{"report_id":"4b35887f-0e78-4b73-8b1e-f7bdcfc75336","version":6,"status":"done","tags":[],"date":"2025-12-26T05:53:43Z","url":{"schema":"http","addr":"www.metromsk.com.metroxp.com/","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":0,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"www.metromsk.com.metroxp.com/","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"title":"MetroMSK - Your Online Companion","dom":{"size":74775,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8870)","md5":"654a2b12e3c209fa5122da702b978beb","sha1":"067f466174fd865a45c06cdfabd73a9e146a9fdb","sha256":"4eaaba86db5cda9d3fcc2f81ba3c09ffb7524a9d2559f4ffbff8359f39cd34d6","sha512":"97992f651f8c43360991eb2eaf1b419f9d6a45f83486d3459ba271b3c4dce643dd77308778834a4f32d8ff23ae4a33bdcf738170708a9773e6569ff28ae69dbe","ssdeep":"1536:fGypiG97wV/7OqX7GXTqXDyXT88XzNXVtXx2TpXC0XIqX/WZqJyunXRLR+DqsRwi:f/dEV/gX71w6EziIlK","tlshash":"a273c7b354e81427172683d582a0360dbad7ce2bcb0a4e96b1ff5b846f42dd7593720e","dom_hash":"domhash6d4481afbea5356e2961856bae8a7df7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.metromsk.com.metroxp.com/","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":0,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-30T05:53:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.metromsk.com.metroxp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.metromsk.com.metroxp.com","ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"domain_registered":"2021-05-17","domain_rank":0,"first_seen":"2025-12-26T05:53:44.168279Z","last_seen":"2025-12-26T05:53:44.168279Z","alert_count":2,"request_count":2,"received_data":85622,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Candid Themes Fairy:1.4.2","description":"Fairy is a free and minimal WordPress blog theme by Candid Themes.","website":"https://www.candidthemes.com/themes/fairy","common_platform_enumeration":"","icon":"Candid Themes.png","categories":["WordPress themes"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":2,"received_data":9365,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metromsk.com","ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"domain_registered":"2021-03-31","domain_rank":3649379,"first_seen":"2017-06-30T21:36:19Z","last_seen":"2025-10-23T03:28:40.7231Z","alert_count":21,"request_count":21,"received_data":1982230,"sent_data":10459,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":4,"received_data":82524,"sent_data":2188,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","size":24138,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-04T06:21:54.155405Z","times_seen":65255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metromsk.com.metroxp.com/","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"530ed3e23f1b8bdaa0d53dd5abfc6053","sha1":"28ded7031351549824d2f0cd6938bf22bab99a5c","sha256":"4c54a958b2e6d92303595c81456d1c35fc86b68ba26fd1ad9cda90ef09c41b7e","sha512":"1c689dea2ee728e9374ad10ac50325c18942c86eaad16f3fb1be88e7af03cbb763dfb36ef3633a723bfe038cbec582238e80ccbf8ed65529560490a8c468a254","ssdeep":"","tlshash":"1a11af14befbd4997915745867fe5024cf726f0381eec450b444fea1cf98906487a8d5","size":1058,"data":"","first_seen":"2025-12-26T05:53:50.652434Z","last_seen":"2025-12-26T05:53:50.652434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/js/navigation.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"422550ad2e386a63a4dea59068a99ae4","sha1":"29a79d8c3424fbb0e9bf9d5741c4dd575728efc3","sha256":"01d7c9a6f7c2b8c9290aba44c16c812337398880d14cfcbbb402fd7b153661b1","sha512":"da38dc1907c5e0cf883b208886d68d6a8cef535ecadaffb515a42fb32e40651e711d34071a10c1f8cb7467c582b8c5ce5b305d29e30cc11b7a599fdf7961b2ce","ssdeep":"","tlshash":"f85102da368d327f86ca338571be74497e3cd072824a693678f4d544286456447bfdc8","size":3049,"data":"","first_seen":"2023-03-08T08:16:19Z","last_seen":"2026-04-02T18:56:53.609053Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b2f641685aec0c8ddb6bceb1ad07dab","sha