{"report_id":"7b1a230d-d4ad-47f0-8f89-2c0f49d28662","version":6,"status":"done","tags":[],"date":"2026-05-01T14:15:33Z","url":{"schema":"https","addr":"maskpl.com","fqdn":"maskpl.com","domain":"maskpl.com","tld":"com"},"ip":{"addr":"104.21.89.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metaclientsupport.com/home/","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"title":"Action required","dom":{"size":73882,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6069)","md5":"eff4e8819adb495cb3e37da11ab0c334","sha1":"8036ba1483fbab53a32ed14e32634ef9bbb3b1e5","sha256":"297440eaed05f8908226d852e143390f803e835e2bb2e6085ead125aa9e8988c","sha512":"9cb166f485cc36c0292caacd9efc72e6aa5d3e6f45bdc0ef575944ed489f4d3e8f22f731cd276e718df6fd9f44c682644bd92fc3a0f003bb8befa7fbaa881208","ssdeep":"1536:TayIoOMIo9fKGIx83xpR6ByowGZe/wT/f:WGIxRwtwrf","tlshash":"2873f7e9034ceebd459386adef37a998224f9cb9f56191d1b67fc62061c3cc0f10a865","dom_hash":"domhash6ce529d18c8f6c1b5f02ee4cd68f10bb","first_seen":"2026-05-01T14:05:53.443705Z","last_seen":"2026-05-01T14:15:40.039011Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maskpl.com","fqdn":"maskpl.com","domain":"maskpl.com","tld":"com"},"ip":{"addr":"104.21.89.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T14:15:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"maskpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"metaclientsupport.com","ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-05-01T14:05:49.297685Z","last_seen":"2026-05-01T14:05:49.297685Z","alert_count":19,"request_count":19,"received_data":1548078,"sent_data":9301,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"metawsparcieklienta.com","ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":1445742,"sent_data":1917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"maskpl.com","ip":{"addr":"172.67.165.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2887,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.20","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/tagify.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"164eb3d72b2c66e76d95cc76cd5933ca","sha1":"d19674673f7896fc8d5aed1a29d012dc0b417ca6","sha256":"ab7dd1be54ff17692cbeaecbd852fe5635fe5dbc1673de2a8e8e4cc7d7dcc6ec","sha512":"857f097442cd65ac4fbb3001b808b75282362844f796d9a439544d85d92b3c56eb564c81d15ab6c52978d988dc4d3b21dc6f57648a152978dfc375e87821fd80","ssdeep":"768:JyCmTfZfVLas//eJucPUC97RYCDCOj/fwtY8enCPsPzcQuFrQbRAx+P+DcJWq9iu:J0fZfVLas//Muqj/oQM+P3Wq9qG","tlshash":"d273e689b2d170750ae6217495af0202faf3244c6446d064b93ed8d97ff898e127bfbd","size":75500,"data":"","first_seen":"2024-12-01T14:35:04.389096Z","last_seen":"2026-05-07T09:25:56.696872Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/jquery-3.7.1.min.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T13:34:46.77163Z","times_seen":184665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/tagify.polyfills.min.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eba227e17abf24fc7783dfa91d4e9b3","sha1":"67d433e15ce05d97c47b937bab0d7d05ff653a56","sha256":"00af2ecc223f438a66e49bce1aa5b6deeb6d9d54b12057cf2a658a7f8116f524","sha512":"6c873be58f06bb81e1b66541edbd301d7c65e31f76badc0923633a38ab576d07dccf8b83cdfacb94b2517a01d3f1cd61159d8bafdd72caf9227d97bb07c6b811","ssdeep":"192:DDQHF0Oy+5yBuU/nCNrZ7Lsonfh6QPhyYYDCadpBgRozl:DDYLy+eR/nCNpsonfPy1hH","tlshash":"ec22c749f7a470b612eb21b5403f500ff23aa87eb45900e4a615ecf53db988d456bf38","size":10345,"data":"","first_seen":"2024-11-17T10:17:39.224106Z","last_seen":"2026-05-01T14:15:40.074815Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metawsparcieklienta.com/home/","fqdn":"metawsparcieklienta.com","domain":"metawsparcieklienta.com","tld":"com"},"ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c4e9109d1987238ec817b340b8c909e","sha1":"7bd76f36dfaae505d5ef70286b639be40e51f96f","sha256":"e383b7480a65b77fa9e2027f17aed762820a4d0d844681079da2b54adc2df65f","sha512":"daaa72a57dd26f68e059a4d8cd6caccf0fe6f665bf71a399169de988a51fe74647669426e5389e45053764b82a39271068f79c7cdace904124127d47f3db18c4","ssdeep":"","tlshash":"76b0928aa56250842666e061aa26a905793324aa4488d54178088b011f1026f7267ac9","size":113,"data":"","first_seen":"2026-05-01T14:15:40.081552Z","last_seen":"2026-05-01T14:15:40.081552Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/script.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dba2abdb39bf08f1187a7e2d0d7ca30","sha1":"941d376a97edc15fd005897ee0908fadecd9a3fa","sha256":"a495bcc2d070211b507e885448b027ebfbcf1ab50ffd5e793413af6460f636e6","sha512":"b044dfd81df688cc64c5d6544572ce8318ea887af897a73bb169818dd3718749be84f48200f8acd19a27eebee0f4949823540851a014cb6d93b7b17dc75279c8","ssdeep":"","tlshash":"c52105507577237d43d713b5047e8703ceb01474498912fcf2d42558a869fd87166aae","size":1276,"data":"","first_seen":"2026-05-01T14:05:53.468264Z","last_seen":"2026-05-01T14:15:40.041833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/images/coins-updated.avif","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/images/coins-updated.avif HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: image/avif\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10494\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10494,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b04e896ee2cb5066d50f86b99795f418","sha1":"430e7f99b6ac6aa79f15dc3bae8f84af041dd195","sha256":"2071fa09ee5e5af2ebb076df9ebc2a282a5c5d5c4b4b85d496db159f3ada2c24","sha512":"431053a7821f4e249dfd792706ae7943b68a85bff3a270b09d7e867edba19d26447f06edd834cc25563eaa9be3d44ba7b31525a9f711781e0deab1abb9390dd5","ssdeep":"192:+zC7528SHiH3lQDVYZBaV7qqrJBAoiyLUVr8SUcoMagvM4:S0lQDqraJB1BATBVrTUoBvM4","tlshash":"6622c0432894a400faf9def34e56bd10d17171d0c36affdd8e9032570c94ea50892cab","first_seen":"2026-05-01T14:05:53.470344Z","last_seen":"2026-05-01T14:15:40.040265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/images/cellphone.avif","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/images/cellphone.avif HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: image/avif\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12061\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12061,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"01a9c7ed0a3b21fdd77b7f0bd93d2a5d","sha1":"b3dbf28bec30f320a4553a5ac257528ec2ed59a3","sha256":"b92e0fb4a398472f2c2ae6bb696b367331fbbfc289186263e02b269a111e3e8b","sha512":"b874d910a677355170b4fa72ddacbe000e8342fa68a5266b6a92f4a902ed080ea42765d478867e92cacb44f050e43830b0e51c5c7f74346fcfe6acd5dce0ea41","ssdeep":"192:+zCYc3AZrNbIenbX+0Pw8BUxo7o13gooYskMqpiYzNACoHTDdYC0W3bWevgfz2E4:SUyR/b+0hRohGYnxQYzNACADdYCDOfzw","tlshash":"b942cf6da14b4411f72530f23ed482dc43fcd72ed68aac6ddf197722342a7bc8288861","first_seen":"2026-05-01T14:05:53.449749Z","last_seen":"2026-05-01T14:15:40.041205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/script.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/js/script.js HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 05:29:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7dba2abdb39bf08f1187a7e2d0d7ca30","sha1":"941d376a97edc15fd005897ee0908fadecd9a3fa","sha256":"a495bcc2d070211b507e885448b027ebfbcf1ab50ffd5e793413af6460f636e6","sha512":"b044dfd81df688cc64c5d6544572ce8318ea887af897a73bb169818dd3718749be84f48200f8acd19a27eebee0f4949823540851a014cb6d93b7b17dc75279c8","ssdeep":"","tlshash":"c52105507577237d43d713b5047e8703ceb01474498912fcf2d42558a869fd87166aae","first_seen":"2026-05-01T14:05:53.468264Z","last_seen":"2026-05-01T14:15:40.041833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/fonts/MMEuclidCircularB-400.woff2","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/fonts/MMEuclidCircularB-400.woff2 HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35144\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35144, version 1.0","md5":"f97daa3eb20ea442f38049b8dfea5c5b","sha1":"f716a445ea3bd03d23ba74315832f686d491d702","sha256":"d44b37016d8fb2e94dc6eee5f71ba9dcdcdb35dd4100db0e37a19f4a256bce49","sha512":"85118f5f47bb611d1465fad299c5b552ae4ca992cbe0a45e17d66076d7fd24b802a575fe97ce4cb715ed766c559d2a4b362f4fd0fc8cf2cac5828a5c647a039e","ssdeep":"768:pyvAUFRTAUw6nJjLgK4y2jDYOWFOxoDVtEQc+bVvyfuxzFmTqciUf:p+AU3Q6hqpfYOWBVtEAlyfusqcZf","tlshash":"22f2f1af526de024fa8e43daafc5f923e17d52ece159f971077e21657308c4c8810ba8","first_seen":"2024-09-21T14:17:32Z","last_seen":"2026-08-02T06:29:25.520681Z","times_seen":48,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/fonts/MMPolyVariable.woff2","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/fonts/MMPolyVariable.woff2 HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54608\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54608, version 1.0","md5":"4470005f2640dc44268f3f7c3d5e1b7f","sha1":"ce498ef38e9495b54316159403533354449e98ab","sha256":"a17328a2b8cb4e3da93f4506ab6ff9bf505c864b9916a822a9317a2f460e5102","sha512":"63da7dcd3d2512e9886698ac2f70dc6fdd00b57078be79bab42b42feffe5b924cdfce48b3f53db0ed73ca0531eb2bb311f7d1b144627022f552dc847665c0ed3","ssdeep":"1536:jeQhvHtOLPanQIFXgt7xwXJnonKmoGYOAkiS:Nt4anUvwZnOYOD","tlshash":"e433f210c427e2bc71003a11f9692bdd56572e9a8825f5e8b57aff28d0ece8097146eb","first_seen":"2025-03-03T17:47:39.900843Z","last_seen":"2026-06-09T03:15:43.295128Z","times_seen":42,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/fonts/MMEuclidCircularB-500.woff2","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/fonts/MMEuclidCircularB-500.woff2 HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35472\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35472, version 1.0","md5":"1855615443e520b746505f319cffd69d","sha1":"cfb7a439d24865ec094b4adf3eb9b219f08431b5","sha256":"07114fb30f812d395e1670387b4f1e9ee6f8bde090045fa2d085d78183e3dabd","sha512":"48c81bc6aa4eda517269441a63a5827d96aea1e6a32c4953cadb18225da43916b26506a1463a9752b28e0b9be689926da7322ad6589849bf1d48383ac1bdb4fd","ssdeep":"768:2gnH/aUut6pkr6z69+KhNXOqD/Ur0j0uH:2gnf/ucir6z69+MRDHZ","tlshash":"93f202e7925510c6cfe9c9be52721cbaa7bf52b258a7b31f00142bf2e65658304d1632","first_seen":"2024-09-21T14:17:32Z","last_seen":"2026-08-02T06:29:25.538717Z","times_seen":45,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metawsparcieklienta.com/home/logo.png","fqdn":"metawsparcieklienta.com","domain":"metawsparcieklienta.com","tld":"com"},"ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metawsparcieklienta.com/home/","date":"2026-05-01T14:15:08.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metawsparcieklienta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 12:57:15 GMT","end":"Sat, 25 Jul 2026 12:57:14 GMT"},"fingerprint":{"sha1":"95:53:47:0E:B8:7A:11:B1:10:A0:68:95:45:B6:AB:3B:31:9C:91:C0","sha256":"D3:89:77:9F:59:6B:9D:45:A2:FD:8A:77:14:4C:7B:3B:AE:1C:C9:50:26:C8:F3:CE:30:44:62:0B:8E:43:AE:00"}}},"request":{"raw":"GET /home/logo.png HTTP/1.1\r\nHost: metawsparcieklienta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metawsparcieklienta.