{"report_id":"12b9d257-eb13-4c71-9ea8-6f4812702742","version":0,"status":"done","tags":[],"date":"2026-07-15T00:23:36Z","url":{"schema":"http","addr":"facebook.meweb.kz","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":0,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"final":{"url":{"schema":"https","addr":"facebook.meweb.kz/","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"title":"facebook","dom":{"size":1899,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1802), with no line terminators","md5":"0e1398998e40ff2ea98bcc799892a3be","sha1":"a7dd93f4398f7cd177b62a5992332bd6ede38690","sha256":"71848ac9e3bebdd06c3074c46ca01f9ba9abcd306486f472d7e7997ef36b3357","sha512":"5426b0c34348571ddb785939330822da381788def4efade80e9d9761a966178df8efcf5b271abc4857b701f5c389adc600bf5fedc09af070c8b05de2e2493fce","ssdeep":"","tlshash":"12412f650c1495ff92434da5f430bb0e78ca9e6cce3b9c00a5ac52fd6ac0e809a68504","dom_hash":"domhash72bc5613d8ff5847b04bf7819620c6bb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"facebook.meweb.kz","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":0,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T00:23:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"facebook.meweb.kz","ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2020-06-04","domain_rank":0,"first_seen":"2025-05-15T13:31:15.93219Z","last_seen":"2026-04-29T20:54:22.659028Z","alert_count":30,"request_count":6,"received_data":306035,"sent_data":2820,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"6282500ded9edf7bd882691b.mockapi.io","ip":{"addr":"13.248.244.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-02-05","domain_rank":0,"first_seen":"2025-05-15T13:31:15.930522Z","last_seen":"2026-04-29T20:54:23.094231Z","alert_count":0,"request_count":1,"received_data":916,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-07-13T15:17:33.924461Z","alert_count":0,"request_count":1,"received_data":903,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"facebook.meweb.kz/js/app.350ced4b.js","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2769148e5d51d9da42bbf7edcd4d20a","sha1":"39135b174ff6346f856d944e75c4d8f3a68a12be","sha256":"4ef50dcb2dc7ce6d34096b342d3a6b9073590b284f711d26dd99c6fe07970da4","sha512":"63f2708ae3e01d477cdd8f488bd0af49c8c2ead2bdb6a90f4faa3ddd994dadf4f7a64ac05c8efdf01db9c40cf87fdc00f9a799e781e6d9ee801fecdc2df76ba7","ssdeep":"384:BZW8fXPZC1CbyNN3R8zPW1dJLIKZe4McuHscNnCwFrz12L2:BZW0sR+IJL5YzBNCwb2a","tlshash":"4ed2c714a153e9fecd5f501134293635f0a92bf5a41ac08af73c8cea6bd8ca8561e77c","size":29133,"data":"","first_seen":"2024-09-19T19:48:48.331559Z","last_seen":"2026-07-15T10:01:31.728943Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/js/chunk-vendors.8d0ad95e.js","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e2f5492d3fa68a550156f6840f70096","sha1":"d4d9ab732c10a38da3c155f38499edc342535195","sha256":"9911fe7df3a39a5e78e08c07ec99b2dbc73dd03a9cc900446350fca2c99f4bca","sha512":"e152a22ca03e4947cf872e661597f23cc5e3e205d8ac932498f19ce30f23cbb594318344ded904ae13bc2d882f7b4ec20dd030a578f097cfb2409c6dfbd2c561","ssdeep":"1536:c5aQw6NP1tLVwTJtc23kTWV3UUJXjBtIW82b+ipQEhVVvt7oJIe:eaQJtLqTJtFD1XjHoK+N+rvt+Ie","tlshash":"5ee3c3cdb295b07117e720b041af150bf27ba958b80ac0e0f266e8e57cb954e9127f7d","size":154714,"data":"","first_seen":"2024-09-19T19:48:48.326053Z","last_seen":"2026-07-15T10:01:31.737979Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"map[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:ERR_BAD_REQUEST writable:true] config:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 sealed:false type:object] writable:true] message:map[configurable:true enumerable:true value:Request failed with status code 404 writable:true] name:map[configurable:true enumerable:true value:AxiosError writable:true] request:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj25 class:XMLHttpRequest extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] response:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 sealed:false type:object] writable:true]] ownPropertiesLength:6 safeGetterValues:map[stack:map[enumerable:false getterPrototypeLevel:2 getterValue: writable:true]]] sealed:false type:object]","filename":"https://facebook.meweb.kz/js/chunk-vendors.8d0ad95e.js","line_number":1,"column_number":87949}]},"http":[{"url":{"schema":"https","addr":"facebook.meweb.kz/","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T00:23:08.787Z","timestamp":1784074988787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:09 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 27 May 2022 16:49:34 GMT\r\netag: W/\"350-5e001174c0380\"\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":848,"size_decoded":625,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (848), with no line