{"report_id":"f9f45b42-62e2-4c05-bdc1-b0db06c5b38b","version":6,"status":"done","tags":[],"date":"2025-09-19T13:14:51Z","url":{"schema":"http","addr":"metamaskuk.com","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"104.21.21.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metamaskuk.com/","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"title":"MetaMaskU.K"},"submit":{"url":{"schema":"http","addr":"metamaskuk.com","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"104.21.21.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-24T13:14:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56086,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.871842+0000\",\"flow_id\":1665892575743140,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56086,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":901,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56088,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.872401+0000\",\"flow_id\":917556801441065,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56088,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658729+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56072,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.876551+0000\",\"flow_id\":1746972968356910,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56072,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":901,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658478+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56056,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.878203+0000\",\"flow_id\":998169042619212,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56056,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2025-09-19T13:14:30.658252+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.881464+0000\",\"flow_id\":662875978206145,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56070,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2025-09-19T13:14:30.658369+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56046,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.884986+0000\",\"flow_id\":1715439318469232,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56046,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":901,\"bytes_toclient\":1634,\"start\":\"2025-09-19T13:14:30.658032+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.047098+0000\",\"flow_id\":112312710503801,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46806,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2025-09-19T13:14:30.695673+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.049821+0000\",\"flow_id\":1055414514261237,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46798,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2025-09-19T13:14:30.695541+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46784,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.053598+0000\",\"flow_id\":1215290376887374,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46784,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2025-09-19T13:14:30.695374+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"crownexc.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"crownexc.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imge2024.oss-us-east-1.aliyuncs.com","ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":12319,"sent_data":4679,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"by-fsm.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":50717,"sent_data":1549,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"crownexc.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":859,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":313,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":24749,"sent_data":1054,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":42307,"sent_data":873,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metamaskuk.com","ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":138,"request_count":46,"received_data":30095042,"sent_data":21404,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56086,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.871842+0000\",\"flow_id\":1665892575743140,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56086,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":901,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56088,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.872401+0000\",\"flow_id\":917556801441065,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56088,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658729+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56072,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.876551+0000\",\"flow_id\":1746972968356910,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56072,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":901,\"bytes_toclient\":6543,\"start\":\"2025-09-19T13:14:30.658478+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56056,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.878203+0000\",\"flow_id\":998169042619212,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56056,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2025-09-19T13:14:30.658252+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.881464+0000\",\"flow_id\":662875978206145,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56070,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2025-09-19T13:14:30.658369+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:30Z","timestamp":1758287670,"ip_dst":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.7","port":56046,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:30.884986+0000\",\"flow_id\":1715439318469232,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":56046,\"dest_ip\":\"47.253.30.236\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"imge2024.oss-us-east-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":901,\"bytes_toclient\":1634,\"start\":\"2025-09-19T13:14:30.658032+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.047098+0000\",\"flow_id\":112312710503801,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46806,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2025-09-19T13:14:30.695673+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.049821+0000\",\"flow_id\":1055414514261237,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46798,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2025-09-19T13:14:30.695541+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-19T13:14:31Z","timestamp":1758287671,"ip_dst":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.7","port":46784,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-19T13:14:31.053598+0000\",\"flow_id\":1215290376887374,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":46784,\"dest_ip\":\"47.79.48.187\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"by-fsm.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2025-09-19T13:14:30.695374+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aos@2.3.4/dist/aos.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-06T05:50:32.328633Z","times_seen":10333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-06T05:32:28.388989Z","times_seen":25121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/MetaMaskU.K-Co4GleA6.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fd6f4f6c92d5490448706e337e5fffa9","sha1":"cceaa7f2644c81b5c85da725a69b08503aa2521c","sha256":"51391598066c2f46a5a467440f7cbe9144c4c47deecf4296922296cc07526494","sha512":"c7f810a4591c4ae764637fc74b1a1efc67996652b4d456f9d46fa1fa240e9bae038a5a91146307370519af54d7cc439cc2eb9a436298570bcbf133275104df24","ssdeep":"","tlshash":"d4a0024a040015b2152835959725c66455441368661a565580a64705a912883aa1f869","size":59,"data":"","first_seen":"2025-09-12T08:34:36.632534Z","last_seen":"2025-11-02T04:36:49.891412Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index.esm-BynpUmKN.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6cda5e1a0a4a788e1e70c139fcf337a7","sha1":"fa96c55abdc80cdb100a665dd08b1088515c86e4","sha256":"b4f877d52254709e274864511b638d8ceb2bcf0da8f2b4eca2901d33127dfddf","sha512":"e418d594b6c6f45434e3f6b46d1d10eb8c418a3577702781da08532fe10ddd9f796fdae056b984ceea29b44407046cdc7ab25cc6ea56de47ba573171f570b075","ssdeep":"6144:Pu3GtH+IgI4zDfb6ZU58Jn5e3hZ1IZ7/1lDR0X:PuCLKnX","tlshash":"a41407c4f27834454252a1b8423f1607b337759e984a867c722fc9ea1dbc48a26b7f7d","size":203406,"data":"","first_seen":"2025-05-31T23:25:34.407155Z","last_seen":"2026-03-24T11:52:53.401962Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Header-BPQacwc2.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b8250b49b342942f2177b02701a36d05","sha1":"5c8eb7fdee63309d8b33f3441d037a9354cd05c2","sha256":"648fa08975ebf474af2814d0d6c731b9a91ad37a62568474b1ea41c9db8a1da1","sha512":"05130985cac99998a1e918828a097b3e66ed8a7d49ac3be1774967ed217be45d7b5e094f0e61109c201a882081fe9e9fa5bf544931c5b483ac627842a4e671a7","ssdeep":"384:L3+Ga/+mKbDA/cSj9LoB5sI6Q59co68jFoHo3ifH9G9e+o+:Lw+3GcQ9LoB5sg9co68RB9e+o+","tlshash":"92a26f06a8224979e577808ab46c1404b4599fdfd944ccb365fcac646ee6c3e3b4eb34","size":22554,"data":"","first_seen":"2025-09-12T08:34:36.688703Z","last_seen":"2025-09-19T13:15:26.933345Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e7d65db6078424c8a615d80bb4bec6a","sha1":"fac04f74d351d3dcc921c399696aa9af6a8b3971","sha256":"5b9fadd01a3760cd173332eeffd149412bab9736b444850409d5fbc6484b50fa","sha512":"4587551b37dece7bfc36cdc20b8d55a7b39aa87eef975f6afd620e195b4d66509e7a45bbf365dcdf2072ceccd5bf9d088923a2c29388f0227fdc540c7c727393","ssdeep":"","tlshash":"0e80047070174cd14555c5cd031001001013440541114400041550df1101c441d5c0c7","size":32,"data":"","first_seen":"2025-05-31T23:25:34.426778Z","last_seen":"2026-03-24T11:52:53.431764Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index-B9uX44Cf.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d51573af97854058abdb9ee26225150","sha1":"26f991dfc9dfed7706dde86800365d4d9a2fc565","sha256":"fa6d74cb9e9571571922043143b8bb52f4a806492cfd482a8068eea9bb1220f2","sha512":"7627a5dca79bb7152f2c1552ab54c6339fa460c761b289b08f4bb11c5bb04c9fecc4fe9f48a64ed9383b1e8663f22a88acc585fb9bed528713f8f3aec9f623b0","ssdeep":"49152:NQ0A2x51S38YelDZaQt5haW5NfLT2PaT4KqWcWtLczcMkSUY5k9RK/TYA6zWK9jp:vq3uMiH","tlshash":"77c55c987595b43943b755e4106f040ba33e1a48b40dc8b4f5bec8e939be849a27bf7c","size":2719741,"data":"","first_seen":"2025-09-12T08:34:36.717123Z","last_seen":"2025-09-19T13:15:26.995386Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/socketStore-D-9dIOH_.