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Apr 2026 13:54:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1422906\r\ndate: Fri, 01 May 2026 14:15:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTzQpYoZLrMItGjeMm%2FDObnrfa%2F546PWqleOLFEFzvg85k%2BnWhWpve0iK5xPI26JGW3iUYGH12zfOEEPEpREtZO6dpM%2B7qLhXEYCRa0k6qxPr3RrTxTuHlJ74UluFjHL7HlV6cX%2BDGP3pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4f65891cda76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1422906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d92d72e2c003bd299c0e7744991009de","sha1":"9d6100ca40f957871060392ba209d58a8b70b9fc","sha256":"fafbe11812275b074626268c894443d0f50b7e951fd768efd4f97441189d6134","sha512":"f4dafca97c6c43b53497ec847a9832ffb88a1322e2ab1571e77cb267fc1b5c70a08695aa538ffb9671886afc01238691b3eea1b8cefd388b72d3b9698a22f196","ssdeep":"24576:HBmDsuS8JpLg4b6uWX/DSRNh2S9SrNSh9eoPbR8zn1wGbWNmPCylYzh5D:hmDA8nglnXGRzL9SMq4R8zn16NmPI5D","tlshash":"dd2533db51d55fb1e19d4a7289df87c9e5b1b762502b1903e1cd7e18ce8cb0e038278a","first_seen":"2026-05-01T14:15:40.045225Z","last_seen":"2026-05-01T14:15:40.045225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/css/tagify.css","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/css/tagify.css HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2753\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11754,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11751), with no line terminators","md5":"2ce5496032c82e673aac37b1f25ebfcb","sha1":"1a908137f9928eed0b942933d092d6112d5dbf93","sha256":"bc0cab574dfd0897e3858155951fdc1d6472173e4a24474952590905430fa18d","sha512":"7e0e266da5e2a0692166c550941503ecc984039cd06382376a26b020b6b69c75d49347b98016639701a8242791200547a9839d69d743400ec7517c2ac77bd500","ssdeep":"192:I7Uyrun67j/JWewyKwx6Nqp0WAS9L/ecc398xH9WnjGrlKVQ3X+qGXf:Fj2j/JWewyXxQUzq9g9WnjGrloQ3X+5P","tlshash":"c932565493f420f78812c228bfd4e24bc5e9e57d5e1305baf901510b4acfda9a362e7e","first_seen":"2024-12-08T05:32:57.523459Z","last_seen":"2026-06-26T15:21:28.807943Z","times_seen":42,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/images/blue-globe.avif","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/images/blue-globe.avif HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: image/avif\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11263\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11263,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"58c6e4c4a2ce4c5899c2f3bc94b290c8","sha1":"b195f2f06d42037ccab471093d3be7301e3d9593","sha256":"41f5afca4f61cb6b498297c089bc4f3855a6159af3f0c6e3f6b34e56e7d5f6d0","sha512":"1df6b10303df4fa006335ebdfc56ef3838098c4863c5f24d56151aeedacdb2131f4c020a72a1b0fc53fb4c1deeeee14d5cdd3fe8db97f171dbcb1df279ef6417","ssdeep":"192:+zCLMuhDezv/1SG/2jwJ8SSeujurMW3U8bVlbUuswf7p3L0nCKhEMgLR8h5:SFzvwG/+SGj2bVl4idb0CUfgLk","tlshash":"4632bf5802ce3ee5cdac13fadf583908e0a5cb793baf34dd7446593041587a64858e9f","first_seen":"2026-05-01T14:05:53.47707Z","last_seen":"2026-05-01T14:15:40.046761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/fonts/MMSansVariable.woff2","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/fonts/MMSansVariable.woff2 HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42612\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42612, version 1.0","md5":"b774dabdfbb02addd98914a25927758f","sha1":"199a6083ba759cbc9083e52f1ee07281fcd5f214","sha256":"94d6dbcb5864a6bc178849275630afd3ce067f1262bac7fd0995cc7580f722a4","sha512":"8d56911d6a1c0d692b0666ae248361b43e42496b069ceb891106ba2adf8911cca946fe9ea849979f81b41d22ae0e37e2b0b6a1f5a6496f272cacbeaaada0844c","ssdeep":"768:w6vrEYK8sd53MY7NNfiM72xRNZXndnfsS7N+xEXWrWKWA079V1:2BDckiM72xpXndnpW0Z3","tlshash":"0613f2a804f0c740569efd6a22a393074e087d7baaf1a57da9bf1b63c72500ed371a54","first_seen":"2025-03-03T17:47:39.924359Z","last_seen":"2026-08-09T10:11:25.001193Z","times_seen":277,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/images/favicon.ico","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:11.