1":"6c353bd95eae47a22f335d83e0274314abfd6c86","sha256":"e86ffa02cfe1636942e6ceab45404985d398e515dcf010c0e9a15bdfc0f4d6be","sha512":"0d2f7c1e6be62ba0870af3117aa0f889e5bf4f7d67646ec9a0f0d076cddaaeba4f5c5a4a97d0a7b6c0150712b508849826607e4c0b44b514f3bde54e4c2463d9","ssdeep":"","tlshash":"4671869ae77638dbb2f900f2697a0d47eb614835d6c8d438c9bea3141cb5893c274b46","size":3721,"data":"","first_seen":"2025-12-26T05:53:50.653302Z","last_seen":"2025-12-26T05:53:50.653302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"db662f1499e90a76fd4de2fbc87250b3","sha1":"def1bf16e5ddfddd29e53546627b5cd6f3915de6","sha256":"6596a1e2c00a9382621eecdd04431e99c4638499a25fe64389d690a05d838a15","sha512":"a2377533ef7da176f255cd828e60f693e5ebc7bdf1bb64d312aa84d52efe012c562bb58fb3154180851189ca84dc5f8227c6fd778423eda3c4aac3cef27d721f","ssdeep":"1536:sOBYyVSEDRTtwY7Q5k/HVqg8dvZMuYQaVQXAWE:sOBYyVZDRTtwY7Q5k/HVqg8dBMuYkE","tlshash":"cb93f08b5552131688b333b9ae56c12cf7bb91374101969dbcdc4289aff44148beafec","size":91966,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-03T19:57:46.065409Z","times_seen":846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T06:44:54.725273Z","times_seen":131153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T06:45:53.422963Z","times_seen":684722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T06:45:53.446985Z","times_seen":638196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-04T06:42:58.743196Z","times_seen":147395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9d6db398f5a42f8fa7ebcfe415d703d","sha1":"3aa53c6c88cf96d3fb35e80f136d3fc8ef10a1d6","sha256":"6b10604397cb4df6fe4c4609ae563859e41fd0977ecdc5819e71f805d7e6cc0e","sha512":"3bbc6ae8736e9c2745926df71a69b923039f308a75b69a98ef884842cb45ab239bf259a5a6d508916188c48f02958ade79dd33e1f5f2f1740f03fc288de551cf","ssdeep":"96:5uBLCPqAEz+by1t+0SeqHVFeo0IBaJ4eq2BR05IF21Yd:yCPqAH0SewFeo0YaqeJRyIFWG","tlshash":"a0e15289f0a263a208bbb37afb3f9504e77a102b81015361bcbc995d2f709206195fdc","size":7404,"data":"","first_seen":"2024-04-23T23:55:00Z","last_seen":"2026-04-02T18:56:53.611038Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd33e5698dfd798cbe4006e4e408735","sha1":"f63e7779c8dbf05d95049a56c76707358e0b5336","sha256":"9aa067574acf4c7b8d7cef4f104ea80eeb6bd8af4d1e142015d029779dcdae3e","sha512":"762e5d8074c564e2b85926f437b2beb328b47be0869524b79eabd150d5b6183d6c7dccdcbc1ab4d20c8b9b7496b00e19ef78820610b878ca4b63291902ddb55b","ssdeep":"192:9kCOvH+eyDRNpVoU1Q3EioCggxjnNgi/XlDHTqPq:9yvkrQ0XCgWjnNgiNDHTqq","tlshash":"a372de9a2a4222305877b39ecbdfd02ce73a852752c6d1243e5e87c45fb12349592fed","size":16695,"data":"","first_seen":"2023-03-29T22:08:17Z","last_seen":"2026-04-02T18:56:53.610202Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Nov 2023 10:58:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T06:45:53.422963Z","times_seen":684722,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":267,"connect":148,"send":0,"wait":459,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/uploads/2023/05/Mental-Health-1536x1024.jpg","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/Mental-Health-1536x1024.jpg HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 May 2023 11:19:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153976\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 1536x1024, components 3","md5":"19198afbe2bb37318226d408437a6e9b","sha1":"e075bfbc7a9726a22b113a18e4a5f969712c0c88","sha256":"01ad455b1f28888ab3589bea6f3b0a3643c64b55397b6261558047662259a2f8","sha512":"29de978d3f86928cb38e2be31dc2f63ee0bdc252b508c36b8544fae8ae6c89aaaafa4c0934281db8c43afb19d6d4b21b2765545cde05c610b0a04ec30de809a1","ssdeep":"3072:UftotBsCi2pjMVxp0xduemezr3427BoyQ3j54HgGM85GL8H+mApLg:UmtE2J6SxmeHHtQ314HgGMzLS","tlshash":"73e3011c1c850745a04a78b4ba9d80c5e0e74476bcc36f47fe79a4a1b301997aedcefa","first_seen":"2025-12-26T05:53:50.634456Z","last_seen":"2025-12-26T05:53:50.634456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":614,