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4d3c2890f1fa63560f7e73caced96d45","sha1":"25e9f2b2aaad2f07237f28d51bf1ccd32658abe0","sha256":"f1b53de3f375d1ee7028707cdd557fe6c5221b47eacbb47ec9304763e1532745","sha512":"d019100ee622522b4672af98390c54c6b4118e10f09b0f688c1b1383d8d5c2a5c58d57165ac9c6d5cb59f10360495526f5974096e791267f2e5fffece9765974","ssdeep":"","tlshash":"3d11ab1134f545f432fd5c800d09c442b32088702b10a1edbd9caee4e277aca61289bd","size":860,"data":"","first_seen":"2025-09-12T08:34:36.630123Z","last_seen":"2025-09-19T13:15:26.974807Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/tabbar-jiaoyi-D3gYLmnm.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"65c35861aa5312e588db9179ed13bc17","sha1":"1caebab85c0a41aa08cdef8c04b0e9d5733bb3a7","sha256":"9c14a83e0fa6fa2a7efa49d83167e7cf7edbba6242b93f47248f2c0cff8df89d","sha512":"1772d7352a59185c8ea1439decd4757f5d7e7d80b600d9c785f7d6690698b23d4d65817f094335b09c60b0da291c46b5f7bc870cc896f4e24b509a3f6a2050b0","ssdeep":"","tlshash":"c4a00222041409f3212c6c85df71c5552682252471254256d82c4945a6729c1650f8a9","size":61,"data":"","first_seen":"2025-08-29T07:24:57.829458Z","last_seen":"2026-03-24T11:52:53.399637Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/noData-DtrM5XtM.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c335a4c9ce0b621c8a0e21afe3c633c5","sha1":"898cfd5219fd805f523841b35039b9f1985add32","sha256":"4ff29594afba17dc577a3b77f3fee0dedeb976f617ac3b36f3fd91c5aa2531ac","sha512":"1a1fa5ab6f9f18e2270dad15fbcf32ffa0cc370b02c8204eed937037977041982f63b59f9d3a10d0b27290b0caa73fa6f8433033bc41789041b301ed3df25bb5","ssdeep":"","tlshash":"cb90021d894408e00e6c64848b36c555548112586155475e80754b06e515450654a820","size":54,"data":"","first_seen":"2025-05-31T23:25:34.397844Z","last_seen":"2026-03-24T11:52:53.401195Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/swiper-core-wWwytbo4.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8355c7931270cd2785c6a8045dbbbb5d","sha1":"ec3d98683bc3c7456cc313608ea50cdb53e90eda","sha256":"0c8b35124fbed3f5def7c337b549de2f486a88ba029802ca1b898146c5b8a393","sha512":"f736e399ab688de6c68a2ea7e1328ecd35b06565b1eb39868eb80c1a20321fb12b5be26a698f99ca44f7e12a3216350b8a0f71588f3145f4943ef9c283ada4ea","ssdeep":"1536:S0U2L4mvhKjHZBJnaw94FV4g/tEgLv108BlxvHn99ouo+:9U2AnatF2gu4T","tlshash":"12631889e124767682e32ada53a5c10173b54c54b849c4e8b1fc8c6b59be95c03feff8","size":68182,"data":"","first_seen":"2025-08-29T07:24:57.843788Z","last_seen":"2026-03-24T11:52:53.397481Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Footer-CUjYGAQx.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c084d0697df40d2da500d70f00388043","sha1":"166358b1d0bf2b847ba934f60bdf801d98bae6be","sha256":"c4af79300b3cd6cb24fe948a3532aa2c8cb772e2ec231cb4d3efd4502eb4cd6f","sha512":"04d9ebd35bdd260f77a6fb6fe09740156c41f2a6803937dcfaeb7db6a48f50c81262a97299fe34c05d4df19d59cdaa339d3e02608224af7dc767f53ecd24058d","ssdeep":"384:GpnafGxcvEV9UWdtNOIYBk49gMUn09ZqtFIvEV9UWdt+xIYBk49g/riu:Gpna+x2EV9TdtNOIYvUn09ZqyEV9Tdt/","tlshash":"5482d7107d26173a483bc8e0b64429a17f857fdbe148cf9f99a77925ee438b0662b710","size":18565,"data":"","first_seen":"2025-09-12T08:34:36.646506Z","last_seen":"2025-09-19T13:15:26.925032Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Home-DqbKym03.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe02da72a8afe32e657197d1ca46db89","sha1":"b10fb208bad630301f29e2517c249a0104e0be39","sha256":"7e45db530a8dc7a13ac664a9a85792f4c5f9f463009fccc8c899a05f54246316","sha512":"cbf160b2b70707e050478b1157f846a7b3415656556dc2870094e9d55eb407516257961735d62be1c9fef0b65dc92b87b155b5e2d615203c1f56e9a22f8196b4","ssdeep":"6144:ZZXeBI+k0o1wI7JqdgCWv+3oa+SCPgvv0vLM/Wd/d:zok0o7JqdgCWv6+SGgV/ed","tlshash":"5b54d0b47318ad3a81a3b2f429cf14056c7f2ec2d408e861e27cd5526fed998246ff59","size":295271,"data":"","first_seen":"2025-09-12T08:34:36.663234Z","last_seen":"2025-09-19T13:15:26.949574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamaskuk.com/assets/Footer-CUjYGAQx.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Footer-CUjYGAQx.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-4885\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBRiDvSU%2BDdjNmVmb%2BFj3LseXiS52iWq3KHOxUC7rzcrdCdplw24ihVnENH%2Bg%2FAAjVTwJqtYclqK3hssjUERfG0QmCGyeuUNT3npfdNW\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae9dbda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (18328)","md5":"c084d0697df40d2da500d70f00388043","sha1":"166358b1d0bf2b847ba934f60bdf801d98bae6be","sha256":"c4af79300b3cd6cb24fe948a3532aa2c8cb772e2ec231cb4d3efd4502eb4cd6f","sha512":"04d9ebd35bdd260f77a6fb6fe09740156c41f2a6803937dcfaeb7db6a48f50c81262a97299fe34c05d4df19d59cdaa339d3e02608224af7dc767f53ecd24058d","ssdeep":"384:GpnafGxcvEV9UWdtNOIYBk49gMUn09ZqtFIvEV9UWdt+xIYBk49g/riu:Gpna+x2EV9TdtNOIYvUn09ZqyEV9Tdt/","tlshash":"5482d7107d26173a483bc8e0b64429a17f857fdbe148cf9f99a77925ee438b0662b710","first_seen":"2025-09-12T08:34:36.646506Z","last_seen":"2025-09-19T13:15:26.925032Z","times_seen":4,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/animation-img8-DuVlveNQ.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/animation-img8-DuVlveNQ.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-1498\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0q4ciRsFhiwlfi0m4IyIJeJIzhmAa%2Be%2FbCzITexJhi8p2pBGsklQuJzRuyDUZVAYeZbok7pZXH2RSy6NSXXSlolazYuE344S3ukklM%2BY\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0be0fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"8e2c35111a1274d1067b0ebd4f1d3027","sha1":"b6c83b7a44f073f6f07b89b8d39dfadcca9b7095","sha256":"d134e70ba9ba8ebe36234cb8d5ffb86effa02195a99bba53ff5f92085e853f60","sha512":"96acea3bc4e588994c176c32fa342908021ba33a8fa8b95d60c96233864f694ee599e371590853875df09b83b7758867c5c8f46bc942fbf07edb5ce7ccc2c1e1","ssdeep":"96:y5HqKL07qi/M3CrV1pxI/+3dLiXnPuCRnDumd+I8J62PAu6d/yveXPgdXNVDZ:kRLwj/CSi+g7RnDu8j2PAZhMe/gdd","tlshash":"d5b17ed26508d49d268c3144b1852d68d2317dceecbcf3782ca60677be95791ce46e52","first_seen":"2023-12-01T02:41:09Z","last_seen":"2026-06-01T17:57:24.36158Z","times_seen":46,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getLogData","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getLogData HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: e7da2e51c2bd6b3d03e178438d6e18c1\r\nContent-Length: 50\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=znbXQ8NdlYbEEvSymjeyzITj0zh9m5NSXdfNM%2Ful1lKaifO2v6Ff5qH3idjyWn4ev%2FC3dFv%2B7j5HvXTa%2B%2FBSJykLGtWsEiVv%2FeWjr7L6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b74e7ba0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3fb7bb39aa3d0fb097fc97001d06927a","sha1":"5e053cc76650c91a9da7cdf8ac0e2f2251e51d41","sha256":"7a87f26071faea98fbe716278ddebb31f66697160229c954a98713db77a892a7","sha512":"332d7b9acd58d9fce7c7d2fec9cdd1d681a960ea2e12362e88e7c196e5c46bbee379612a744dacb6720982b8afc9bf6a32e1eb97d7965c3183e6e5d9f5ac4b76","ssdeep":"1536:OuQJOqGp2CRGeHGKfu8Op2J1fEhxhQVZM2t2pEEPg4Zu30eTvILW9wMzfp:ObdCRtOp8pZx5ENty3fp","tlshash":"ea83e135ee969399ef398ceb17d3fcea4d9333c657cf9c82c589820658c1630621275a","first_seen":"2025-09-19T04:38:42.461568Z","last_seen":"2025-09-19T13:15:26.927905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":674,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Home-BfRl_ZWN.css","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Home-BfRl_ZWN.css HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-1a664\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIgVNEfjCaOiQnvGg%2BPPJFQXAQc1mvOGhCyzvRWaDmnqfbIz%2BjF1ruHR83vHWR3BaYSi3zbJCcMFyVRRYqWueXgn%2F9yANo9Sxq76BdF1\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae6db0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108132,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b64d6e01303e5fc7b5801e7b1b138134","sha1":"a0158a4d9b59c5d1fd9eb814a51cd9bf48360587","sha256":"57ea3bafb12c3b464d78c97689ff1a8273e0d2d16cdd508224e386582f78b900","sha512":"14b2cad95e57645bbc143ca78da7f338a6d88677c9d793f34a0e64c736556eb91635d1654965622c8491327d99af2a23366d1f22571138444082bb5b9d48597d","ssdeep":"768:jyJJ/WuJ1RZg5hvAll529ghGV2+OfM5kpS6AjgkOjS71IZwsMhHvlL32nU+1QlbG:mJJ/Wjh2+OfM5kpSkSRIbWPlL7lbrq","tlshash":"81b3c753716d361a4837ce226f980d948c29e3f3c456a3f8aa535a718fc76c6336731a","first_seen":"2025-09-12T08:34:36.695226Z","last_seen":"2026-01-12T08:34:26.398081Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getCustomerList","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getCustomerList HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: d3b426fad3273c77822d1ace1dcb4269\r\nContent-Length: 22\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcNRDQNsg5HpVF23V%2FOWnRcuHMVxEgH6iPoJAAUGa3kmHHfAlwp5llExHvf%2Ba9xPZFhLkbbo%2BJ9PWOscN2DjZCsh3Y1ott92mZYSPF78\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae6daea0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"db111b86cbd744a299a1a755ff6147a7","sha1":"8e6387659ae1bafaa5d4d00e9a50dd3c769d0f64","sha256":"ef34a224083046ab97c9d16ba59275018a6f4b4439bd2d055067db2717c5d36c","sha512":"c46c5d611fe9b79a3cf2ccc341895a7e535e76e9df5bf3d06a216bd2430206e9b797458c38e248dd43e075d343ca6083d6629e9b5804e36d63e8f7440141f3e4","ssdeep":"","tlshash":"a39004111d045d753f4750d3750f1504ddf4704041545431cc5c513dc74453d7c43d74","first_seen":"2025-09-12T08:34:36.702024Z","last_seen":"2026-01-12T08:34:26.414675Z","times_seen":13,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Header-BPQacwc2.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Header-BPQacwc2.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-581a\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=civDhZ6Ro0xqM%2BqKwC6u1EMUU1RbG7NyMz1BJqLcfKUXA2nKxK5AUMFmv3CV9GTorErzk2rEyVv5NbUnytOTbA5STSyNL%2BNVqHcX2BH8\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae9db9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22554,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22101)","md5":"b8250b49b342942f2177b02701a36d05","sha1":"5c8eb7fdee63309d8b33f3441d037a9354cd05c2","sha256":"648fa08975ebf474af2814d0d6c731b9a91ad37a62568474b1ea41c9db8a1da1","sha512":"05130985cac99998a1e918828a097b3e66ed8a7d49ac3be1774967ed217be45d7b5e094f0e61109c201a882081fe9e9fa5bf544931c5b483ac627842a4e671a7","ssdeep":"384:L3+Ga/+mKbDA/cSj9LoB5sI6Q59co68jFoHo3ifH9G9e+o+:Lw+3GcQ9LoB5sg9co68RB9e+o+","tlshash":"92a26f06a8224979e577808ab46c1404b4599fdfd944ccb365fcac646ee6c3e3b4eb34","first_seen":"2025-09-12T08:34:36.688703Z","last_seen":"2025-09-19T13:15:26.933345Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183124-21937959118140233.png?attname=%E5%BE%B7%E8%AF%AD.