{"report_id":"5d8420f8-2f85-44fe-8a9f-f7b3a5153eb7","version":6,"status":"done","tags":[],"date":"2024-01-21T20:00:17Z","url":{"schema":"http","addr":"webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"title":"Пошта Мета – Безкоштовна українська електронна пошта. Створити поштову e-mail скриньку в поштовому сервісі"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T02:43:28Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"webmail.meta.ua","ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2002-11-25","domain_rank":949864,"first_seen":"2017-02-06 21:24:37","last_seen":"2023-12-28 13:26:58","alert_count":0,"request_count":7,"received_data":34818,"sent_data":3646,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2024-01-21 11:50:04","alert_count":0,"request_count":2,"received_data":161182,"sent_data":873,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2016-04-05 21:50:59","last_seen":"2024-01-21 11:52:22","alert_count":0,"request_count":1,"received_data":578,"sent_data":578,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17 12:26:33","last_seen":"2024-01-21 11:52:22","alert_count":0,"request_count":1,"received_data":446,"sent_data":1343,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:52Z","timestamp":1705867192,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52625,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:52.843909+0000\",\"flow_id\":1900419810386053,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":52625,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":1293,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:52.843909+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:52Z","timestamp":1705867192,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33476,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:52.863046+0000\",\"flow_id\":1730246763621190,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":33476,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":25327,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:52.863046+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39166,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.255564+0000\",\"flow_id\":614238166574668,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":39166,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":56343,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.255564+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56325,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.256916+0000\",\"flow_id\":422736312265620,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":56325,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":11328,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.256916+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38117,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.305313+0000\",\"flow_id\":197729418061985,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":38117,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":54226,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.305313+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.311303+0000\",\"flow_id\":607978251730951,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":36826,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":58563,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.311303+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44676,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.312369+0000\",\"flow_id\":49819334329393,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":44676,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":8287,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.312369+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-21T19:59:53Z","timestamp":1705867193,