terminators","md5":"304a509ccfa0cb5451f842619276beda","sha1":"26ffac49bfd042e691df0a062054c1935e0dc4ad","sha256":"c00eb1527bb7a9417b49760a9eb3b34e6da3055284e577822756bf2eddf93952","sha512":"d0b75c2e7ed337ea4eb7cec5b3de6c3f5cdb6f01f57ce68350300768eeec1665e16a723515afea35826d1278212bf7464e481526ff568d038fec69cb99d5d314","ssdeep":"","tlshash":"5b01ab928c24d4ce87601e4afd76f71fdccaad488e259c907ab991bd05e0fc89a96844","first_seen":"2025-05-15T13:31:18.451024Z","last_seen":"2026-07-15T10:01:31.737117Z","times_seen":9,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":188,"connect":105,"send":0,"wait":115,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/js/chunk-vendors.8d0ad95e.js","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:09.671Z","timestamp":1784074989671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET /js/chunk-vendors.8d0ad95e.js HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 May 2022 16:49:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6291011e-25c5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154714,"size_decoded":50740,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"0e2f5492d3fa68a550156f6840f70096","sha1":"d4d9ab732c10a38da3c155f38499edc342535195","sha256":"9911fe7df3a39a5e78e08c07ec99b2dbc73dd03a9cc900446350fca2c99f4bca","sha512":"e152a22ca03e4947cf872e661597f23cc5e3e205d8ac932498f19ce30f23cbb594318344ded904ae13bc2d882f7b4ec20dd030a578f097cfb2409c6dfbd2c561","ssdeep":"1536:c5aQw6NP1tLVwTJtc23kTWV3UUJXjBtIW82b+ipQEhVVvt7oJIe:eaQJtLqTJtFD1XjHoK+N+rvt+Ie","tlshash":"5ee3c3cdb295b07117e720b041af150bf27ba958b80ac0e0f266e8e57cb954e9127f7d","first_seen":"2024-09-19T19:48:48.326053Z","last_seen":"2026-07-15T10:01:31.737979Z","times_seen":11,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/js/app.350ced4b.js","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:09.672Z","timestamp":1784074989672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET /js/app.350ced4b.js HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 May 2022 16:49:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6291011e-71cd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29133,"size_decoded":6161,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28336)","md5":"c2769148e5d51d9da42bbf7edcd4d20a","sha1":"39135b174ff6346f856d944e75c4d8f3a68a12be","sha256":"4ef50dcb2dc7ce6d34096b342d3a6b9073590b284f711d26dd99c6fe07970da4","sha512":"63f2708ae3e01d477cdd8f488bd0af49c8c2ead2bdb6a90f4faa3ddd994dadf4f7a64ac05c8efdf01db9c40cf87fdc00f9a799e781e6d9ee801fecdc2df76ba7","ssdeep":"384:BZW8fXPZC1CbyNN3R8zPW1dJLIKZe4McuHscNnCwFrz12L2:BZW0sR+IJL5YzBNCwb2a","tlshash":"4ed2c714a153e9fecd5f501134293635f0a92bf5a41ac08af73c8cea6bd8ca8561e77c","first_seen":"2024-09-19T19:48:48.331559Z","last_seen":"2026-07-15T10:01:31.728943Z","times_seen":11,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/css/chunk-vendors.ee91ea4f.css","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:09.674Z","timestamp":1784074989674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET /css/chunk-vendors.ee91ea4f.css HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 May 2022 16:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62910114-19997\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104855,"size_decoded":25151,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"f564e8d42fdfc944010fb4ba164585c0","sha1":"2f29a7d1c9f7f45ae8e6b0ee91de80eacbc127d4","sha256":"d369024e0015a40834b494f2a6a11544c741e7131d135f25b99442dc56a5ca78","sha512":"ef337b1dc65463eac4ac456e9497ee4bd5a151cbf4da11a47c18e9dfb4f5109134fcc9e0bd3ae92fec6a4eec57bb0ad9ae369b1d192886cf3b7277c5d976420f","ssdeep":"1536:mkMVM6MVMkMVM9MVMNMVMispoudL+P8Wcn0Fwib3ePnUHsE+hmDQHva:cudL25cn0FfePnUME+hmDR","tlshash":"6ca3b8f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822c6f7a","first_seen":"2024-09-19T19:48:48.31583Z","last_seen":"2026-07-15T10:01:31.729781Z","times_seen":10,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/css/app.11e254e1.css","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:09.676Z","timestamp":1784074989676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET /css/app.11e254e1.css HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 May 2022 16:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62910114-2769\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10089,"size_decoded":3083,"mime_type":"text/css","magic":"ASCII text, with very long lines (10024)","md5":"69d514681b2660167a718206c55b19c8","sha1":"e4f09ef5df5e6bb10437343fedd2da95d6624f85","sha256":"1efc079e9988642963b7f9893f9c471e39d82d540322da8cc07082f1299ec92f","sha512":"f1632dfadf9b6ce4230db3d13ba8c450a5d76bd612c5d60dd076b430055433ab45d07cf1e5a24ff545c3e82c173565ebb633bb1e8f3ac1f58821924794ddc08c","ssdeep":"96:MSOXw/Zmjrf8mCKy9eE7JjOY/ATT4LCc/p8clXOsMOZtmcnz5Sniq9n07YwvilOF:M/XwVn7JyYnusfx7pCoaZzCT0Jkgta","tlshash":"9922664f6e25053eac6384ead5a0b9ac7119b0c4ee3ee1e7e9836901dec67f75c62104","first_seen":"2024-09-19T19:48:48.320075Z","last_seen":"2026-07-15T10:01:31.734616Z","times_seen":11,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6282500ded9edf7bd882691b.mockapi.io/users","fqdn":"6282500ded9edf7bd882691b.mockapi.io","domain":"mockapi.io","tld":"io"},"ip":{"addr":"13.248.244.