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183124-21937959118140233.png?attname=%E5%BE%B7%E8%AF%AD.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 210\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD573784F61D34399B59DC\r\nAccept-Ranges: bytes\r\nETag: \"860105E9BF50E3F72127D2A4D137C3AA\"\r\nLast-Modified: Tue, 08 Apr 2025 10:31:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2067556021862422506\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hgEF6b9Q4/chJ9Kk0TfDqg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"860105e9bf50e3f72127d2a4d137c3aa","sha1":"119bae2d626d25c89da48f4b78076b580ec177ef","sha256":"404679bd8e08612c6316c7b927889568abc1cd2546d46669df1ed16201d79eaf","sha512":"62ac80a1aa176e76550f54a04fcba859a80543ce07b6e8599e60e39592e1d9989743550f95345bf67c2b069925534d5c6e2207ac36eb6a35e2153ae610067c63","ssdeep":"","tlshash":"dad023b3cf651c93f50003236675025d503ad070515734cc4de5f5e177ec50195d551b","first_seen":"2025-05-31T23:25:34.410413Z","last_seen":"2026-03-06T11:58:58.377122Z","times_seen":23,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":374,"dns":50,"connect":105,"send":0,"wait":105,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183208-57285787007459511.png?attname=%E8%A5%BF%E7%8F%AD%E7%89%99.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183208-57285787007459511.png?attname=%E8%A5%BF%E7%8F%AD%E7%89%99.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 781\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD573784F61D3439685ADC\r\nAccept-Ranges: bytes\r\nETag: \"96008D64E612EB2A89731517DC8C78B0\"\r\nLast-Modified: Tue, 08 Apr 2025 10:32:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4396675388134263986\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lgCNZOYS6yqJcxUX3Ix4sA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"96008d64e612eb2a89731517dc8c78b0","sha1":"3a18ec8342fa95e3788b756f7557aea024dc8c41","sha256":"3b8cda404cbf3ec0750c648277b06e4860a88857ac8ae3f4e916f25cdbc85180","sha512":"f9782407ac93edca27cc9ec810598017b69addb418662cf27d8eb602d386782b571634d1ed121d1ee92672b8b0781dc51e2f27caaeeb2ab738ef0e4471f155dc","ssdeep":"","tlshash":"9401c5eb9bbe28f9f6ccc88b460332016e99c30d31a9800ce628457321013879cc37b3","first_seen":"2025-05-31T23:25:34.376832Z","last_seen":"2026-03-06T11:58:58.384099Z","times_seen":23,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"by-fsm.oss-ap-southeast-1.aliyuncs.com/a4/95808e896a94e00f79e3a0460672ff.png?attname=Bitcoin.svg.png","fqdn":"by-fsm.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /a4/95808e896a94e00f79e3a0460672ff.png?attname=Bitcoin.svg.png HTTP/1.1\r\nHost: by-fsm.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 36521\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57376B4B1339301DD94C\r\nAccept-Ranges: bytes\r\nETag: \"A495808E896A94E00F79E3A0460672FF\"\r\nLast-Modified: Thu, 10 Aug 2023 11:51:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12461126827139104692\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pJWAjolqlOAPeeOgRgZy/w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":36521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"a495808e896a94e00f79e3a0460672ff","sha1":"5714f6ba4526b1256cddfb02db3b124244121b7f","sha256":"b1c3869190c44159b06468f1b9f3f6342a4d296d7597aa3235bc6b549dba8fe5","sha512":"c6c756ce66e9aa8223caaac96c3d87fa607506985e609ea8415a858f18e700dec5bbc2835211bd42d0b970f3740fa3e0b5d06060ab7dcbae89d063fe1b767542","ssdeep":"768:9+7nvd188mwxaI5ayB0ZMCQnqTIZcWPQLDskKJnvK8F5v:8x7oI5axZd5N4hXFd","tlshash":"ccf2f16fef86c27a12d08bc22d632fb7b2c60d5de9754cc61fd960651a9c13660d04f6","first_seen":"2023-10-18T16:15:22Z","last_seen":"2026-03-06T11:58:58.38895Z","times_seen":31,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":51,"connect":175,"send":0,"wait":181,"receive":11,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-19T13:14:28.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 13:14:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 09:11:24 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CpEDFPC%2BMgmLCeJN3Hvi5RX2UxY%2BgtmCdFXTmoyeqvcMONluamGVFXSahrmNwsW1djkVvMphLPnFQ8qKNrGRGf2fjEY24cEBdGcXg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 981958a81d4f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367723,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3440)","md5":"6ecedce201a19fd25fc9f420449e633e","sha1":"77c8da880abadf5b4289ece94374386462b4ebdd","sha256":"62b1bf51db3a003ec60bb5d4d7fc7d6da85f15b1850852f269688ed5fe6714f6","sha512":"ecf900331f6e898367734da05032c47e22c5e1d86c89c3633a603a1eaf2325208afdb50187709c1c956ee94a5570b9a63785f99a8aec3c1e7b2ae0447590381a","ssdeep":"3072:h/K936uL5I/GoUa2Uw7CA8Iav8kR8X3A6b+qMIXgnV5Gi411XM:h/K9K85IuoU/1CA8Iav8k0b+/IXgnVSM","tlshash":"4374b7f0a76892bc680a83d9792d5c24770e24b73ac5ccb8b22d5dd15b43cd9da4b4cb","first_seen":"2025-09-12T08:34:36.65761Z","last_seen":"2025-09-19T13:15:26.937344Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":33,"dns":12,"connect":1,"send":0,"wait":164,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/MetaMaskU.K-Co4GleA6.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/MetaMaskU.K-Co4GleA6.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7R%2BLn6n3Cuo542hRScvzya2DU0N3380jJWekpMmGFjCzPSo26EXktb8%2BJ9LH1Mx%2Fv%2FHd52XXQ%2F1jhkuW61LofBBcbPsjP%2BYeO4XodMX\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-3b\"\r\ncf-ray: 981958afddfaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"fd6f4f6c92d5490448706e337e5fffa9","sha1":"cceaa7f2644c81b5c85da725a69b08503aa2521c","sha256":"51391598066c2f46a5a467440f7cbe9144c4c47deecf4296922296cc07526494","sha512":"c7f810a4591c4ae764637fc74b1a1efc67996652b4d456f9d46fa1fa240e9bae038a5a91146307370519af54d7cc439cc2eb9a436298570bcbf133275104df24","ssdeep":"","tlshash":"d4a0024a040015b2152835959725c66455441368661a565580a64705a912883aa1f869","first_seen":"2025-09-12T08:34:36.632534Z","last_seen":"2025-11-02T04:36:49.891412Z","times_seen":5,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183236-43871289693444868.png?attname=%E7%BE%8E%E5%9B%BD%E5%9B%BD%E6%97%97.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183236-43871289693444868.png?attname=%E7%BE%8E%E5%9B%BD%E5%9B%BD%E6%97%97.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 1237\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57379B3C7D3536BC3F98\r\nAccept-Ranges: bytes\r\nETag: \"E6C51933407CBB037A5F770481629CD8\"\r\nLast-Modified: Tue, 08 Apr 2025 10:32:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8402597258003658010\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5sUZM0B8uwN6X3cEgWKc2A==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"e6c51933407cbb037a5f770481629cd8","sha1":"82796089bcd7660fbd38eb4a844cb5fe57c847cd","sha256":"a3b5b709ad0c5bbea0c17d7beb56f8c67440d7038c2b85665275b955cd74d2c7","sha512":"d9b34720f870ba45d77243acf452de02dbf8d80e02fd03c7e54ccc12f37552eb37537a56adfab079057c4c59cfcb49a065927bfc40dac7447c091bb1198084db","ssdeep":"","tlshash":"5e21b780007b2d828f1e4403f35aa436fea7954c18734b0cd753d3b2c615e18de646b9","first_seen":"2025-05-31T23:25:34.38456Z","last_seen":"2026-03-06T11:58:58.375775Z","times_seen":31,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":372,"dns":53,"connect":105,"send":0,"wait":116,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183249-07393001193331528.png?attname=%E7%B9%81%E4%BD%93%E4%B8%AD%E6%96%87.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183249-07393001193331528.png?attname=%E7%B9%81%E4%BD%93%E4%B8%AD%E6%96%87.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 706\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD573784D7A939385FCA01\r\nAccept-Ranges: bytes\r\nETag: \"A0052B14D1CBD10EAB4875E2F63D4528\"\r\nLast-Modified: Tue, 08 Apr 2025 10:32:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1124914835273316396\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oAUrFNHL0Q6rSHXi9j1FKA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"a0052b14d1cbd10eab4875e2f63d4528","sha1":"445abd966eb34644d0d2caa6f42d89cab4dd1c9d","sha256":"f620e570750db9ea359fc337534defc4ee200d0a2c6e46de54a90801b34cd69a","sha512":"01a5e0d21fefed1b73ab6d89733c94025ebae3723b96dcd1249419f3d9c1b361ff499eeae92e63f2e514f79256325d8b336f0166fa35268b235f04099a6b9d98","ssdeep":"","tlshash":"83019418de00a674c702c49a329f0166e061e6a6b1dabd2e09608d84af464bdc703f3b","first_seen":"2025-05-31T23:25:34.420785Z","last_seen":"2026-03-06T11:58:58.351934Z","times_seen":31,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":375,"dns":49,"connect":105,"send":0,"wait":108,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/tabbar-jiaoyi-D3gYLmnm.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/tabbar-jiaoyi-D3gYLmnm.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgP%2BXrMOY2Au54XQG86w2EhUvrc8G4i5s2obe8YWlBgJfgUrUATpYB0GZhVcwEvrToaeqTUEY4ioQh6%2FcJJa56nV5YtVtANHgEnV%2BOmV\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-3d\"\r\ncf-ray: 981958afddf7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"65c35861aa5312e588db9179ed13bc17","sha1":"1caebab85c0a41aa08cdef8c04b0e9d5733bb3a7","sha256":"9c14a83e0fa6fa2a7efa49d83167e7cf7edbba6242b93f47248f2c0cff8df89d","sha512":"1772d7352a59185c8ea1439decd4757f5d7e7d80b600d9c785f7d6690698b23d4d65817f094335b09c60b0da291c46b5f7bc870cc896f4e24b509a3f6a2050b0","ssdeep":"","tlshash":"c4a00222041409f3212c6c85df71c5552682252471254256d82c4945a6729c1650f8a9","first_seen":"2025-08-29T07:24:57.829458Z","last_seen":"2026-03-24T11:52:53.399637Z","times_seen":30,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index.esm-BynpUmKN.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/index.esm-BynpUmKN.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-31a8e\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0m4dz8cdz6yGRmKYRdAWTn%2B515ctimudZY0B1iVoYqsI6Uo0AtDL0x2O15OOp%2B8nikM4nRVc9dJE%2FyjIqa2EDawjZDFKN1n%2B%2BW1rncd\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958afddf5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"6cda5e1a0a4a788e1e70c139fcf337a7","sha1":"fa96c55abdc80cdb100a665dd08b1088515c86e4","sha256":"b4f877d52254709e274864511b638d8ceb2bcf0da8f2b4eca2901d33127dfddf","sha512":"e418d594b6c6f45434e3f6b46d1d10eb8c418a3577702781da08532fe10ddd9f796fdae056b984ceea29b44407046cdc7ab25cc6ea56de47ba573171f570b075","ssdeep":"6144:Pu3GtH+IgI4zDfb6ZU58Jn5e3hZ1IZ7/1lDR0X:PuCLKnX","tlshash":"a41407c4f27834454252a1b8423f1607b337759e984a867c722fc9ea1dbc48a26b7f7d","first_seen":"2025-05-31T23:25:34.407155Z","last_seen":"2026-03-24T11:52:53.401962Z","times_seen":32,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"crownexc.vip/owss/socket/getu=AXCfgh3FCAdgG1637hgw332\u0026t=1758287670","fqdn":"crownexc.vip","domain":"crownexc.