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3411\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16695,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6cd33e5698dfd798cbe4006e4e408735","sha1":"f63e7779c8dbf05d95049a56c76707358e0b5336","sha256":"9aa067574acf4c7b8d7cef4f104ea80eeb6bd8af4d1e142015d029779dcdae3e","sha512":"762e5d8074c564e2b85926f437b2beb328b47be0869524b79eabd150d5b6183d6c7dccdcbc1ab4d20c8b9b7496b00e19ef78820610b878ca4b63291902ddb55b","ssdeep":"192:9kCOvH+eyDRNpVoU1Q3EioCggxjnNgi/XlDHTqPq:9yvkrQ0XCgWjnNgiNDHTqq","tlshash":"a372de9a2a4222305877b39ecbdfd02ce73a852752c6d1243e5e87c45fb12349592fed","first_seen":"2023-03-29T22:08:17Z","last_seen":"2026-04-02T18:56:53.610202Z","times_seen":169,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTzGLRrX.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTzGLRrX.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 12:44:24 GMT\r\nexpires: Fri, 25 Dec 2026 12:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61738\r\nlast-modified: Mon, 08 Sep 2025 18:09:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30504, version 1.0","md5":"c6535f5814cc21d891d95d93292e7137","sha1":"45614d70605872fe0607a8498e43c9a60fdab437","sha256":"1d2af207e9951093d41a0f6b459cd95b450f42649678ef0fb83a43849ecd7ffd","sha512":"7e4c4fecf447c8d2bc93884dcc45aa46a07511d2fc3e4be671b8bd42a58ef7f916243a7f19265523d4dfc16e0294c43d600f2cd8788b4dd3aba5fe2aa0126f17","ssdeep":"768:0USLVxjJTntrUVZae/6CyREkwR/WyVsd2YJB:0jxxlTntrUWmK6/WHdFD","tlshash":"d8d2e19cbe1a8652c3d79cb2888e588befa5c4106f1ff687a757972485b1d03007ca29","first_seen":"2025-09-10T18:05:13.681056Z","last_seen":"2026-04-02T02:57:37.530816Z","times_seen":332,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metromsk.com.metroxp.com/","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T05:53:20.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.metromsk.com.metroxp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://metromsk.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\netag: \"153259-1766728401;br\"\r\nx-litespeed-cache: miss\r\ncontent-length: 13386\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Candid Themes Fairy:1.4.2","description":"Fairy is a free and minimal WordPress blog theme by Candid Themes.","website":"https://www.candidthemes.com/themes/fairy","common_platform_enumeration":"","icon":"Candid Themes.png","categories":["WordPress themes"]}],"data":{"size":74544,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8870), with CRLF, LF line terminators","md5":"08d2eb33d6d19aaed463586c16da481e","sha1":"0f741c8ae89afe3798674ded5ee25dc81be07401","sha256":"f51819abe575cac1f184a77b5724bdfa9add4a95d04f7ee6105e855b92b8ff0c","sha512":"94934c0e5effc71e664fccc08c1a473bd5ca83103b158fccf1566a000111947be8c86e9af8592b02d89c31806367af0372307c295f7583b23af791416b7beb17","ssdeep":"1536:MVyp6GdjYRjHXFlX7FXnZXhurXbnXzAXrC0pXczXwPXnkZaVuKrLl/di7sdw6Ez2:MQFcR1/FVw6EziIlE","tlshash":"4c73b7b358d81437173783d586603a0cfb978e2bcb0a4a95b1ff6b496f51d921a3720e","first_seen":"2025-12-26T05:53:50.63658Z","last_seen":"2025-12-26T05:53:50.63658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1475,"timings":{"blocked":579,"dns":266,"connect":153,"send":0,"wait":316,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.metromsk.com.metroxp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Aug 2023 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T06:45:53.446985Z","times_seen":638196,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14940\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"db662f1499e90a76fd4de2fbc87250b3","sha1":"def1bf16e5ddfddd29e53546627b5cd6f3915de6","sha256":"6596a1e2c00a9382621eecdd04431e99c4638499a25fe64389d690a05d838a15","sha512":"a2377533ef7da176f255cd828e60f693e5ebc7bdf1bb64d312aa84d52efe012c562bb58fb3154180851189ca84dc5f8227c6fd778423eda3c4aac3cef27d721f","ssdeep":"1536:sOBYyVSEDRTtwY7Q5k/HVqg8dvZMuYQaVQXAWE:sOBYyVZDRTtwY7Q5k/HVqg8dBMuYkE","tlshash":"cb93f08b5552131688b333b9ae56c12cf7bb91374101969dbcdc4289aff44148beafec","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-03T19:57:46.065409Z","times_seen":846,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 