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/images/favicon.ico HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:11 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1856\r\ndate: Fri, 01 May 2026 14:15:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3390e889d3441bfe915d400de808d66f","sha1":"8b966861a2446c4177c79622bfee8f748479cdda","sha256":"1f48f496b1608ddd9cba8129afce9feacd5d6a54e16934b075ba3505a38586a5","sha512":"0ff65294c1d50dd934814a9890bd83285534fde0a77160487431f165c5e2b59e8237dacc9cad5f7909d07680dafd6fc01f13111659fb3536fda7a68068358d20","ssdeep":"96:jpYsiqZb7/230JfZ8j1ySQUSqBy/bf9T7QzLX9kf:jCsiqfUSq2Qg","tlshash":"af62c3366154194dc44c0c7b4016de3e8043fcad9f829b7a621a3cabf26ae2e5d2c57f","first_seen":"2025-04-26T21:55:15.120483Z","last_seen":"2026-07-26T12:54:27.623896Z","times_seen":35,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/php/validate.php","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:11.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"POST /home/php/validate.php HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 16\r\nOrigin: https://metaclientsupport.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"message%5B%5D=ol"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Fri, 01 May 2026 14:15:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T13:49:05.127389Z","times_seen":17799766,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maskpl.com/","fqdn":"maskpl.com","domain":"maskpl.com","tld":"com"},"ip":{"addr":"172.67.165.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T14:15:08.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maskpl.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 02:57:27 GMT","end":"Sun, 26 Jul 2026 02:57:26 GMT"},"fingerprint":{"sha1":"F3:94:4D:AE:F4:B2:75:23:B5:70:85:D9:4E:E3:DA:31:EC:F3:31:5D","sha256":"43:7E:18:96:57:F6:BB:C9:B2:A9:9A:E4:1F:F3:60:B7:25:61:A9:10:D6:B9:68:E1:22:1D:34:F6:C1:51:28:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maskpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 01 May 2026 14:15:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://metawsparcieklienta.com/home\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.20, PleskLin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TH9sneOxutMyu5LQIehcCUIm7oLBvY3PmE2pHDyW0skg8jxZRfn5iVsHgDHbPdZ%2FHrgQ9w%2FivIuK%2BQktMPPNNzok3gVhibNTNvmWOwx8B8sLJpHu2EpTvUtEXdHI\"}]}\r\ncf-ray: 9f4f6584ea4db515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.20","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T13:49:05.127389Z","times_seen":17799766,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":19,"dns":8,"connect":1,"send":0,"wait":156,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"maskpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metawsparcieklienta.com/favicon.ico?v=999","fqdn":"metawsparcieklienta.com","domain":"metawsparcieklienta.com","tld":"com"},"ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metawsparcieklienta.com/home/","date":"2026-05-01T14:15:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metawsparcieklienta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 12:57:15 GMT","end":"Sat, 25 Jul 2026 12:57:14 GMT"},"fingerprint":{"sha1":"95:53:47:0E:B8:7A:11:B1:10:A0:68:95:45:B6:AB:3B:31:9C:91:C0","sha256":"D3:89:77:9F:59:6B:9D:45:A2:FD:8A:77:14:4C:7B:3B:AE:1C:C9:50:26:C8:F3:CE:30:44:62:0B:8E:43:AE:00"}}},"request":{"raw":"GET /favicon.ico?v=999 HTTP/1.1\r\nHost: metawsparcieklienta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metawsparcieklienta.