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crownexc.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 Aug 2025 02:00:51 GMT","end":"Fri, 14 Nov 2025 02:57:20 GMT"},"fingerprint":{"sha1":"7B:74:1C:B5:23:93:B9:D7:33:0E:52:D2:38:F2:52:A7:F5:A0:E6:5B","sha256":"78:FA:58:1F:FB:68:CD:DA:80:91:58:01:8D:1B:BE:3B:74:E0:E7:DC:E2:D8:23:85:64:FC:FF:50:53:17:0C:76"}}},"request":{"raw":"GET /owss/socket/getu=AXCfgh3FCAdgG1637hgw332\u0026t=1758287670 HTTP/1.1\r\nHost: crownexc.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://metamaskuk.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WGtTkumSTPg26y3TB+2WEQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 19 Sep 2025 13:14:30 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: /uZOkmnhV+WVST7o6v9G8H5rnAs=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GNgHS%2BJeijybzPKiV5osfLV8HKk%2BU5i4F6SS7cH2Xgbbhol6ygdb4X%2Fg2tF%2FrPQoHLdU9R7LGv7rao%2BJNe0A4bfBT0wgKltWMIWLDlEawaQurwbw%2Fj%2FhLJasuVkfuxA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 981958b40c035687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=462\u0026min_rtt=442\u0026rtt_var=160\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2827\u0026recv_bytes=1206\u0026delivery_rate=5443609\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=700669e5c5b55f94\u0026ts=477\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":214,"connect":217,"send":0,"wait":450,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"crownexc.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"crownexc.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Home-DqbKym03.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Home-DqbKym03.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/index-B9uX44Cf.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-48167\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UurhLcpinTbWV%2FOViuXmgbotgJt9NWJoVOiNqtC9oK5deLyW27xAUFzWRshB26tQnLROrxFZGF11MrJ0DkT9CgjBywcMxvzp%2FP0roAY\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958aefdc3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295271,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65144), with no line terminators","md5":"fe02da72a8afe32e657197d1ca46db89","sha1":"b10fb208bad630301f29e2517c249a0104e0be39","sha256":"7e45db530a8dc7a13ac664a9a85792f4c5f9f463009fccc8c899a05f54246316","sha512":"cbf160b2b70707e050478b1157f846a7b3415656556dc2870094e9d55eb407516257961735d62be1c9fef0b65dc92b87b155b5e2d615203c1f56e9a22f8196b4","ssdeep":"6144:ZZXeBI+k0o1wI7JqdgCWv+3oa+SCPgvv0vLM/Wd/d:zok0o7JqdgCWv6+SGgV/ed","tlshash":"5b54d0b47318ad3a81a3b2f429cf14056c7f2ec2d408e861e27cd5526fed998246ff59","first_seen":"2025-09-12T08:34:36.663234Z","last_seen":"2025-09-19T13:15:26.949574Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/live-ZTjlYob8.gif","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/live-ZTjlYob8.gif HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-403f28\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zi3uMhYKfRn1U%2BF5u3Ybi4o%2FuYjYgDvwyfmuXUwCQ7hn02L3oGYgIblIGC5aSr751AWn0yR1p4DFCZEhs7RMcTZJMJ7tj69xkAw8Sjr\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0ce19a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4210472,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 270 x 228","md5":"e271164321af0d9cca0e38ffea05c507","sha1":"b94ef881d6b87836d5aa024526eb76911e29348f","sha256":"20ff6793e23cc483bb582839cbb0ad4ae68945c6c431b172a0eb840beccefdff","sha512":"6940e301697433e98b1751be72339dafc5cf7e11e984e802ffbbfde0940f31cb567289ae546c455781b6efbfd10f8dd171a4aee942c45b7e5306a89e1a1e2a93","ssdeep":"12288:nykykyRVOVvNAGx2Wg0Hx2Wg0u2/7yCLA/dbewUirLxJtkg/otNJtkg/otNJtkg9:nykykyzM2Y2v2A/YirvKXnKXnKXF3g3/","tlshash":"122523e6480dc1a33bdda4b557af570867f1d9802bde1b1bb20b8db454f8121a8c5afc","first_seen":"2025-08-29T07:24:57.867385Z","last_seen":"2026-05-14T09:05:11.02361Z","times_seen":38,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/home-BhdlL1kg.gif","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/home-BhdlL1kg.gif HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-c71827\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9nwXVPLEWFIZrSezXhyr1kE%2F%2FSCGUsCDv1W11Al7yXTadRIunWi292j1DNP5%2BniLfWAquhR8Tuf5bGYeHjrGDrb%2FWSkGmgPHgsNJEF8\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0de1aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13047847,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1596 x 400","md5":"93b7b3bb6d7a8ac2330c2f6bbc145676","sha1":"2b845e1219f7c9e599a5cf11a8678b038840e36f","sha256":"3b1840a2169b662ebee36cc0f135537c1c4f090ad99cc6978d8413e1dba53149","sha512":"66b2260aa2c0de7c142482c260ed72ce7921cc715f1db14aee5298b9499647239eaae1556070a0670f338512d2e24f763937baa176d131dd2238b49c752a79c9","ssdeep":"12288:BdAtFWNk2khSACAE+vKZLU7T93UIBLbG6sxwfK1pozTJrLJcg/rUGkLihogN/BTk:FkhhSXsKeP9kItb82MMLWGwGmidUJJga","tlshash":"36251260a67f8d13ff66213421441a7108c1b69cebf77f2172a6bd88e24276b9ddc1b1","first_seen":"2025-08-03T10:30:11.867807Z","last_seen":"2026-07-02T13:51:35.143264Z","times_seen":260,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183141-32248489792430362.png?attname=%E6%B3%95%E5%9B%BD.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183141-32248489792430362.png?attname=%E6%B3%95%E5%9B%BD.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 290\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57378B23C13935B26FFF\r\nAccept-Ranges: bytes\r\nETag: \"D8933DD914453466D479D22238BD447A\"\r\nLast-Modified: Tue, 08 Apr 2025 10:31:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12273340221265541230\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2JM92RRFNGbUedIiOL1Eeg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 32, 8-bit/color RGBA, non-interlaced","md5":"d8933dd914453466d479d22238bd447a","sha1":"92447a15f7a3b9d5d5a886f8eb0901ada8c5d87e","sha256":"b8f890da0e8190d73c97b2b4a29300a3b0c7dfdcf4d60b919d641f99ae6da066","sha512":"af4b5ffae7bc7ce8cb1293cc1dc5fdba401975caf97d87be939cee2bb65fc1310228c68cb446ad347ba89a9e16b73545ff2caad39dbd3579c6772cd37f1ca064","ssdeep":"","tlshash":"93d0eb83c3222e6ad926693d2c6b4222a422714813e120eeac30032f7921c0928c0b41","first_seen":"2025-05-31T23:25:34.424415Z","last_seen":"2026-03-06T11:58:58.367451Z","times_seen":23,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":370,"dns":51,"connect":105,"send":0,"wait":109,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183109-61658882762844882.png?attname=%E6%84%8F%E5%A4%A7%E5%88%A9.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183109-61658882762844882.png?attname=%E6%84%8F%E5%A4%A7%E5%88%A9.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 201\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD5737FF57903231411454\r\nAccept-Ranges: bytes\r\nETag: \"F380012D25D5C6F538910E4B343AB4E4\"\r\nLast-Modified: Tue, 08 Apr 2025 10:31:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4931420190245580922\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 84ABLSXVxvU4kQ5LNDq05A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 32, 8-bit/color RGBA, non-interlaced","md5":"f380012d25d5c6f538910e4b343ab4e4","sha1":"0df1edfbcb7ce7c117fc77f7aa7f432d0309bcd6","sha256":"fbdea5ac6f7add48078f0b1c5496b0b9dd62392e571ff075f793c92b62495e36","sha512":"8e9095e193f2b513dfbaf1dad67880f86107bf408379c954d06368d08a54cb0fb04a42c2e0768bf20878ff8874c73a0e41080c5bbadca981edbc54ee4ed9de20","ssdeep":"","tlshash":"c4d023ca9f455cbb96e4c03b01161511e492e1550451000ded1481619d6d51e34e5451","first_seen":"2025-05-31T23:25:34.408093Z","last_seen":"2026-03-06T11:58:58.378577Z","times_seen":31,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":382,"dns":45,"connect":115,"send":0,"wait":116,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183155-31811379303937603.png?attname=%E8%91%A1%E8%90%84%E7%89%99.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183155-31811379303937603.png?attname=%E8%91%A1%E8%90%84%E7%89%99.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 683\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57378B23C139359F70FF\r\nAccept-Ranges: bytes\r\nETag: \"25176DD6F66E2CB7C1A55E458CD74EA2\"\r\nLast-Modified: Tue, 08 Apr 2025 10:31:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1804633752696821962\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: JRdt1vZuLLfBpV5FjNdOog==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"25176dd6f66e2cb7c1a55e458cd74ea2","sha1":"db4f673e9f83b0b03d8fa9d7b34eb9ed024c6067","sha256":"5964b61ec098f1998c73808113d5a6c9d4521f730eaab3a21da150c013a52181","sha512":"5a33f4b666af35b41bdad2e147e3ab096f839a21a3c1393f84d92e038f394e40b836b6957f9ba190ce6d4338357506c490cf23e79286ed6281243d174e17a6f3","ssdeep":"","tlshash":"e80144ef73685e3cc415f4d75c147939891654882a4642810ca1700006016bb658fe3d","first_seen":"2025-05-31T23:25:34.411946Z","last_seen":"2026-03-06T11:58:58.393509Z","times_seen":23,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":474,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index-DPUuiFX_.css","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:28.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/index-DPUuiFX_.css HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-15e074\"\r\nexpires: Fri, 19 Sep 2025 16:14:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMjDHQoyKWeeD2bX%2B3koqOee7YP1rrlte5ezqmVz7lcjKABqdEytQN%2FEHQiqYw0rcVhPKOctQEULeR0oWx%2FFGUHow2A6u1ff%2BQwNYYZG\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958aacd4ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1433716,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"9351d935f7013c97652d7e8f902af35d","sha1":"6e31580dba4f06479e255c84cbae866273d21e82","sha256":"e82758cdec89d126d7802fec1f53c908b5e2c7ea8e3cbfb24ea9c4b423a653f7","sha512":"ffb2cdb3a70d68663df5155f61bc1f59e07971fb21c9793f39d597b36e8c1923a021e1c458b9d9c10c584cab2e4de7372a3c48c9f35c775c16ffe0e26757e35e","ssdeep":"24576:gQf1v4dwU1BAUkIDL39yK5hrFeZ0nTfRyvOu7mkojMv6sH0Z38Jl5XPW:gQf1v4r0vmkiMv6sH0Z38Jl5XPW","tlshash":"c125f917e747211a5523ce296bc47b945b28d262d1214bfbfa137809cfc76c922a7b0f","first_seen":"2025-09-12T08:34:36.63867Z","last_seen":"2026-01-12T08:34:26.39585Z","times_seen":12,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mudYal0sL%2Fre8C8zh7H6cM%2FHceZwl6AbG04cjDar4ACNb4A5i6%2Bm%2BGwEvCveFi4AuaqBtLBfb808FfSjRjjyN6viMsx6JZ%2BJdbKpvnFN\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-5b\"\r\ncf-ray: 981958ae8db6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-06T05:32:28.388989Z","times_seen":25121,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/MetaMaskU.K-BvXjSxIK.