10:02:38 GMT\r\nexpires: Fri, 25 Dec 2026 10:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 71444\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-04-04T06:31:24.87467Z","times_seen":6053,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/uploads/2023/09/laundry.jpeg","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/laundry.jpeg HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 Sep 2023 10:23:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46265\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x341, components 3","md5":"abea9a50e9bea845a724c7b71b3f55e6","sha1":"41466490f2cb66ad748b7ef82047bcaab6af4b01","sha256":"8fb326979e9474d4e10913b1b3e423d03f8a4302113ccbfc6dad7b283c7030b7","sha512":"a85e880750e265852e22d49d90422ca86bf6553d645b2def731cdb98c465276554516c9c94dc7f8b9b90cf3e78d418901a8234e5257d78f2e598b80c22e7f79a","ssdeep":"768:CH/PqLc8I2CoRlUrn2zz7FGp8bhM0yeMNiR8Hyp/NSAZs6nCTBWqGPbJpOGN:e/V2CoRlI2zz7Fnly9H2/JsuCTCn","tlshash":"812301f82bb848a3f61a7a341d931b52fd22336d6542507cbbe41360ffd61142c0eea9","first_seen":"2025-12-26T05:53:50.639374Z","last_seen":"2025-12-26T05:53:50.639374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 773\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3349,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"bb4dfbdde8f2a8d4018c1f0293a03483","sha1":"48124e11e67a0721e4f080d170a111274b44a237","sha256":"597978bca0f97e5bb3f70452c24f8a0c93db7f7229433c2a54706b85cdd39aa6","sha512":"c91dc65eb322dc3ea1d06453cf612807afa99c61b02e95ac2ad1a2bceca62fa99b0f56e10e52267096f2451b00edf07dd4e482aed26e8beebbdc79308f6e9bb9","ssdeep":"","tlshash":"d86191d89256e1d7563388802f930714fbc770531a110eacfb5553894ffe0a89bd5b9d","first_seen":"2023-04-05T23:01:10Z","last_seen":"2026-04-04T05:20:00.980389Z","times_seen":3310,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/js/navigation.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/js/navigation.js?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 988\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"422550ad2e386a63a4dea59068a99ae4","sha1":"29a79d8c3424fbb0e9bf9d5741c4dd575728efc3","sha256":"01d7c9a6f7c2b8c9290aba44c16c812337398880d14cfcbbb402fd7b153661b1","sha512":"da38dc1907c5e0cf883b208886d68d6a8cef535ecadaffb515a42fb32e40651e711d34071a10c1f8cb7467c582b8c5ce5b305d29e30cc11b7a599fdf7961b2ce","ssdeep":"","tlshash":"f85102da368d327f86ca338571be74497e3cd072824a693678f4d544286456447bfdc8","first_seen":"2023-03-08T08:16:19Z","last_seen":"2026-04-02T18:56:53.609053Z","times_seen":144,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Nov 2023 10:58:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1687\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-04T06:42:58.743196Z","times_seen":147395,"resource_available":true,"data":null}},"time_used":859,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Jun 2020 00:23:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7117\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-04T06:21:54.155405Z","times_seen":65255,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1648\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c9d6db398f5a42f8fa7ebcfe415d703d","sha1":"3aa53c6c88cf96d3fb35e80f136d3fc8ef10a1d6","sha256":"6b10604397cb4df6fe4c4609ae563859e41fd0977ecdc5819e71f805d7e6cc0e","sha512":"3bbc6ae8736e9c2745926df71a69b923039f308a75b69a98ef884842cb45ab239bf259a5a6d508916188c48f02958ade79dd33e1f5f2f1740f03fc288de551cf","ssdeep":"96:5uBLCPqAEz+by1t+0SeqHVFeo0IBaJ4eq2BR05IF21Yd:yCPqAH0SewFeo0YaqeJRyIFWG","tlshash":"a0e15289f0a263a208bbb37afb3f9504e77a102b81015361bcbc995d2f709206195fdc","first_seen":"2024-04-23T23:55:00Z","last_seen":"2026-04-02T18:56:53.611038Z","times_seen":98,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 