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:10.277Z","timestamp":1784074990277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mockapi.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 21:05:37 GMT","end":"Sat, 12 Sep 2026 21:05:36 GMT"},"fingerprint":{"sha1":"B3:34:D6:D7:C1:4F:EF:DC:10:92:09:ED:C6:4B:04:58:9F:AA:8F:7D","sha256":"C1:29:86:DE:97:B2:AB:DD:6C:4F:DC:EC:1E:AD:62:C4:B9:A2:81:71:6F:E1:19:A1:85:55:5B:B5:3F:F0:AA:F0"}}},"request":{"raw":"GET /users HTTP/1.1\r\nHost: 6282500ded9edf7bd882691b.mockapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://facebook.meweb.kz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-headers: X-Requested-With,Content-Type,Cache-Control,access_token\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Jul 2026 00:23:31 GMT\r\netag: \"-1860455612\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=qbnGcK6xIhbP4dp3aFfzkYw8vZjRipxdqIEB9ApInVA%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1784075011\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=qbnGcK6xIhbP4dp3aFfzkYw8vZjRipxdqIEB9ApInVA%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1784075011\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\nx-powered-by: Express\r\ncontent-length: 10\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10,"size_decoded":916,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"008f9b95f3cc15d57768e083d85052e4","sha1":"5235aa736a81b5ada9dffda6b6adadb3e77ed4dd","sha256":"0df5d5264bffb7f1586610b88434578b844e1c4746c9b7ea150271a9e143d5e8","sha512":"e80a9a2c6efa34ba79c78b52db3efa26a0631060b7ca8e3ccdb86570c8abaa73c0f29e7aa462cd03d90175ede639531937a55da609affafc027cb85173724970","ssdeep":"","tlshash":"f050000c3000030c0000003000c00030000c03000c0000300000c00c000030000000cc","first_seen":"2023-04-09T13:34:14Z","last_seen":"2026-07-15T10:01:31.735248Z","times_seen":25,"resource_available":false,"data":null}},"time_used":20940,"timings":{"blocked":-1,"dns":151,"connect":103,"send":0,"wait":105,"receive":0,"ssl":20581},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/8/89/Facebook_Logo_%282019%29.svg/1200px-Facebook_Logo_%282019%29.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:10.282Z","timestamp":1784074990282,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /wikipedia/commons/thumb/8/89/Facebook_Logo_%282019%29.svg/1200px-Facebook_Logo_%282019%29.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ndate: Wed, 15 Jul 2026 00:23:10 GMT\r\nserver: Varnish\r\nx-cache: cp3077 int\r\nx-cache-status: int-front\r\nserver-timing: cache;desc=\"int-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2010\r\nx-request-id: 6b291f26-7d45-4216-b83b-b7b62608ecfc\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook.meweb.kz/favicon.ico","fqdn":"facebook.meweb.kz","domain":"meweb.kz","tld":"kz"},"ip":{"addr":"195.210.46.27","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook.meweb.kz/","date":"2026-07-15T00:23:10.468Z","timestamp":1784074990468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.meweb.kz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:00:41 GMT","end":"Tue, 06 Oct 2026 14:00:40 GMT"},"fingerprint":{"sha1":"9C:86:46:E5:C0:A1:4A:61:0A:00:EB:F0:59:A3:91:66:D2:BB:A6:48","sha256":"9C:FD:15:9F:8B:5C:38:3E:22:6F:FA:C8:94:F8:2B:6B:45:05:3E:DA:CC:DD:BB:6E:13:8E:0E:17:1F:64:D8:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: facebook.meweb.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.meweb.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 00:23:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Fri, 27 May 2022 16:49:34 GMT\r\netag: \"6291011e-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4286,"size_decoded":4645,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"1ba2ae710d927f13d483fd5d1e548c9b","sha1":"c0605efed936ee2600284e6480521d06fa64f872","sha256":"db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445","sha512":"f933cd352eaba92f509b3863353ddfefadfada26a4152ecdc4727d450bbf35e7b10fb3038fe8db340d5c63d74e608c1560ec84d0f6ffc8ccd940c9e0d7533544","ssdeep":"48:i3H5R5hLOR4kt38PduMoglJrd6qTrp9hweFC0+6Ga:ipHFUs4MLBvuyCda","tlshash":"ee9175df61c388d9c1b1977f78c449a14f6fd951ba28351f55cf30622e5d75818c1c46","first_seen":"2023-04-18T17:42:03Z","last_seen":"2026-07-22T14:00:56.140045Z","times_seen":6449,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"facebook.meweb.kz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"facebook.meweb.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}