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/MetaMaskU.K-BvXjSxIK.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-1101\"\r\nexpires: Sat, 11 Oct 2025 16:58:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 677762\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kFAK87GGahCk2X5X55GzPIvFrGqB5We4vfUtwD2hFCQ6OhjTnufgmElm7SHzyMjqnsN3MsVc2wG%2BXQHcQ7JGsesW6W3jsEBpzZA%2Blrk\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b05e05a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"27e91198a0939e23fbae23156d63d24b","sha1":"dce75372c85396acaea07970614381d7dfa5642c","sha256":"f37cd93c4858de5b65b1624a41895382ade4ec5de66a65a916bd76a55ea55132","sha512":"a3ba1af58c02a89be77e1437c4c42e0df9cc9f568653325f648435b581a0f92885c107ed79e13a8094d90ced9274aadc31cdfbd95fff15241c630f5ef9bb3761","ssdeep":"96:WfVjzQTixNaq/ONb9bHsAiSdgEhSArImRFo1jZhQfWXTr:WfVgTCGNhMAi5A7O1Br","tlshash":"5f915ba0211ff08a5df7497496b9e6c9fe043c29ada938bfa6862c1d83110e350dc7d5","first_seen":"2025-04-08T12:18:55.070798Z","last_seen":"2026-03-13T02:18:04.060969Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getLogData","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:31.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getLogData HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: 59418bf61f9b2c455c2e4b9182a175cb\r\nContent-Length: 50\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoH3nSHEApjfQuCWkyOwd5RRvUMO18goqzq7wBen1YfNwQD9%2B9s7%2BnSGPfSYWHDGWcRFxb7sk47G6DH4bCr%2B2xpQ09Fq7jv8i%2FCfYMhG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958bbdef2a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82899,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2062c7e1c7a3c6a86594c1f7c98bc84f","sha1":"d3a3e8c02cc5f01a77678b4641d7e55f03271305","sha256":"17d0547287d627b7208ac0141cfd2b176957d112fcfda765afcb336ddafbacf4","sha512":"acdccb0cbe75dfb5ff653382928eb128202697035fbaa1897779cdfbb5c47d5f745e7e148414bd65ae5b5c2457314706ab8ff52b0aab6687ce869758eca95081","ssdeep":"1536:TDYyNKGa37lhezpCPx/Sg/0prxfT4l2iOUedkQ1qKhHl:TtAGm5hezYPx/pCxr4BOFqy","tlshash":"e68314f69dc6a345ed389ceb1fd3bdfa5db332c656cf6ce28048590968c1260b20175a","first_seen":"2025-09-19T04:38:42.410005Z","last_seen":"2025-09-19T13:15:26.96315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/quan-DH5JrnX5.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/quan-DH5JrnX5.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-184b8\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYBixY15FxTgsz%2B2PxeiefYhvAra86btuXP1q%2Bzo8Rw2onUb%2FC9DZwoS53LWirNWnjACP2Sm77O3I1hTITIjvesTMq%2B4cdG6abPdMz11\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0ae0da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1597 x 1597, 8-bit/color RGBA, non-interlaced","md5":"1710e00faab523f042f250a22723b78f","sha1":"1c6b59e1fac67f7568120fbacb7935fd20319c25","sha256":"3d1cf3d25c81f1122ad7ab7601bca523be983b1b19eb6f4296c28918fbd78481","sha512":"cbdd85ecae77d74e27746a6dd4c6400fe722e4cdee6743d7bc22c80c692a793767817f246e7b86fd1afc08f12e6482d37d91996b7aadbb0627c8b94f96cd82cb","ssdeep":"3072:D0ZzAybKTZT2LqXQp1wKvMcEHDJcTXik/QWy:D0Zz5K0Lqg4lTJySWy","tlshash":"88a302a2ad239943c230653c04364e25f67049bd9a951f7a2af05ec9da573d93ec3ef0","first_seen":"2025-06-22T10:43:35.202035Z","last_seen":"2026-07-02T13:51:35.129341Z","times_seen":246,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Footer-CUjYGAQx.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Footer-CUjYGAQx.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-4885\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0Ls7jZd6j1sY%2FzHP4KBLWDOdKvl%2BgLPMT4nI2O4KvtA4Au1LO00NVNZ9up36w6%2BkoPUqHdcKQVLP5FQImQXKNYyyqXGsOd4adMyMtK%2B\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958afddf9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (18328)","md5":"c084d0697df40d2da500d70f00388043","sha1":"166358b1d0bf2b847ba934f60bdf801d98bae6be","sha256":"c4af79300b3cd6cb24fe948a3532aa2c8cb772e2ec231cb4d3efd4502eb4cd6f","sha512":"04d9ebd35bdd260f77a6fb6fe09740156c41f2a6803937dcfaeb7db6a48f50c81262a97299fe34c05d4df19d59cdaa339d3e02608224af7dc767f53ecd24058d","ssdeep":"384:GpnafGxcvEV9UWdtNOIYBk49gMUn09ZqtFIvEV9UWdt+xIYBk49g/riu:Gpna+x2EV9TdtNOIYvUn09ZqyEV9Tdt/","tlshash":"5482d7107d26173a483bc8e0b64429a17f857fdbe148cf9f99a77925ee438b0662b710","first_seen":"2025-09-12T08:34:36.646506Z","last_seen":"2025-09-19T13:15:26.925032Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/jy2-D4Sz89Hk.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/jy2-D4Sz89Hk.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-1aea3\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBPvtvWxN%2FMY2Aaaq5RzcMrHKR0cNL%2FjOFCFuCyvGsr2RUImWU4P%2F7SC6nIP6MsDSVLSqh6puY4scoHCW9MneaVr4NkdPUvYqpTZAwb4\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0ce15a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 292, 8-bit/color RGBA, non-interlaced","md5":"a994c3c423fa59a5b14756c73b355e30","sha1":"2e5e5c7ec9ff17f6df6e8405f885849c9706c93e","sha256":"d9d3377c82255610147d0c7d8ddb4de02ad52941505f7d910735ac0782a580e6","sha512":"6e20d255c981f7751734a112486aa0784d04c4507d7882b0255dcb23bc2160be8aa37beb87a6f0d6f7ad4da6aec13a4356705f722bf9810d828940b58b9ac1df","ssdeep":"3072:TdlW4E+my+qKLY3N76eLTLWyzmcXCmCvptAbV6S:iz7y+FS6eL2yjSmd","tlshash":"65b30201e4b5cfc4cb99d5dbb235cd761b904d85fb8a84b6b47e5d8242324849f88b8b","first_seen":"2025-04-05T11:30:41.036838Z","last_seen":"2026-07-02T13:51:35.102533Z","times_seen":307,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Sep 2025 13:14:29 GMT\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18040,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8cb37e94959600610588bc89f4d7cd84","sha1":"c39a594c45b054f66fe172ab514383c21ec6f5db","sha256":"e4671d561b069dfb38e50316ec2caf0c3ee9537c61521198ca289dfcc43341cd","sha512":"c233e699795761464a4a76aae6d351296c731f71770e8c35349d5920e3e16ce3be36b5050ed18a59a3c4e13918cef6702e7f50cefdc7e0582c122a973bb15b79","ssdeep":"192:H3pG3pNo3prA6LA6+oA6jn6zn6mon6bOROmoOnN6AN6roN64E6gE6LoE6Yr6Fr6l:H3w3s3VR9xqWSUq+DnLami0ARmkh","tlshash":"d4827991087be114ab871cc122cf7d36ee0ea254b850e9786bfd1cd8ad9bc654371b2d","first_seen":"2025-09-19T04:38:42.440344Z","last_seen":"2026-07-30T12:15:34.585431Z","times_seen":352,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":73,"dns":1,"connect":20,"send":0,"wait":17,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202504/08183221-23124078840574414.png?attname=%E6%97%A5%E6%9C%AC%E5%9B%BD%E6%97%97.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202504/08183221-23124078840574414.png?attname=%E6%97%A5%E6%9C%AC%E5%9B%BD%E6%97%97.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 505\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD573784D7A9393868CB01\r\nAccept-Ranges: bytes\r\nETag: \"81452BC719094693A22EFEEBAFCA05C5\"\r\nLast-Modified: Tue, 08 Apr 2025 10:32:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 610028393534295076\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gUUrxxkJRpOiLv7rr8oFxQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"81452bc719094693a22efeebafca05c5","sha1":"ed328e07ece3828d29bec3480565713fd8203d94","sha256":"8a3feb1f014afb5fee6ebbaad8403514a8e135146e01e5416497da19cb9b0c08","sha512":"625d14d488f6e2a7c51e24549daf1c9291360872ca1f1bf7b62f1d41f7c1bbf587752bc3779ac7c554008af0df6de561549833b809a87851f203c1e5b2675587","ssdeep":"","tlshash":"bff00ed773828649aee0063781186afaaa719ba0c9204534a02492fc05ab0298682249","first_seen":"2025-05-31T23:25:34.419318Z","last_seen":"2026-03-06T11:58:58.372686Z","times_seen":23,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/noData-D9NJ4N6h.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/noData-D9NJ4N6h.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-10d7\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmSua8jen4j%2BtQp01I5hgYMJdSTyjoEvPDTMMkVze3ao46jrmts8ESwKicNn6M9FsCVPPddxerzlMtx5Ta1fn3BHxhiQgVISok%2FuqGG0\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b07e08a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 148 x 132, 8-bit/color RGBA, non-interlaced","md5":"a70b72d60cf3bdbc19515f31810ff902","sha1":"adbb5abadfc6e8f0bb9d9f9d4e1c5356d7b34303","sha256":"f33adc8d6e24dc0fecfc45c1353ae64486b91a9683ed6ff2dd99dbc2da1d8be3","sha512":"01baaeb998b4c88456d451adb3f52b0b48b4bd1eb0a6fb50c41639bc4ab7df2dcd3afc52d35bac39dc2455b54c14ff837260911a786ca58a4db4af48ac7c8a21","ssdeep":"96:7ESuqcu0/Ak3E0g0nRmOGQse3TR1thM3v7h037aeE2zytJn5D:oSuqcu0/J3EAnDGQs61n+DKzzgJn5D","tlshash":"9e914cef93fffcfd9f09881c1565333a99c9a75e80892390ad564c2044138a816f83f5","first_seen":"2025-05-31T23:25:34.398879Z","last_seen":"2026-03-24T11:52:53.387873Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Header-DunQQIwX.css","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Header-DunQQIwX.css HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xp0OfuSCak%2BHmwi2xR9SI1LDvA2%2BPTxjucyBOk9ko3%2BWLGlBcDYjszex3lKFQA%2FveAwFuhyBReUBzhQjHEm93JRHxDE4e6POU7dsaKPP\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-af\"\r\ncf-ray: 981958ae6dafa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"023dee196d1024fefcb36bf9049c4f26","sha1":"57d01dd672933561f9086966efaa304c6e0436d1","sha256":"d9f84e53d9b901a1721fbd059dae5d1d38f84c0bfb7ad33caa656d837883430a","sha512":"7d0a61809eb649db8ef17f3c9f9e4a6e33ab2e5551144e0675539e2fdf08016f1c09807bb7bcd2fc052c335343ed5ae5e06f702ad4457e8636fd09c562c249c4","ssdeep":"","tlshash":"79c08002f687600d1453a41011512379ca3e5651b6411779bd71723c5f334d5b434876","first_seen":"2025-09-12T08:34:36.641892Z","last_seen":"2025-11-02T04:36:49.936427Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/favicon.ico","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:30 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:11:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3vJC%2BTMSNJDDSELC2CyowaiFVQDtiF9wgjyDOWpbI3ZkmxfpdQEIY6U6Dw8foMBXYCJnDAw2QI12pgqIVgtcpGYEkkO0XxdpiKS8YpA\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"68c2922a-1101\"\r\ncf-ray: 