20 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 514244\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T06:46:33.140612Z","times_seen":203534,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":159,"dns":2,"connect":7,"send":0,"wait":8,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 05:52:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14921\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-04-04T05:52:29.68772Z","times_seen":20745,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":155,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3A400%2C500%2C600%2C700\u0026ver=6.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Poppins%3A400%2C500%2C600%2C700\u0026ver=6.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 26 Dec 2025 05:53:21 GMT\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e7d5447d329433ac520959278202b0aa","sha1":"7df6cef4d85d94637f46814cb440bde09fe64b5e","sha256":"b70200f61146a9df3194e0975661cd1c7f92b38260f3e717ba087f765e5eef1b","sha512":"2469bdb048b22e2450a278298086d4a0a79488d922c18c069ee92b93435113ad66e4fce9d2a2f461ad2f2bc57e182389fc9f5019b2ac9cb076d1a98d6b0a537a","ssdeep":"96:SOLnOLCJc+ukOLuN3Og3OgvJc+ukOgON3OxTcOxTUJc+ukOxTrN3OCvOCnJc+ukt:3CKSe1rV3HwwVzzbZ","tlshash":"7b918bd2087ae41467931cc222ce7d36ef0ea244b454e5746bfe0c9cada7c69537272d","first_seen":"2025-09-18T17:41:31.889502Z","last_seen":"2026-04-03T22:52:20.370691Z","times_seen":1643,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":51,"dns":0,"connect":10,"send":0,"wait":19,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.ttf?v=4.7.0","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.ttf?v=4.7.0 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metromsk.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:22 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 95744\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":165548,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 24 names, Macintosh","md5":"b06871f281fee6b241d60582ae9369b9","sha1":"13b1eab65a983c7a73bc7997c479d66943f7c6cb","sha256":"aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8","sha512":"9ffb91e68c975172848b4bba25284678cc2c6eb4fb2d42000aa871c36656c4cebc28bf83c94df9afdfbf2407c01fe6b554c660b9b5c11af27c35acadfe6136ac","ssdeep":"3072:3bhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:3enD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I","tlshash":"5df38d3ea7face7ef05653bc8c1731920ab65e00f72ad587f78df866742a040456468e","first_seen":"2023-04-05T07:45:03Z","last_seen":"2026-04-04T05:23:09.820269Z","times_seen":4135,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/style.css?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/style.css?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16841\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104752,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1155), with CRLF line terminators","md5":"d92c8d400717540980be7dcf6943a9f9","sha1":"9bb2beba3b05164ba00c24502d040eb61fce4693","sha256":"17aa3f396ffe9cef4e7e86e5aebac31f58e383326c6237381e223b22aa9690b0","sha512":"cd4beb2b3b0cbf061179641e2f5e97d308a86b23e1d502cc076d12230989b87d1cf2598705aa0632169bbad0d6ee1bde17d13378ad1021ee07db7719de821cec","ssdeep":"1536:QHwoBgqD6CtK+isQCcKUNT9wNdnkw2dkKLM:ZCtKrWukKLM","tlshash":"f5a3c6889f0225855373c774eba5a408ff55013bdb4615f9f8f0910a9bc6ba886bdecc","first_seen":"2024-09-19T22:10:41.011263Z","last_seen":"2026-03-22T08:26:01.985306Z","times_seen":79,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":267,"connect":153,"send":0,"wait":308,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metromsk.