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:09 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 26 Apr 2026 22:27:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7146\r\ndate: Fri, 01 May 2026 14:15:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrtDO8zpLXSXyKTwyDyyv4IDlWYKijqnBUwyTxAkCU85Iv0LeM7WgF5Ku9O21X7rP28QEp3IiZks96USNok9ePnbofFoh2kTd%2B%2FKzo5mZq9%2B%2Bm%2Bd5R7WAjvOFZ%2B3fFbD9rTd2VTKADyx3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f4f6589dcf676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cc857493aae6b5a1fe0e0bf53c334186","sha1":"46012e2624b933a5add18930084269c028ae34b8","sha256":"7b96aa81bbe58f9c9d4afb70af9114af94dd191ea7d59c1e39463cd433098149","sha512":"44cffad65da7202b6f0555f4b65617003a4e5acf1b04e03849416fbe1a9749836db592b2334f800a9083f447e491a61e271002abcbc346e939bb5b4adfc3e803","ssdeep":"192:/kJxr9lsorEHyllv3c44bLJmU8nfI0NuU4jcn:o9eorE2s4OJmU8fI8v3n","tlshash":"ee625d8327091655d32004b400f9c7a2b6ecaee25f71676a1785c91337a7cff2593bba","first_seen":"2026-05-01T14:15:40.049118Z","last_seen":"2026-05-01T14:15:40.049118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/css/style.css","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/css/style.css HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 134803\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1057295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3f98cf924cfd5ddb949956a248ba23d9","sha1":"cf9bafa329883a0a6a3321d4ecba7e790a7f60c9","sha256":"922b393139bf5878be9e9ee18596a6452ab7e3b6b225a69260d5435499828695","sha512":"fc9716c0b0c077879ec9e04fc6f9d6eeef64bd6602808094d01197e52112717ec165a3a588a96cca96cde46335b94a3e9f8f7eca32c7bed3de8e854d00563e60","ssdeep":"12288:RT9YtjA9HCZ9h7tcz/KzJJExQjff8kC4HI8KSj0g4N4hGEgHd5V7wXf9dZziwEop:0ycd0pQtHmjqX","tlshash":"7425b6628f55792c592ba0698dadb548077894c0ff0b4e9bf2026a2ce7cc3b51673dcd","first_seen":"2026-05-01T14:05:53.474027Z","last_seen":"2026-05-01T14:15:40.050129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/css/custom.css","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/css/custom.css HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":665,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"995006eb7d8dde4e0512d95379c5a391","sha1":"65b2dd2fa7883469676592ee1fd34ad768413ab7","sha256":"f17db4a7f589015831b4a8b73c0b1bc4d82dcf1ce541a2accde44a4d1b7afd26","sha512":"d96893a0e18986aae8e4977c63d91dac6cda177b15fb6a28f39fba2692da0ac86af88e7d7566b3607ee9262108b0b39920a87b1ab349c8b14260540ae1683638","ssdeep":"","tlshash":"37019e19e5e2319ba646db68bfb443775f5014a47f0b47a978c0100a638cf20a9394dc","first_seen":"2026-05-01T14:05:53.475319Z","last_seen":"2026-05-01T14:15:40.050646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/jquery-3.7.1.min.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 05:29:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29739\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T13:34:46.77163Z","times_seen":184665,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/tagify.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/js/tagify.js HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 05:29:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20771\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63947), with CRLF, LF line terminators","md5":"164eb3d72b2c66e76d95cc76cd5933ca","sha1":"d19674673f7896fc8d5aed1a29d012dc0b417ca6","sha256":"ab7dd1be54ff17692cbeaecbd852fe5635fe5dbc1673de2a8e8e4cc7d7dcc6ec","sha512":"857f097442cd65ac4fbb3001b808b75282362844f796d9a439544d85d92b3c56eb564c81d15ab6c52978d988dc4d3b21dc6f57648a152978dfc375e87821fd80","ssdeep":"768:JyCmTfZfVLas//eJucPUC97RYCDCOj/fwtY8enCPsPzcQuFrQbRAx+P+DcJWq9iu:J0fZfVLas//Muqj/oQM+P3Wq9qG","tlshash":"d273e689b2d170750ae6217495af0202faf3244c6446d064b93ed8d97ff898e127bfbd","first_seen":"2024-12-01T14:35:04.389096Z","last_seen":"2026-05-07T09:25:56.696872Z","times_seen":35,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metawsparcieklienta.com/home","fqdn":"metawsparcieklienta.com","domain":"metawsparcieklienta.com","tld":"com"},"ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T14:15:08.