981958b51e58a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4353,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"27e91198a0939e23fbae23156d63d24b","sha1":"dce75372c85396acaea07970614381d7dfa5642c","sha256":"f37cd93c4858de5b65b1624a41895382ade4ec5de66a65a916bd76a55ea55132","sha512":"a3ba1af58c02a89be77e1437c4c42e0df9cc9f568653325f648435b581a0f92885c107ed79e13a8094d90ced9274aadc31cdfbd95fff15241c630f5ef9bb3761","ssdeep":"96:WfVjzQTixNaq/ONb9bHsAiSdgEhSArImRFo1jZhQfWXTr:WfVgTCGNhMAi5A7O1Br","tlshash":"5f915ba0211ff08a5df7497496b9e6c9fe043c29ada938bfa6862c1d83110e350dc7d5","first_seen":"2025-04-08T12:18:55.070798Z","last_seen":"2026-03-13T02:18:04.060969Z","times_seen":18,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Sep 2025 13:14:29 GMT\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5337,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b458ca40ede53de02766760c01c60b30","sha1":"a94795f15110aec67060cca674a8319e4faf5eaf","sha256":"6ec1a6257d053cd4692575a0b49d6b9fe1b429e8e692310a2024d31c1de5c293","sha512":"322ddf278f7be9c00f173520fdb9cf7964c60badb15ee84d444ba069ba7da5fc22440d5b180e2c36ce29384450ff1dbe80f5bf0e917895e182ca8d39ae27b958","ssdeep":"96:jYgEa0Jc+ufYgEacNkYgXa0Jc+ufYgXacNkYgpa0Jc+ufYgpacNkOEaXsXJc+ufx:MOQVOkNQVNkrQVr8wD+rw8+NwG+3","tlshash":"dcb1e081042ba154db972dc426de7d32ef1fa1946454a874affe1888fc9ac2e5361b4c","first_seen":"2025-09-11T18:19:56.026325Z","last_seen":"2026-08-06T03:22:04.605745Z","times_seen":2201,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/swiper-DHBATib1.css","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/swiper-DHBATib1.css HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-18f7\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyJbuheky7B6NrM7EA0X9v1T%2BKfJJB1aSJSAoOInsxpJfpY%2B6M7yIoTKIGy8qAE%2B9ogMRxiNf7meG4if188r5JUBTjpJuQqmxTb4uge4\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae7db1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-07-28T04:22:05.532151Z","times_seen":509,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index.esm-BynpUmKN.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/index.esm-BynpUmKN.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-31a8e\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yp5gWjAbDkBza8EYmmovgwWSf5UybgPHUMwCwi46eu8BQr9PjdbnJIhFneC%2FDG8i9hWRlr%2B0r57Y0QvtyzY4uz3EdGdJMIxn%2BzUlX9Uf\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae8db5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"6cda5e1a0a4a788e1e70c139fcf337a7","sha1":"fa96c55abdc80cdb100a665dd08b1088515c86e4","sha256":"b4f877d52254709e274864511b638d8ceb2bcf0da8f2b4eca2901d33127dfddf","sha512":"e418d594b6c6f45434e3f6b46d1d10eb8c418a3577702781da08532fe10ddd9f796fdae056b984ceea29b44407046cdc7ab25cc6ea56de47ba573171f570b075","ssdeep":"6144:Pu3GtH+IgI4zDfb6ZU58Jn5e3hZ1IZ7/1lDR0X:PuCLKnX","tlshash":"a41407c4f27834454252a1b8423f1607b337759e984a867c722fc9ea1dbc48a26b7f7d","first_seen":"2025-05-31T23:25:34.407155Z","last_seen":"2026-03-24T11:52:53.401962Z","times_seen":32,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/viewLoading-Cn60R0Z4.gif","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:28.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/viewLoading-Cn60R0Z4.gif HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:28 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-70e0\"\r\nexpires: Sun, 19 Oct 2025 04:14:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4op7WDp2CoAKpIKbuLQO1NW03TnMR%2BDB2E5YC6l15TXNMam5mrwA1Rq3y%2FupqyP7TnLhVwWU2jCxWw5uNeZY8l19c8zDiSW6z9BiJNK\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958aacd51a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28896,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"703c940e874943ecd3fbcd1cada9745b","sha1":"a28e45a00ca639452c0169e7e1b72a3549000ce8","sha256":"dae437250bbf674eb06a897a9e63b0fbcbd7eba2c68c5601eb02ff7e0fb19145","sha512":"d55492795a01121785aad2ab61d06e5dd408c3904ba00ea454e2765781f2ae4faf5d3794c8c51c8146b83f577732e8d34d03e82b43204114f310bed4fe7fccac","ssdeep":"384:sbzi2gJmlCPuWhhTJb7kN20X40BTstQKhQ6kLegGsA7Umk/RoW3H2lHOmdmSWPmv:szi2gVLVbI4K4YWkQImWRGHOYZRKAN","tlshash":"a6d2e10e216d6d1aff7d89b80d72e38c4953eff05d5678076e88632e89561592c0cef2","first_seen":"2025-03-31T16:58:52.268181Z","last_seen":"2026-07-02T13:51:35.127304Z","times_seen":428,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/MetaMaskU.K-Co4GleA6.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/MetaMaskU.K-Co4GleA6.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kKYH%2BysL1f9JmQJLFBen1ApS0P82%2F7Ry3C3jvzXqL6Tr4leqZlh3iaB0NTzJI9iSxsJ87ENPiA9r7kmseOsmI8q8psg7MVJWqhsI7Ln\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-3b\"\r\ncf-ray: 981958ae9dbba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"fd6f4f6c92d5490448706e337e5fffa9","sha1":"cceaa7f2644c81b5c85da725a69b08503aa2521c","sha256":"51391598066c2f46a5a467440f7cbe9144c4c47deecf4296922296cc07526494","sha512":"c7f810a4591c4ae764637fc74b1a1efc67996652b4d456f9d46fa1fa240e9bae038a5a91146307370519af54d7cc439cc2eb9a436298570bcbf133275104df24","ssdeep":"","tlshash":"d4a0024a040015b2152835959725c66455441368661a565580a64705a912883aa1f869","first_seen":"2025-09-12T08:34:36.632534Z","last_seen":"2025-11-02T04:36:49.891412Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/swiper-core-wWwytbo4.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/swiper-core-wWwytbo4.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-10a56\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oWY6ZLKEk%2Bfrl4oQ8V1abopr%2F6Lf6mMnUBX%2FnzMuPSLqJiHwH7VEJQdWiJbq0B%2BZV7BjPLo12jnE37cfbiJbgFcGXqzhDQs5as8OjJC\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958afcdf3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8355c7931270cd2785c6a8045dbbbb5d","sha1":"ec3d98683bc3c7456cc313608ea50cdb53e90eda","sha256":"0c8b35124fbed3f5def7c337b549de2f486a88ba029802ca1b898146c5b8a393","sha512":"f736e399ab688de6c68a2ea7e1328ecd35b06565b1eb39868eb80c1a20321fb12b5be26a698f99ca44f7e12a3216350b8a0f71588f3145f4943ef9c283ada4ea","ssdeep":"1536:S0U2L4mvhKjHZBJnaw94FV4g/tEgLv108BlxvHn99ouo+:9U2AnatF2gu4T","tlshash":"12631889e124767682e32ada53a5c10173b54c54b849c4e8b1fc8c6b59be95c03feff8","first_seen":"2025-08-29T07:24:57.843788Z","last_seen":"2026-03-24T11:52:53.397481Z","times_seen":29,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/socketStore-D-9dIOH_.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/socketStore-D-9dIOH_.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXlngg2%2FID15LsL2VBTcroVKyizyXvfHfRw4c7Er%2Boxtzj657x8vJAloSG7tp7arIldSCnCB0K2KjMRP5GgoCiPBrbxtH5me7EjGf85m\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-35c\"\r\ncf-ray: 981958afddf4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (779)","md5":"4d3c2890f1fa63560f7e73caced96d45","sha1":"25e9f2b2aaad2f07237f28d51bf1ccd32658abe0","sha256":"f1b53de3f375d1ee7028707cdd557fe6c5221b47eacbb47ec9304763e1532745","sha512":"d019100ee622522b4672af98390c54c6b4118e10f09b0f688c1b1383d8d5c2a5c58d57165ac9c6d5cb59f10360495526f5974096e791267f2e5fffece9765974","ssdeep":"","tlshash":"3d11ab1134f545f432fd5c800d09c442b32088702b10a1edbd9caee4e277aca61289bd","first_seen":"2025-09-12T08:34:36.630123Z","last_seen":"2025-09-19T13:15:26.974807Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8hDQ0iTqBT4rfpH4dQo%2Fy0sgrIiK%2FghxBHdChFe0N11qZ1QcXT5osrz4UjgIEVsQs8i6pSuWukMlNm0DuY94Y48ZDhXxvmgel2re1yB\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-5b\"\r\ncf-ray: 981958afddf6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-06T05:32:28.388989Z","times_seen":25121,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Header-BPQacwc2.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Header-BPQacwc2.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-581a\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZZpQ%2FJsvzB3pn%2B5MMuogJjqvkrfdY%2FtprInYFabNTxB37X7VoiVw8oi5%2BcyMlOiLCgPE3EBXsYxf5cNW7nL5HKrmkc1pcWOy2fb3mxX\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958afddf8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22554,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22101)","md5":"b8250b49b342942f2177b02701a36d05","sha1":"5c8eb7fdee63309d8b33f3441d037a9354cd05c2","sha256":"648fa08975ebf474af2814d0d6c731b9a91ad37a62568474b1ea41c9db8a1da1","sha512":"05130985cac99998a1e918828a097b3e66ed8a7d49ac3be1774967ed217be45d7b5e094f0e61109c201a882081fe9e9fa5bf544931c5b483ac627842a4e671a7","ssdeep":"384:L3+Ga/+mKbDA/cSj9LoB5sI6Q59co68jFoHo3ifH9G9e+o+:Lw+3GcQ9LoB5sg9co68RB9e+o+","tlshash":"92a26f06a8224979e577808ab46c1404b4599fdfd944ccb365fcac646ee6c3e3b4eb34","first_seen":"2025-09-12T08:34:36.688703Z","last_seen":"2025-09-19T13:15:26.933345Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/noData-DtrM5XtM.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/noData-DtrM5XtM.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/assets/Home-DqbKym03.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA%2BQhjogKGpHojQTvfZ9MUoUnNqLjqUXex5qvTxFB7ObKPzEQ6NrA%2F%2BOCAsn7fckgZy5Zi1xxYkpx28Bz4NIZRPkqAzMJX1Vt%2B9s4eJm\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-36\"\r\ncf-ray: 981958afddfba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c335a4c9ce0b621c8a0e21afe3c633c5","sha1":"898cfd5219fd805f523841b35039b9f1985add32","sha256":"4ff29594afba17dc577a3b77f3fee0dedeb976f617ac3b36f3fd91c5aa2531ac","sha512":"1a1fa5ab6f9f18e2270dad15fbcf32ffa0cc370b02c8204eed937037977041982f63b59f9d3a10d0b27290b0caa73fa6f8433033bc41789041b301ed3df25bb5","ssdeep":"","tlshash":"cb90021d894408e00e6c64848b36c555548112586155475e80754b06e515450654a820","first_seen":"2025-05-31T23:25:34.397844Z","last_seen":"2026-03-24T11:52:53.401195Z","times_seen":33,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getSymbolList","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getSymbolList HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: b52e50f761efc1443187818b1c1c157b\r\nContent-Length: 29\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Xg%2FkBa9bmKpoCrkP84Vp9jT%2BL1AliLZmimb8Ct7GcQx%2FXxwU5xwtkl1lnXt0%2FItkmgELD6mhTrCmkPf6JukhZl1A9zwqWiUkzLhn9%2Bc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b1fe28a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1256,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65a4c36a02acbdf2c645e126ac12852a","sha1":"e4a99dde362c903333c9dc6b1119e940fb5bf797","sha256":"53ca79668f5441b25f3f19ce8fd2e84400bfa863788b37878bce33105b0a6f6f","sha512":"6e467b7bbf574d81548ba3db53379048ce726db745c182ddd3d8ffa16424a6c28a650359b5b4db8fc5b56379a6d91d6ece7a54d61ee8b54d199670096da6d605","ssdeep":"","tlshash":"7721a20d15048f5c959502a19e832ffa6798347754d70fd957dcbca58070bfe1a0e961","first_seen":"2025-09-19T13:15:26.976557Z","last_seen":"2025-09-19T13:15:26.976557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/Home-DqbKym03.