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:22 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-04T06:44:35.794562Z","times_seen":410205,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6662\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837), with CRLF line terminators","md5":"a0e784c4ca94c271b0338dfb02055be6","sha1":"88af80502c44cd52ca81ffe7dc7276b7eccb06cf","sha256":"820e169ce24824066d9973fd4b6561aae9dcd6dbef6435da905d5a1d6482997c","sha512":"97149632c15eb33690273abfa78636ad0471999363e11bf59ca61a4de32444e6f299db3b80d52b2e9437c645ec235fa8d3b8c20dcc350dbb9e175f12b3849a64","ssdeep":"384:/Hu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:/wlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"3dd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T11:31:05Z","last_seen":"2026-04-04T06:29:54.436777Z","times_seen":15082,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/uploads/2023/06/room.png","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/room.png HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Jun 2023 00:00:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 836412\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 941 x 750, 8-bit/color RGBA, non-interlaced","md5":"bc4afceb84119901d74300c715d1b34e","sha1":"c9fe29dec6c9ccce76e35f5cc0ad6075494337ef","sha256":"a5bddb14178c676731de8106943f457bd1f0bd3b00dcca5c928c88027ca7e011","sha512":"e98b2e76a691c648dbae147ac82d9fab0843909057fd0ef9287a1e02a1810d3bedc836d7eb866d1114da497a7a852532a0f1267540a26580af465b3cd6803beb","ssdeep":"24576:/wEysLgmm0x8G9qVzixJPl5utc7GXfVF15JXjOTRH:/isUmm1G9yYPWtcWVL3X4H","tlshash":"19052304e7cc4c2976ea0a76dad242b44777064320069d9fae2dd23d9f4e7c877b0e69","first_seen":"2025-12-26T05:53:50.646949Z","last_seen":"2025-12-26T05:53:50.646949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1343,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":614,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/uploads/2023/03/credit-score.jpg","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/credit-score.jpg HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 06 Mar 2023 05:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64617\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64617,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 1200x628, components 3","md5":"89f38754823ff09530ca5785e616e788","sha1":"0c075f05bed837cbad677811b5eccacd0f24c280","sha256":"296204d43b2c4bfa52b05a5e20bbbcd273fcdfb58ae5b8a687493aad721fea84","sha512":"90c924c1ca3a302080312fbde7a93b1e3333267e5bdf17846c03d49f65bfc9f9fba109adcbf666806868d18abd4e261b042c1e1d260933047f5cddfe628540e5","ssdeep":"1536:JBfp+jzvfbiE/3DxgSTuGQnugfnhBAO0k+cyT52ETPLYR:azvfG0TTiNV7+l1Tg","tlshash":"d15301235c5302c29116f9b46c8d19dcc76a16a82f2131fb3ddfd696eba4804ac8a1df","first_seen":"2025-12-26T05:53:50.647856Z","last_seen":"2025-12-26T05:53:50.647856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":614,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 24 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 122224\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-04T06:46:33.152289Z","times_seen":203213,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":77,"dns":2,"connect":20,"send":0,"wait":8,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 05:52:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T06:44:54.725273Z","times_seen":131153,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff?v=4.7.0","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.metromsk.com.metroxp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metromsk.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:22 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98024\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98024,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98024, version 4.7","md5":"fee66e712a8a08eef5805a46892932ad","sha1":"28b782240b3e76db824e12c02754a9731a167527","sha256":"ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07","sha512":"9c776dea55a01fd854ea23b3463d9ac716077d406ecbe8ed0c9b6120ff7e60357f0521ab3e3bf9d4e17ca2c44a5d63ee58a4e7a37a3d3f26415a98d11c99e04f","ssdeep":"1536:Te9lM9ITKMpPtandzpLwETpNfdFj2yExmni83X3t4MCWzSBE2RM5RgUAkzm7zl+b:VWKQta9pBNT1n3X3BnmBI5Wx7zlvKfF","tlshash":"c2a312845ab5133bf704b97043bf87704a5a711ebeadad7158c3618d7faa39834006ee","first_seen":"2023-04-05T07:45:03Z","last_seen":"2026-04-04T06:29:59.559407Z","times_seen":26927,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.metromsk.com.metroxp.com/favicon.ico","fqdn":"www.metromsk.com.metroxp.com","domain":"metroxp.