"68b623f0e45b905041b2edb9b2e4f563a505f13db1cd06b5f1946eb2e1f47048","sha512":"52fa63b0757b446e366b062b11b38fd9e81c5f752541b265d358d0e8a789eeb36bc322deb3e2719717401d91f9c3fa1f5cfb80a26ad9ae7451b068a88f3d5d3a","ssdeep":"768:VCLAKNFxbb9iPf3U0gTLKtAE54FB+6sfkxEpIX5yNz0zRjcUfgg:VCcgeHmTmL54F16a2aVpfB","tlshash":"d3f2f19ad9096d0dd938077603a230e6ec95197b3150f19e313a34231e7fae0a7dd6bc","first_seen":"2025-06-03T14:30:46.285622Z","last_seen":"2026-05-30T03:26:10.866308Z","times_seen":3339,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":185,"dns":3,"connect":15,"send":0,"wait":15,"receive":5,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}