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/Home-DqbKym03.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-48167\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2MxwfV%2Bq%2FBhSMaysaG787cOsoTJIp1JAt%2FR722aiNNYa6zQh0mf4z9ia4ETQCJxHTSVsyyXSpPjf8%2FcfFfD%2BwrZqP5wJErYQGbKjkra\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae7db2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295271,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65144), with no line terminators","md5":"fe02da72a8afe32e657197d1ca46db89","sha1":"b10fb208bad630301f29e2517c249a0104e0be39","sha256":"7e45db530a8dc7a13ac664a9a85792f4c5f9f463009fccc8c899a05f54246316","sha512":"cbf160b2b70707e050478b1157f846a7b3415656556dc2870094e9d55eb407516257961735d62be1c9fef0b65dc92b87b155b5e2d615203c1f56e9a22f8196b4","ssdeep":"6144:ZZXeBI+k0o1wI7JqdgCWv+3oa+SCPgvv0vLM/Wd/d:zok0o7JqdgCWv6+SGgV/ed","tlshash":"5b54d0b47318ad3a81a3b2f429cf14056c7f2ec2d408e861e27cd5526fed998246ff59","first_seen":"2025-09-12T08:34:36.663234Z","last_seen":"2025-09-19T13:15:26.949574Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"by-fsm.oss-ap-southeast-1.aliyuncs.com/13/2523db1970f78798e2934cf0763d9e.png?attname=52.png","fqdn":"by-fsm.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /13/2523db1970f78798e2934cf0763d9e.png?attname=52.png HTTP/1.1\r\nHost: by-fsm.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 6389\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57377CC77533310C8C01\r\nAccept-Ranges: bytes\r\nETag: \"132523DB1970F78798E2934CF0763D9E\"\r\nLast-Modified: Thu, 10 Aug 2023 11:54:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7129169203090381673\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EyUj2xlw94eY4pNM8HY9ng==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"132523db1970f78798e2934cf0763d9e","sha1":"ff128f8c049ce37062290745bbe378f5be8c4598","sha256":"a096df1d83b6551fb6256c09172c77c6d53968302520517f4ddb115d10652559","sha512":"2b5f79e8c10eaf607f5db3a0e6fbbb016a4d355bab51a157f92d7dffb18ec6b1ff3e5eed31a93a1dd6f400832d3118498471a3500de8450ecd64e4116e99ed2f","ssdeep":"192:T/V0lWuZXR5glN36TbQcJv4c34wdUrDnIP3:zq9R5gwbQaBhePi3","tlshash":"d0d17cbb4ea581c8289d35336ce1e45628fc7fd531258a53f84c2352ac11ecd463e9ae","first_seen":"2023-08-03T01:38:46Z","last_seen":"2026-06-23T23:39:33.359744Z","times_seen":49,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":49,"connect":174,"send":0,"wait":179,"receive":0,"ssl":354},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/tabbar-jiaoyi-D3gYLmnm.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/tabbar-jiaoyi-D3gYLmnm.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tdy3SzmxwW2ZWPKuZmrwXY9ldxS5taUk2EzxTXYOU04c3U%2BalNL4FC96tSlqXEMnOwOeY9xgQuBEBcki055kDANZiV4uGBtQv8BjvCg5\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-3d\"\r\ncf-ray: 981958ae9db8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"65c35861aa5312e588db9179ed13bc17","sha1":"1caebab85c0a41aa08cdef8c04b0e9d5733bb3a7","sha256":"9c14a83e0fa6fa2a7efa49d83167e7cf7edbba6242b93f47248f2c0cff8df89d","sha512":"1772d7352a59185c8ea1439decd4757f5d7e7d80b600d9c785f7d6690698b23d4d65817f094335b09c60b0da291c46b5f7bc870cc896f4e24b509a3f6a2050b0","ssdeep":"","tlshash":"c4a00222041409f3212c6c85df71c5552682252471254256d82c4945a6729c1650f8a9","first_seen":"2025-08-29T07:24:57.829458Z","last_seen":"2026-03-24T11:52:53.399637Z","times_seen":30,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/noData-DtrM5XtM.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/noData-DtrM5XtM.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ufqIoZrHMCeDuZPQbPro1T61q5%2BNA5EltbA4DJvByH066GTs8SDit8L5xmHMTojo%2B3fv1A5b9hGON%2BrvFos4Dui6YIJPqrbg0Zm6OMg\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-36\"\r\ncf-ray: 981958ae9dbca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c335a4c9ce0b621c8a0e21afe3c633c5","sha1":"898cfd5219fd805f523841b35039b9f1985add32","sha256":"4ff29594afba17dc577a3b77f3fee0dedeb976f617ac3b36f3fd91c5aa2531ac","sha512":"1a1fa5ab6f9f18e2270dad15fbcf32ffa0cc370b02c8204eed937037977041982f63b59f9d3a10d0b27290b0caa73fa6f8433033bc41789041b301ed3df25bb5","ssdeep":"","tlshash":"cb90021d894408e00e6c64848b36c555548112586155475e80754b06e515450654a820","first_seen":"2025-05-31T23:25:34.397844Z","last_seen":"2026-03-24T11:52:53.401195Z","times_seen":33,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/jy3-CRO0cDvA.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/jy3-CRO0cDvA.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-b553\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bGlGdNhrSknU%2FeFuyTX%2BT01nI4juAHaucXkpcG3hiel16Qh7Mb63iVApu%2BxnUnyIRUrFHhvwIvYe03A0pYQC3G8UYcNEAwSpZrL0Fr0\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0ce16a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"741bb994b95f52cc189e6acf3330fa87","sha1":"51096a5eda2a7120d7673706643e1ff625d87688","sha256":"7f3bb82f12cd07f9b6e2bc4d7f9840bb5a78e0aa74b17f5eae7ff7e0b284336f","sha512":"46385e85185f9189279fc2a747b194f808de80eb693fed63ef96e0b2f4192161bf940b05f9b6e7647b516e406f0ac8a0fd2a40c785a6335f14fdf40c0ad6591e","ssdeep":"768:SjtjDZDhc3W3WON6SWIIp71/imObQSG+IQpZCq+Poi7SoBM:SjtXBuWGq6STQV/omrK","tlshash":"fe23f181661a3e4bd42e54aacfee387546d1fe894bdd3244a4eaf3b5281d5cc03cd227","first_seen":"2025-04-05T11:30:41.003177Z","last_seen":"2026-07-02T13:51:35.130895Z","times_seen":306,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/swiper-core-wWwytbo4.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/swiper-core-wWwytbo4.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-10a56\"\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r10IoSQvEK9Ca2c%2BG0TkVqahFRCOKHMg8KJqc2uhxm5BreFDqmryMC40IUPxLIYnQeLStdNbl9DuDKeqW9yQcV7Eem%2FrTYk6A47v08YU\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958ae8db3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8355c7931270cd2785c6a8045dbbbb5d","sha1":"ec3d98683bc3c7456cc313608ea50cdb53e90eda","sha256":"0c8b35124fbed3f5def7c337b549de2f486a88ba029802ca1b898146c5b8a393","sha512":"f736e399ab688de6c68a2ea7e1328ecd35b06565b1eb39868eb80c1a20321fb12b5be26a698f99ca44f7e12a3216350b8a0f71588f3145f4943ef9c283ada4ea","ssdeep":"1536:S0U2L4mvhKjHZBJnaw94FV4g/tEgLv108BlxvHn99ouo+:9U2AnatF2gu4T","tlshash":"12631889e124767682e32ada53a5c10173b54c54b849c4e8b1fc8c6b59be95c03feff8","first_seen":"2025-08-29T07:24:57.843788Z","last_seen":"2026-03-24T11:52:53.397481Z","times_seen":29,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"by-fsm.oss-ap-southeast-1.aliyuncs.com/42/849af3642b836d6ea980714f922c47.png?attname=binance-coin-bnb-logo-CD94CC6D31-seeklogo.com.png","fqdn":"by-fsm.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /42/849af3642b836d6ea980714f922c47.png?attname=binance-coin-bnb-logo-CD94CC6D31-seeklogo.com.png HTTP/1.1\r\nHost: by-fsm.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 6159\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD57377049483237D3235B\r\nAccept-Ranges: bytes\r\nETag: \"42849AF3642B836D6EA980714F922C47\"\r\nLast-Modified: Mon, 25 Mar 2024 09:10:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10760904333603857294\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QoSa82Qrg21uqYBxT5IsRw==\r\nx-oss-server-time: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"42849af3642b836d6ea980714f922c47","sha1":"49563553c103cd42cbdd71d4094628f89995cf77","sha256":"9a6d8f21fd1c923309a3c5a517323082064d59c1a73bfed5aae3bef4fe82a4f8","sha512":"9af1ce275e14adf5e294b02e267005fa6d79d75b17736abea9b59de3376fd1961ba99f0041ba969cd08f1fab06d7f6b38fb252480ec16e011d2beb77a7278740","ssdeep":"96:5gNFX7aRgvNmQPfu7FVUNN+sYXv9ezxUYRe2g77Sz4t/natzGjTR5BemqU/HhM4B:5grX7aRg3fRtDUq3g64na1OTpXE87","tlshash":"3fd16ebf9df648b2522f5c429014fb1834434ef326e9f454201fb0a5817d98a2f67ab9","first_seen":"2023-07-01T17:24:12Z","last_seen":"2026-03-06T11:58:58.383212Z","times_seen":45,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":49,"connect":174,"send":0,"wait":189,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aos@2.3.4/dist/aos.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:28.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/aos@2.3.4/dist/aos.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.3.4\r\nx-jsd-version-type: version\r\netag: W/\"3962-hQ7i5cn7phCEATfGxOkrWrvEKP4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\nage: 865657\r\nx-served-by: cache-fra-etou8220092-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14690,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-06T05:50:32.328633Z","times_seen":10333,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":60,"dns":1,"connect":27,"send":0,"wait":14,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/index-B9uX44Cf.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:28.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/index-B9uX44Cf.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-297ffd\"\r\nexpires: Fri, 19 Sep 2025 16:14:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5zgLwXGN35fhJpQh70gFouBnv2Fj6jP7vp1iRJp883cuhbpQhApYlLa1XUjM8TGHOEDgm6sFGFPujmlaXmsPk2v3n%2Fca%2B9eKsTVpni7\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958aacd4ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2719741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41108)","md5":"8521b642240159cb6961d67e1660ecf1","sha1":"50dd4d0c77d4a18b67b6421d66035f522886c78a","sha256":"b146e63484ca64d2c4c59ae7d489dc394bdf3ad463b58515d44f7d8de8d73622","sha512":"aa4279eebcbf714c2e7a1e2a7aa90c09dece56ce71ee06005ad15c9d73062046eb714e2277c7298b111bc56822a95a6761cf75996dbe39c862f48b385f58b936","ssdeep":"24576:NQ0A2x51S38Yeq8Do1GeUaQt5haW5NfLT2PGPT4KM:NQ0A2x51S38YelDZaQt5haW5NfLT2Pak","tlshash":"d1254ba47599b46d83bb85d8606b0001a33e1b98b409c8f0f1fecd693667d54d2abf7c","first_seen":"2025-09-12T08:34:36.697815Z","last_seen":"2025-09-19T13:15:26.983076Z","times_seen":4,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/socketStore-D-9dIOH_.js","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/socketStore-D-9dIOH_.js HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metamaskuk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7W3nUHwnMyabHnAEdPxTcE3RlkhF7PGrZYUPxxdG5eEVKaiO8%2FpagZ1C1d1Dj%2FTUZzwyIzPXYc7GMz3BW8vEy%2FBkrLJddbxBcla30l%2F\"}]}\r\nexpires: Fri, 19 Sep 2025 16:14:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 32385\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"68c2906c-35c\"\r\ncf-ray: 981958ae8db4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (779)","md5":"4d3c2890f1fa63560f7e73caced96d45","sha1":"25e9f2b2aaad2f07237f28d51bf1ccd32658abe0","sha256":"f1b53de3f375d1ee7028707cdd557fe6c5221b47eacbb47ec9304763e1532745","sha512":"d019100ee622522b4672af98390c54c6b4118e10f09b0f688c1b1383d8d5c2a5c58d57165ac9c6d5cb59f10360495526f5974096e791267f2e5fffece9765974","ssdeep":"","tlshash":"3d11ab1134f545f432fd5c800d09c442b32088702b10a1edbd9caee4e277aca61289bd","first_seen":"2025-09-12T08:34:36.630123Z","last_seen":"2025-09-19T13:15:26.974807Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/fileId_61-BUSIa0Ur.