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43640,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)","source":"{\"timestamp\":\"2024-01-21T19:59:53.422935+0000\",\"flow_id\":1997885503271959,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.20\",\"src_port\":43640,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2851162,\"rev\":4,\"signature\":\"ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2022_02_24\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":63809,\"rrname\":\"webmail.meta.ua\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":75,\"bytes_toclient\":0,\"start\":\"2024-01-21T19:59:53.422935+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"e112aa760bfa2813e2b773f184869938","sha1":"4b40c6dc87cdacbe8387008167d916524d4ba956","sha256":"02b270f2e43c179685b08a08180a239eb31bd9321398f727e63edaf97d56445c","sha512":"5bd7b89c5befebbfb12502d68743fe14eb1dac7ebe6037da5ab103b414825eea8c7fbb5bc3b62fda45f5c962e956c6de6926e0f5af12c969e99778e18c35f4ac","ssdeep":"","tlshash":"96d0c7f5e1114d5305a153197f9d3265223174539e90a8163fdd7c0c1f1fc0b91d12dd","size":253,"data":"","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.184216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KLHFCJZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ecfc08686a75d6e2bdd1934575056b1","sha1":"12eb44e84de5dca1008e2444eab68d89053e6e54","sha256":"a6ae7123a1df6685f47a5a47df1a26aec6eddd90b1571a3f30045bfe33354a1b","sha512":"a34c557427f52e33230f4dd18063f7512a9d1f2f0eb04db02c37b79cb203eab1ea5efa4a3cb9625162e2cc39902db308ebc4c02186b2d9cadc3e185059e3a888","ssdeep":"3072:5djsdRYYSBpbvzp5ULjH8EAO7SZdFyQYt3FJbkJ1RBvp4U:5HzvNOiySZnyQYt3Do/vL","tlshash":"6224f8c9b382b46683a37574803f150bb27e29e6b84cec94e185c4c42eb49ad6177f6d","size":227701,"data":"","first_seen":"2024-08-20T11:33:51.179576Z","last_seen":"2024-08-20T11:33:51.179576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ST6W9C3FEW\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8a06932f699107db6a0bac24b12f51b","sha1":"de92f93d793f311f9ef8a82936f0096a785c25ec","sha256":"f9f548be4222c4971d55be052f2a28b84ccd7ae4a06a7bc575155f21d718ddad","sha512":"0ed65082962f55eaad51d28d742bd9efb8e0ce3e488171b9f81f2951a251d9c5443f6990dfbc0709d22e080d087b8eb1b3d8d7e25e0b85af7db28522ac89dee4","ssdeep":"6144:6lzvNTmJtySZe9NUmt3DWXkyr7BscMXVif2U:mJmJteQ7BscMIH","tlshash":"8a3407dab3c370668296f478403f014ba57b69a2b45cccd8f189c9d02eb4a9a5177f7c","size":246243,"data":"","first_seen":"2024-08-20T11:33:51.180458Z","last_seen":"2024-08-20T11:33:51.180458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"e8a1642d1a2f75749d33d2f54d0bc8d6","sha1":"15956e1f1304f4c31f694062601fbfc3dd1d93b2","sha256":"b0ef31f31656d506b130d30b7ff52db8bfff0a39a113bb214d26a3f07643a83a","sha512":"f95524026e170080d62b12a95b07441275497ba1f5d5aa6e9681897de37aee2fb9e6c0526daad85ea75e45eb282c7cfee109e10225535d32a1a27a5454c1a52d","ssdeep":"","tlshash":"73d02e7c27132320c6083102b87cc34030b0009ce60a608493fa9039c3accc525abdb0","size":255,"data":"","first_seen":"2023-03-07T01:40:23Z","last_seen":"2026-06-25T02:05:38.11685Z","times_seen":3832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fb5cb7b246e69034e02cb9a126ea18af","sha1":"59691e84cdc7797ab899b6828d78fe0e59015c64","sha256":"21e1463f2dbdf773d27eb5b59524062b4aedb68414d396e65bb440516cdeae44","sha512":"5b173c17602515c7ef367a9158f900d690e7a0f51d18de53c86be0b096ead2aa04c73f4ae3788581047e90a5663ea19dbda17921c7b5ab0a582e34081835efcc","ssdeep":"","tlshash":"0780045cf0d17050010330145c7fc545753504c43d45100d410c04c13c10404c051f5c","size":38,"data":"","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-06-25T02:02:46.013785Z","times_seen":3888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-01-21T19:59:52.864Z","timestamp":1705867192864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4041\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nlast-modified: Sun, 21 Jan 2024 19:59:52 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: tpl=new; expires=Tue, 20-Feb-2024 19:59:52 GMT; Max-Age=2592000; path=/\nMMSID=1l0gnhk5kt1kv1qp9kpgol5oq9; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self'\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4041,"size_decoded":11733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3341), with CRLF, CR, LF line terminators","md5":"654d6ecc22f96dc2eb016b5c339cec6a","sha1":"1fe89d96b12e55b0c14ce3d254177be1f5ae14cf","sha256":"aa3e71f0b5a3e1829ca58d34d3204151e74a99e62ab8037b450e32005a9a297b","sha512":"d11a04db3b0cac43868951500ee3abd09a9a733ed1582e072c6ac10339346402d034ee139079f9183dffecca714e5b82547e2a9cb1b3dcc4d5d9df620a7bfc2d","ssdeep":"192:77DF2TXgznrYvocOYfXdujvcrv34PhQ2YkXcpRe9Mf1NRC6gPJ:7EXggvjOYfwUz3RpKMfrRCt","tlshash":"263263b2819958de5301e45af864b749aa0356ffaf631f03763c0d2f6ff1460ca2929d","first_seen":"2024-08-20T11:33:51.175198Z","last_seen":"2024-08-20T11:33:51.175198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":128,"dns":0,"connect":13,"send":0,"wait":16,"receive":1,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/img/i/logo_black.png","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.260Z","timestamp":1705867193260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /img/i/logo_black.png HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1498\r\nlast-modified: Wed, 19 Jan 2011 11:43:16 GMT\r\netag: \"4d36ce54-5da\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1498,"size_decoded":1498,"mime_type":"image/png","magic":"PNG image data, 128 x 29, 8-bit/color RGBA, non-interlaced","md5":"20170bf7f81482eb7d500687b5ed7e60","sha1":"921124e16a014de350b8cc151b63fc9d45760314","sha256":"0869760000a893fd0f6afa31882052e416a7a223b8efd34cecffc1206385ebb7","sha512":"32a06370262529f85f537bb3ef0736f22a4f0edd60c3252f844530a1aa8821e9210ff7dcc325687abc183ae619eb4479fe730dbb67a454a272777cc3b985e1bc","ssdeep":"","tlshash":"ad31f74ff26d3eaaaedb5e35a820d0dac8e5a775750403be186831a77d70138f035b20","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.176283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/css/new/style.css?v=2.8.2","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.258Z","timestamp":1705867193258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /css/new/style.css?v=2.8.2 HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jun 2021 03:26:15 GMT\r\netag: W/\"60d15857-7e23\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10325,"size_decoded":10325,"mime_type":"text/css","magic":"gzip compressed data, max speed, from Unix","md5":"dca2726176c90d6937773c83607c73e3","sha1":"8abea8d5be3fcb5ea978a5d75e35ce92b22f8053","sha256":"a18124c1100dd9bddc52fe57e20ea74251560bc3e64f3cb34d2cf9cb95713b22","sha512":"56b9bc8382c56d6a92eac9b722e5d62971aea1d8e84deb049898a0b6a73644fb14117fd75ef5ab5dd45a10edf67ab921a45c5e780f2d5ad6136e3b5e247a7a15","ssdeep":"192:oGE/TXLM7nCy3aEbwYprUGzZTfZSj+Y2BwQ/cfxpKJwM5ikH4KC4fAH0vYX/5URl:o/YnCy37wqLnkfpM5lH1bfAH2YRul","tlshash":"1e22b096d6a4dbfe818f5a78e5539077f1002b94d1c7dd87b008b0f8f916314e213a34","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.177207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/img/i/login_i.png","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.314Z","timestamp":1705867193314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /img/i/login_i.png HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/css/new/style.css?v=2.8.2\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 12478\r\nlast-modified: Wed, 19 Jan 2011 11:43:19 GMT\r\netag: \"4d36ce57-30be\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12478,"size_decoded":12478,"mime_type":"image/png","magic":"PNG image data, 317 x 327, 8-bit colormap, non-interlaced","md5":"f62d62cae277d426009754c68170efa2","sha1":"40a145e1d116ce728a780e36eee42ca5ed11880f","sha256":"6b6b91e5b33190bec5973cd857ebb83c8954c6478632806919e98a79dae1a001","sha512":"52f0cd34a2d496675f531089786b76e985408265fec83c037657dd80b040dee4a80aca0a8679e6ccc6602831c54f4994b84ed2aa9671eb13e10eaedd27a9f97e","ssdeep":"384:blvV4S76XCavBuEdT1yZvTbKSVI+VdnWz4dUOIK:bld4gsdvfwZLb5DXbTJ","tlshash":"3342bfe656909a9b13f08b4dda00547b802fbf99c2504292db99f7d05f3ccae72e850c","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.177941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/img/i/login.png","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.316Z","timestamp":1705867193316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /img/i/login.png HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/css/new/style.css?v=2.8.2\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1304\r\nlast-modified: Wed, 19 Jan 2011 11:43:18 GMT\r\netag: \"4d36ce56-518\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1304,"size_decoded":1304,"mime_type":"image/png","magic":"PNG image data, 114 x 74, 8-bit colormap, non-interlaced","md5":"c97f2ab6cf09bcbed35758445d844687","sha1":"18340048098cd2c47150a89bc0595c5540883549","sha256":"6fed7a38f6449bea7485f0dcd66c5887b657ce49bf7fbb28b5ffd4099e318339","sha512":"b14964c10bc9f9d4fdfddff5021432c6f781cea12e6b4aa4502387722354cbadf8415591d51b0f78e653d6d0d520cb4018bea496004e45a9538e1060f9d8bba6","ssdeep":"","tlshash":"c021c87e6b129f20b50bb937d7703da0dad81b9837743ea193164f4780909160194783","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.178846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KLHFCJZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.309Z","timestamp":1705867193309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Dec 2023 08:03:30 GMT","end":"Mon, 04 Mar 2024 08:03:29 GMT"},"fingerprint":{"sha1":"8F:9C:3B:A4:59:1A:06:DC:19:DB:A1:30:5D:19:81:20:9E:19:31:AE","sha256":"9A:0F:22:CC:17:9A:F5:D7:FD:84:3F:AA:88:BF:BA:49:74:4B:AF:69:71:A0:CA:09:69:57:38:A2:49:9C:1E:7C"}}},"request":{"raw":"GET /gtm.js?id=GTM-KLHFCJZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\nexpires: Sun, 21 Jan 2024 19:59:52 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 21 Jan 2024 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 74612\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74612,"size_decoded":227701,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15652)","md5":"2ecfc08686a75d6e2bdd1934575056b1","sha1":"12eb44e84de5dca1008e2444eab68d89053e6e54","sha256":"a6ae7123a1df6685f47a5a47df1a26aec6eddd90b1571a3f30045bfe33354a1b","sha512":"a34c557427f52e33230f4dd18063f7512a9d1f2f0eb04db02c37b79cb203eab1ea5efa4a3cb9625162e2cc39902db308ebc4c02186b2d9cadc3e185059e3a888","ssdeep":"3072:5djsdRYYSBpbvzp5ULjH8EAO7SZdFyQYt3FJbkJ1RBvp4U:5HzvNOiySZnyQYt3Do/vL","tlshash":"6224f8c9b382b46683a37574803f150bb27e29e6b84cec94e185c4c42eb49ad6177f6d","first_seen":"2024-08-20T11:33:51.179576Z","last_seen":"2024-08-20T11:33:51.179576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":29,"dns":1,"connect":7,"send":0,"wait":28,"receive":14,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ST6W9C3FEW\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.495Z","timestamp":1705867193495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Dec 2023 08:03:30 GMT","end":"Mon, 04 Mar 2024 08:03:29 GMT"},"fingerprint":{"sha1":"8F:9C:3B:A4:59:1A:06:DC:19:DB:A1:30:5D:19:81:20:9E:19:31:AE","sha256":"9A:0F:22:CC:17:9A:F5:D7:FD:84:3F:AA:88:BF:BA:49:74:4B:AF:69:71:A0:CA:09:69:57:38:A2:49:9C:1E:7C"}}},"request":{"raw":"GET /gtag/js?id=G-ST6W9C3FEW\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\nexpires: Sun, 21 Jan 2024 19:59:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 85342\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85342,"size_decoded":246243,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5955)","md5":"d8a06932f699107db6a0bac24b12f51b","sha1":"de92f93d793f311f9ef8a82936f0096a785c25ec","sha256":"f9f548be4222c4971d55be052f2a28b84ccd7ae4a06a7bc575155f21d718ddad","sha512":"0ed65082962f55eaad51d28d742bd9efb8e0ce3e488171b9f81f2951a251d9c5443f6990dfbc0709d22e080d087b8eb1b3d8d7e25e0b85af7db28522ac89dee4","ssdeep":"6144:6lzvNTmJtySZe9NUmt3DWXkyr7BscMXVif2U:mJmJteQ7BscMIH","tlshash":"8a3407dab3c370668296f478403f014ba57b69a2b45cccd8f189c9d02eb4a9a5177f7c","first_seen":"2024-08-20T11:33:51.180458Z","last_seen":"2024-08-20T11:33:51.180458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-ST6W9C3FEW\u0026cid=293030032.1705867194\u0026gtm=45je41h0v881588111z8832158399\u0026aip=1\u0026dma=1\u0026dma_cps=sypham\u0026gcd=11l1l1l1l1\u0026z=691200801","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.638Z","timestamp":1705867193638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Dec 2023 08:12:08 GMT","end":"Mon, 04 Mar 2024 08:12:07 GMT"},"fingerprint":{"sha1":"65:B5:24:9C:49:7C:BE:1B:DB:9A:2A:CF:A6:1B:63:16:2F:A7:EF:70","sha256":"F8:61:EE:19:7B:4A:29:69:5B:C6:22:C1:86:47:5A:18:32:17:C1:D5:0A:49:CF:CF:79:46:1A:B8:36:08:A8:34"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-ST6W9C3FEW\u0026cid=293030032.1705867194\u0026gtm=45je41h0v881588111z8832158399\u0026aip=1\u0026dma=1\u0026dma_cps=sypham\u0026gcd=11l1l1l1l1\u0026z=691200801 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-25T02:12:45.865587Z","times_seen":961267,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":27,"dns":0,"connect":7,"send":0,"wait":21,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-ST6W9C3FEW\u0026gtm=45je41h0v881588111z8832158399\u0026_p=1705867193287\u0026_gaz=1\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026cid=293030032.1705867194\u0026ul=en-us\u0026sr=1280x1024\u0026ir=1\u0026_eu=EA\u0026_s=1\u0026sid=1705867193\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwebmail.meta.ua%2F%3FPG_SHOWALL%3D0%26newsort%3D0%26mailbox%3DINBOX.Spam\u0026dt=%D0%9F%D0%BE%D1%88%D1%82%D0%B0%20%D0%9C%D0%B5%D1%82%D0%B0%20%E2%80%93%20%D0%91%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%B0%20%D1%83%D0%BA%D1%80%D0%B0%D1%97%D0%BD%D1%81%D1%8C%D0%BA%D0%B0%20%D0%B5%D0%BB%D0%B5%D0%BA%D1%82%D1%80%D0%BE%D0%BD%D0%BD%D0%B0%20%D0%BF%D0%BE%D1%88%D1%82%D0%B0.%20%D0%A1%D1%82%D0%B2%D0%BE%D1%80%D0%B8%D1%82%D0%B8%20%D0%BF%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D1%83%20e-mail%20%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D1%8C%D0%BA%D1%83%20%D0%B2%20%D0%BF%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BE%D0%BC%D1%83%20%D1%81%D0%B5%D1%80%D0%B2%D1%96%D1%81%D1%96\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.AdBlock=false\u0026tfd=805","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:54.231Z","timestamp":1705867194231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Dec 2023 08:03:30 GMT","end":"Mon, 04 Mar 2024 08:03:29 GMT"},"fingerprint":{"sha1":"8F:9C:3B:A4:59:1A:06:DC:19:DB:A1:30:5D:19:81:20:9E:19:31:AE","sha256":"9A:0F:22:CC:17:9A:F5:D7:FD:84:3F:AA:88:BF:BA:49:74:4B:AF:69:71:A0:CA:09:69:57:38:A2:49:9C:1E:7C"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-ST6W9C3FEW\u0026gtm=45je41h0v881588111z8832158399\u0026_p=1705867193287\u0026_gaz=1\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026cid=293030032.1705867194\u0026ul=en-us\u0026sr=1280x1024\u0026ir=1\u0026_eu=EA\u0026_s=1\u0026sid=1705867193\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwebmail.meta.ua%2F%3FPG_SHOWALL%3D0%26newsort%3D0%26mailbox%3DINBOX.Spam\u0026dt=%D0%9F%D0%BE%D1%88%D1%82%D0%B0%20%D0%9C%D0%B5%D1%82%D0%B0%20%E2%80%93%20%D0%91%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%B0%20%D1%83%D0%BA%D1%80%D0%B0%D1%97%D0%BD%D1%81%D1%8C%D0%BA%D0%B0%20%D0%B5%D0%BB%D0%B5%D0%BA%D1%82%D1%80%D0%BE%D0%BD%D0%BD%D0%B0%20%D0%BF%D0%BE%D1%88%D1%82%D0%B0.