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:22.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.metromsk.com.metroxp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 05:53:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10407,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"17ea5a27229d58fc8da281fa3795cbc6","sha1":"bd830809adcf8bbc64d0fcfebaee256e9ac7c8e5","sha256":"76d8e8b0923bd2703ec47a4409bf256ef645a7a44377eee932794bd9c393d601","sha512":"78ebb1a06ccd045a249454b32be023050857cd6ce7128363418e98af1f7f2f9110c86782cb57107c8d0742281c2ebf507b067692719ce34d9932828f4c15f32a","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93JB:FVGaRF8I8UCP3","tlshash":"7422b6a71ae7000b744761b967ba3201ab68e543d11fcda07f4db3e4cf865818c93b4e","first_seen":"2025-12-26T05:53:50.650476Z","last_seen":"2025-12-26T05:53:50.650476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.metromsk.com.metroxp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Muli%3A400%2C300italic%2C300\u0026ver=6.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Muli%3A400%2C300italic%2C300\u0026ver=6.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 26 Dec 2025 05:53:21 GMT\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7fd274cd07218112866dee05cd233f49","sha1":"7b3225529da15d75d70ed883e6794017669abd36","sha256":"b57e81df57e0bf4fb9468fac0b284bb3eb76d3f51d0a801bcfca03e4f827332c","sha512":"8c8778a3a8eb7695dea204b09c51da5a84aaa4b08cc16589b3100464f95cf4b5ea458c9d1ebc965282362db2a51bb52f8279fdc514d6b381169ef1ad11cf64b2","ssdeep":"","tlshash":"5961d052043fe50097972cc693ce7e31de4eb198b05485396ffe1999ac56c32732574d","first_seen":"2025-09-21T21:38:39.059583Z","last_seen":"2026-04-02T18:56:53.647781Z","times_seen":92,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":111,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metromsk.com/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.4.2","fqdn":"metromsk.com","domain":"metromsk.com","tld":"com"},"ip":{"addr":"103.191.209.65","port":443,"asn":150055,"as":"DIGITAL SNAP","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.metromsk.com.metroxp.com/","date":"2025-12-26T05:53:21.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.metroxp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Dec 2025 04:33:17 GMT","end":"Thu, 05 Mar 2026 04:33:16 GMT"},"fingerprint":{"sha1":"BD:91:48:D0:52:F1:46:A2:5A:16:A3:A7:1E:73:29:82:1E:58:E7:FC","sha256":"85:FE:83:E8:B8:3C:BA:F0:99:44:3F:94:A2:90:63:23:55:36:6B:1A:49:63:B7:BE:FF:93:25:E3:3B:97:4C:4A"}}},"request":{"raw":"GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.4.2 HTTP/1.1\r\nHost: metromsk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metromsk.com.metroxp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 26 Dec 2026 11:53:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Aug 2024 00:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 493\r\ndate: Fri, 26 Dec 2025 05:53:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1895,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b06073c5a23326dcc332b78d42c7290c","sha1":"64e6c5ff99f14c65752e0322234160f8e83fc6c2","sha256":"f0b722c48c52082cd77261574e22a5251fe37ea4b291b1441134145bab9b2063","sha512":"438230129bd3bde621f9687d3e1739ac0a7ccd7b285be160daee2ae5395701e47d9c41b6a109c9ebb0f9b994c1058a5722362959098872a3094c11445800c395","ssdeep":"","tlshash":"b841fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-05T23:01:10Z","last_seen":"2026-04-04T05:20:00.950995Z","times_seen":9179,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"metromsk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}