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/fileId_61-BUSIa0Ur.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-5534\"\r\nexpires: Sat, 11 Oct 2025 16:58:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 677762\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHtjhMIh9bhU1CdiMphxnVL%2Fev42lCakfhC74iL3pt5XWU76LapuPa1q0ZRrpUWD69j%2FL1%2BDMI%2BbzXR6uxKeZ12oyboeEol7iuH8wB3X\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b05e06a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"c98d7f39206dff58c17c5f21e60141ab","sha1":"61b547b6305ef855d89c759af5e2224daa0fbc36","sha256":"783742cb2bdc88d81f017b8ba8341aa071809dac1fa4d486722ac09ceb13e772","sha512":"46524e7ba65852f4bbbf6c7ddde3d1685e8e43980f0f1ef633fecb222b2150a2e29159488f61d169585d7f44055c4a134ce7082cee0c9f50c61b75e13b2b880c","ssdeep":"384:JAWr9/MhcosHwiPAuKH+kRwN4AsBMja1UWqPTJBEV/C58Ly1Cc21QM7IbkDvXCz:vrRMhcoRKAuKHHAsB2aGVzEhC5Iy1D2w","tlshash":"90a2f1c12f38e32bbc52b32ba61f5117435d4dd807d3faa85bec5485786ad408ea75b0","first_seen":"2024-10-04T11:22:09.915746Z","last_seen":"2026-05-23T23:53:56.034936Z","times_seen":59,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/jy-C0xZCJnx.png","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/jy-C0xZCJnx.png HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-10c0d\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8hD8kt3TgbamiTyS4Xi424HOwdcl73PlxXez0CicqUkwENeeI4XuDFM6xuJgb8KdYBU6bQ1xxlhBMC7zHSBQj5HEOa8Zw2Y6CngiSPu\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0be13a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 237, 8-bit/color RGBA, non-interlaced","md5":"4ad49cfde5871dd1c36aff9bb1a64057","sha1":"a074e0403c95a7cafe107ad0c887f700f56653ee","sha256":"76e96efc2ecef9caa06650ce8a53a76ce98b616ede9acddcf01d386b6e3f603a","sha512":"fec05c8cd7a0993a66fcf5d4325c38f761dbbe86af1739cbfc19676d251fa10382123bb88ca450dae30435e961e51ba4e4c0a3d95ea5ad196dbd835ee5f5eaaf","ssdeep":"1536:PvNdoQ4aANjPVG1W5Ty1YKZAI+TgQQMBlzuOjiIQh:3Ndfy/G1iy1Z8LlLCOjuh","tlshash":"55630290e9ec8364aa7705975088265e90b7abcf0c6ec86b51e8e3c581ffb10d4c6bd4","first_seen":"2025-04-05T11:30:41.062051Z","last_seen":"2026-07-02T13:51:35.146259Z","times_seen":314,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imge2024.oss-us-east-1.aliyuncs.com/202502/26155700-50073155021483074.png?attname=ethereum.png","fqdn":"imge2024.oss-us-east-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.30.236","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /202502/26155700-50073155021483074.png?attname=ethereum.png HTTP/1.1\r\nHost: imge2024.oss-us-east-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 19 Sep 2025 13:14:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 2780\r\nConnection: keep-alive\r\nx-oss-request-id: 68CD5737E748163830ED7601\r\nAccept-Ranges: bytes\r\nETag: \"856BFDB63DC0D6FAD6B92FC6A29719E1\"\r\nLast-Modified: Wed, 26 Feb 2025 07:57:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 126160206628445400\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hWv9tj3A1vrWuS/GopcZ4Q==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-06T02:16:02.52373Z","times_seen":23058,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":342,"dns":14,"connect":102,"send":0,"wait":116,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getLogData","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getLogData HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: 2a73bf12bf27183a6439d392bc2263b4\r\nContent-Length: 50\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUaHZ2R3hUhKGrH2vsZpn7mG4m3pwScG8HR%2BaTZidL%2FnBXHGQDIG9wCQCAFD3FkOo0%2FjtEKjsruwuCbMBLLtpWzBMfgsdx2zs%2BVXhAfU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b69e72a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91192,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e7a6cdcd2c5a98504a799569106aba9","sha1":"f86e008c7ebbc9072e859d7ee1cf8cba24407f62","sha256":"b3321bb1a1392ef2ed7db2e6daa8e32aaa6c420c8f602bb7f499eee158a1e9ad","sha512":"5c82692b99d08f1107c86d34c85e5e28582365a53a1cf28fc3a55364ff0fd6e3a7543a21e3aa9510c0bc7ccf002ba2ea7fa066af9b0d2fae289837a11bff649e","ssdeep":"1536:84JxwTLKvxxp/yOV9J7xEiThXLpxGVY/KaYaH1V5AxdYrunBGyRQjYx:/v0OxfFvx2aF1MnNx","tlshash":"e2932174beca9395ed788ceb17e3bcfa8d9333d61bcf9c81d589810658c2630621175a","first_seen":"2025-09-19T04:38:42.446574Z","last_seen":"2025-09-19T13:15:26.986393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aos@2.3.4/dist/aos.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:28.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/aos@2.3.4/dist/aos.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.3.4\r\nx-jsd-version-type: version\r\netag: W/\"65c5-BVfTdFS2f0LyyxAeV+UHD7EZNXA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 19 Sep 2025 13:14:28 GMT\r\nage: 865662\r\nx-served-by: cache-fra-etou8220020-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1609\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-06T05:50:32.357886Z","times_seen":42902,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":39,"dns":0,"connect":14,"send":0,"wait":14,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getLang","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:30.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getLang HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: 230aa2dcdb69a8f03b26c8c1e119cb00\r\nContent-Length: 22\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqy3VyES9y9DzRPmAOyUi1rFY35p310DE9GYa2GTZKA8ZAA9MEfB6EuROM89mZnGISWA6Wc45IY3XM0zkxumTlAsGR79NAJ4CNEbaiz3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b1ee27a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1393,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"925869f769848c0c590dedc3cf00cd4d","sha1":"ec5042cc4a552bc9bf35ed15c13a58826f1fcb2d","sha256":"fa9f907369b648dec9a682849345fff426967b9d6da6c7da1ec4d911debf9f0a","sha512":"eceec2193aaf74e128638a45c27dd15c6ce50a4d6dd2de612265955c151367eac26a09641123c2901e9a619c1d9cca34858e1e91e7230de927d2bc4b77a1ee92","ssdeep":"","tlshash":"3c2190890fc4492da489187cfdc3fba9f6d4707b5e94a9a8247acc05404a3ce02c29eb","first_seen":"2025-05-31T23:25:34.416205Z","last_seen":"2026-03-06T11:58:58.37175Z","times_seen":23,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/api/index/getLogData","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:31.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"POST /api/index/getLogData HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ne-token-me: \r\ne-auth-token: 0ab39dd8a280a27bf79f22bd255506c1\r\nContent-Length: 50\r\nOrigin: https://metamaskuk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-methods: POST\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yJ2kDS6m8PqaWOyrkRBEWW5VtqICKpE5d6GrC4b%2FZGmfLZ%2B9fQEzQoXs%2FzXPp3r%2FGJ5NdGJmKu%2B4qVMmrSf3Qog1UBcLtU2EeeSVqOg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958bbeef6a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82168,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"056d7504fc0f49aedde8bc70ab7264ef","sha1":"bbeeb24b68c5e30bd68fa0a4efee19e0b64b50ad","sha256":"6940cc5b18aa8a87f72eb3bd64e2f0775b0b101e0fa28f28072be7cab1547fc2","sha512":"4d793094da1f4091da8113f847742c5a83b56a52ff516c2a28bb657027b28b4a30b32a6ced1829a91c23b9a69123dc7c5caae47ec24455b528ab78cfe37ff0ca","ssdeep":"1536:HDb80WBebcZVJ5rAlgLvWASa8Lv5a8DzZ9vWsRU93q:jjW8cZJrzcv5LWsRX","tlshash":"0e83c975bec69395ed38cdeb17c3bcef4da333c60bcf9c82958a911658d1620620275a","first_seen":"2025-09-19T04:38:42.467753Z","last_seen":"2025-09-19T13:15:26.991275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskuk.com/assets/headerBg-CZNf4ToT.gif","fqdn":"metamaskuk.com","domain":"metamaskuk.com","tld":"com"},"ip":{"addr":"172.67.199.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskuk.com/","date":"2025-09-19T13:14:29.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskuk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 01:42:58 GMT","end":"Wed, 10 Dec 2025 02:41:38 GMT"},"fingerprint":{"sha1":"73:22:E1:89:84:3D:1C:33:C9:02:DC:73:52:21:3A:24:71:C4:83:C4","sha256":"6B:A9:BF:E4:AD:DE:44:BC:DE:C8:A3:02:E1:E5:A9:B7:EA:CF:84:B0:37:1E:F7:4B:E5:39:9E:6A:D4:33:E4:37"}}},"request":{"raw":"GET /assets/headerBg-CZNf4ToT.gif HTTP/1.1\r\nHost: metamaskuk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskuk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 13:14:29 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 11 Sep 2025 09:03:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2906c-5ebdb5\"\r\nexpires: Sun, 19 Oct 2025 04:14:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32385\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qAmXYAnHA4%2FEEM%2FbdsPTYAr6Ma9G0Imd5Prx4agjNjaalh27ki%2FoecyLid8RvV7XUzG3lin%2FR6qTI6bIywXAoulphla32gtzLzQ5yrJz\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981958b0ae0ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6208949,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 504 x 481","md5":"4b7942ff1cf728796dbda5ff75871784","sha1":"1d45908db3a78f18635da687e6d3743327bc0217","sha256":"ec6f367d42e72f321f6425b8ebb768fd381479ce78565e3150d7a0557bb1cdf0","sha512":"e083a992d7e8d9102abe76c03340d4cecc4397b3ab53a65a014c0df2add227af3d1cd01bfa4b4e79f8d4fec15a030dead7d5aacdab2e70a6f39d0a55113938b6","ssdeep":"24576:7qI7GlYQP7q+pwlD9uPR4oOdYpzo6st5LeMyQyhTDxDR5DR2V:7quKP7q+pE9upySG7uFx30V","tlshash":"b92523eea4d18881ed01327c165637417f96f8cc2aa1be37f2c03f16a94b96879f1752","first_seen":"2025-08-03T10:30:11.785832Z","last_seen":"2026-07-02T13:51:35.134275Z","times_seen":246,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"metamaskuk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}