%20%D0%A1%D1%82%D0%B2%D0%BE%D1%80%D0%B8%D1%82%D0%B8%20%D0%BF%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D1%83%20e-mail%20%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D1%8C%D0%BA%D1%83%20%D0%B2%20%D0%BF%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BE%D0%BC%D1%83%20%D1%81%D0%B5%D1%80%D0%B2%D1%96%D1%81%D1%96\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.AdBlock=false\u0026tfd=805 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://webmail.meta.ua\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://webmail.meta.ua\r\ndate: Sun, 21 Jan 2024 19:59:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":30,"dns":0,"connect":8,"send":0,"wait":17,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/favicon.ico","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.428Z","timestamp":1705867193428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 10 Mar 2009 13:48:16 GMT\r\netag: W/\"49b66fa0-57e\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1406,"size_decoded":1406,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"96325b2961c76a2b5be2adbd4132dec0","sha1":"bce375a55df8840e4d3c4d510842ebea6a68504a","sha256":"6e14563f48a0e375b5590f1355df29bbea31fe90294ccd6476353fa444771f6f","sha512":"868166bdcb649579d12ac2c26e6c4a6e3febfe89b2fc4a772e7aba9f8a448b9d3b287e995f2c3963342bc1996fa03fb752b1da43272a2c52d64fd1139b94e397","ssdeep":"","tlshash":"ba217829a73ec05ec4862832c467d0f4f491ed0a65851f8f92a1fd5ff9ba993209d2c8","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.182662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.meta.ua/img/i/bg_z.png","fqdn":"webmail.meta.ua","domain":"meta.ua","tld":"ua"},"ip":{"addr":"65.21.54.198","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.meta.ua/?PG_SHOWALL=0\u0026newsort=0\u0026mailbox=INBOX.Spam","date":"2024-01-21T19:59:53.307Z","timestamp":1705867193307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta.ua","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Dec 2023 00:12:42 GMT","end":"Sun, 10 Mar 2024 00:12:41 GMT"},"fingerprint":{"sha1":"73:16:A2:32:A6:4C:87:89:05:AE:77:FB:8C:79:32:E8:05:EB:55:22","sha256":"59:BD:85:E3:8B:63:6E:A5:13:15:F4:EF:E5:BA:25:A5:28:6D:11:F3:94:D4:57:D3:F7:E6:5E:66:74:FA:63:16"}}},"request":{"raw":"GET /img/i/bg_z.png HTTP/1.1\r\nHost: webmail.meta.ua\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.meta.ua/css/new/style.css?v=2.8.2\r\nCookie: tpl=new; MMSID=1l0gnhk5kt1kv1qp9kpgol5oq9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 21 Jan 2024 19:59:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1157\r\nlast-modified: Thu, 26 Nov 2009 13:24:34 GMT\r\netag: \"4b0e8192-485\"\r\nexpires: Sun, 28 Jan 2024 19:59:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1157,"size_decoded":1157,"mime_type":"image/png","magic":"PNG image data, 2 x 968, 8-bit/color RGBA, non-interlaced","md5":"b66ba1a5e219345241f7e0d8a309d0ad","sha1":"407874e542c1718bf1acb21f255a9cb5f3683f62","sha256":"e51d7dc398f6346b1e973f73438638009396758cb3736e4e19acf745fdeaaabb","sha512":"44e4da1282ad43d7d86eb5fc7f7ed22333ff3438c9650ed25a128d8df218935bb085fdbdf6ad79f07cd7ec604a200b8e73f5b726d6f1fb825693eaf78bbefd8c","ssdeep":"","tlshash":"41210ac111d9dffcc8c9197d388a4433d0101dc868c606b7735416fa98548087597139","first_seen":"2023-05-29T19:57:13Z","last_seen":"2024-08-20T11:33:51.183443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}