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metawsparcieklienta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 12:57:15 GMT","end":"Sat, 25 Jul 2026 12:57:14 GMT"},"fingerprint":{"sha1":"95:53:47:0E:B8:7A:11:B1:10:A0:68:95:45:B6:AB:3B:31:9C:91:C0","sha256":"D3:89:77:9F:59:6B:9D:45:A2:FD:8A:77:14:4C:7B:3B:AE:1C:C9:50:26:C8:F3:CE:30:44:62:0B:8E:43:AE:00"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: metawsparcieklienta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 01 May 2026 14:15:08 GMT\r\ncontent-type: text/html\r\nlocation: https://metawsparcieklienta.com/home/\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zn8c8qYd6xFeE0Fso48xGScx876PQnQqx9BS79ll4L17M22WPd5Dy0WVGelNSHcY43ONlcwjmBGi%2Bz%2FPjfjG%2BkOR%2BEHxwN5G72fSZfrt%2FGnCwMiAT62MlR3qZHPyf%2Buy6hqLjGFJcUvUwA%3D%3D\"}]}\r\ncf-ray: 9f4f658628232678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T13:49:05.127389Z","times_seen":17799766,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":26,"dns":11,"connect":1,"send":0,"wait":97,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metawsparcieklienta.com/home/","fqdn":"metawsparcieklienta.com","domain":"metawsparcieklienta.com","tld":"com"},"ip":{"addr":"172.67.197.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T14:15:08.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metawsparcieklienta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 12:57:15 GMT","end":"Sat, 25 Jul 2026 12:57:14 GMT"},"fingerprint":{"sha1":"95:53:47:0E:B8:7A:11:B1:10:A0:68:95:45:B6:AB:3B:31:9C:91:C0","sha256":"D3:89:77:9F:59:6B:9D:45:A2:FD:8A:77:14:4C:7B:3B:AE:1C:C9:50:26:C8:F3:CE:30:44:62:0B:8E:43:AE:00"}}},"request":{"raw":"GET /home/ HTTP/1.1\r\nHost: metawsparcieklienta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 14:15:08 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Apr 2026 18:27:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUsuhozkS8IDHVCAVBpav8FV4Wf%2BD4zuO2q2ZCbL4%2B2PYsMF1BG7h70W3JrwBRZLKJ4hyZeRF3hCNBzNc0XCDj%2FGaK48A6ox3e0Qkn3jc0lPWLJavTZuz5mrGYvmuXLLx2Wt2jvGgFdrjA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f4f6586d8db2678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bb34d4d41deb6b8d5b2e11edcf887360","sha1":"1a1cfcd102399caca7ef99343e5156c9eb9a6d34","sha256":"3624e78b0ff3ab421658894cff8695e484f95dbc4cd21a7da583004e49aa579b","sha512":"eb6dd0db553d0ac34dada97aa14ea3535d9b77f6b450be3290e06630add572c55f7451be19188d7d338ea0e7f8eb84c25dfa950b63c63fa45f201d1f97faeced","ssdeep":"","tlshash":"7041304a9702084ba03293b09f679b44df9264038743567479cd26536fb1a18a2b2fcc","first_seen":"2026-05-01T14:15:40.064706Z","last_seen":"2026-05-01T14:15:40.064706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T14:15:10.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/ HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metawsparcieklienta.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":74072,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6069), with CRLF line terminators","md5":"edb20f74ca9942b4e7a16cede3600c84","sha1":"99603f6a2c3825dfe6fdf05b7759b3ea1c84674c","sha256":"7040f4167fb624f4eae705d2d8a9cddcefe1d0437f8e8099e1c1e0f115beb4ef","sha512":"61bb1599af4becb7a4d2374af33711b162ee4133542f9e12539e3615f7cc54b7cfb6f823d44340d544af7bfa51208e2c3a9b9bc11c35dfd5ed88edb77a22a1fc","ssdeep":"1536:MU9IZK3rIZKQ0sPLGYxpAgpm6FWudowGw7ZZb/6y8sTEmeiF/Rr:rHkiuKwuXkEqld","tlshash":"0673f7e8634ce2bd455386afdf366694624fd8b5f2619191b6bee33361c3cc0f10a864","first_seen":"2026-05-01T14:05:53.455609Z","last_seen":"2026-05-01T14:15:40.065556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":50,"dns":6,"connect":18,"send":0,"wait":40,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/css/fonts.css","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/css/fonts.css HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 05:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 758\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4cd5857a31ff530d10ce8e9975fd4f87","sha1":"9ad1b7a4139eb9bb8ff7c439de6173ed4d45135f","sha256":"57f87688fb3e217d0f7626e2b2daee0b9220b95467da957e14ecb6506e39c479","sha512":"77835f4473d28573dbcbde6f0261e0f42590846ce4168436d4e4ef02723fb0359ee99405d0aacbe3f56b43e6b85d9d9f5e0ee1be3a9307a899d7fc5cb6f3c4af","ssdeep":"","tlshash":"e6817640681fa227dfa24e8af3fb6f211d8910369a4941ba35f1274b4cd95384394ffd","first_seen":"2026-05-01T14:05:53.457396Z","last_seen":"2026-05-01T14:15:40.070519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/js/tagify.polyfills.min.js","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/js/tagify.polyfills.min.js HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 05:29:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3842\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10345,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8986), with CRLF, LF line terminators","md5":"0eba227e17abf24fc7783dfa91d4e9b3","sha1":"67d433e15ce05d97c47b937bab0d7d05ff653a56","sha256":"00af2ecc223f438a66e49bce1aa5b6deeb6d9d54b12057cf2a658a7f8116f524","sha512":"6c873be58f06bb81e1b66541edbd301d7c65e31f76badc0923633a38ab576d07dccf8b83cdfacb94b2517a01d3f1cd61159d8bafdd72caf9227d97bb07c6b811","ssdeep":"192:DDQHF0Oy+5yBuU/nCNrZ7Lsonfh6QPhyYYDCadpBgRozl:DDYLy+eR/nCNpsonfPy1hH","tlshash":"ec22c749f7a470b612eb21b5403f500ff23aa87eb45900e4a615ecf53db988d456bf38","first_seen":"2024-11-17T10:17:39.224106Z","last_seen":"2026-05-01T14:15:40.074815Z","times_seen":45,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaclientsupport.com/home/assets/images/purple-cc.avif","fqdn":"metaclientsupport.com","domain":"metaclientsupport.com","tld":"com"},"ip":{"addr":"77.90.185.200","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metaclientsupport.com/home/","date":"2026-05-01T14:15:10.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.metaclientsupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 13:20:57 GMT","end":"Sat, 25 Jul 2026 13:20:56 GMT"},"fingerprint":{"sha1":"E8:A9:2B:F2:CA:D9:01:CC:AE:E7:F9:EA:6E:F0:3F:C3:A3:62:EC:EB","sha256":"D7:3B:58:A8:50:32:4E:B2:8B:C6:84:05:33:1B:90:30:2A:89:EC:B3:52:49:DF:7F:13:AE:29:28:0E:34:ED:73"}}},"request":{"raw":"GET /home/assets/images/purple-cc.avif HTTP/1.1\r\nHost: metaclientsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metaclientsupport.com/home/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 May 2026 14:15:10 GMT\r\ncontent-type: image/avif\r\nlast-modified: Mon, 27 Apr 2026 05:29:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3553\r\ndate: Fri, 01 May 2026 14:15:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3553,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c661c5e7ab2d0bb345fbbe40a0f1dda6","sha1":"5224f0ef0bb9a18ef1b30bfc6f1499d2961e741f","sha256":"9bd5270d6ee3b39e5341bdd6e714b99ae5e2bb5016e610157b2347087ce85d75","sha512":"6d89a9137f816e954989d590ff8eb193e28bbbfb8fb6e1554fad46e34fcfa4f0b70bd1a8a65581a08305f2b5399991aa650ef9b703eab9863f7986d3280d8f5f","ssdeep":"","tlshash":"b6716e056ea80d5af41c33f19e2cef0b71b2736a00920688d53035ccc2397d98936fd0","first_seen":"2026-05-01T14:05:53.480958Z","last_seen":"2026-05-01T14:15:40.075965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"metaclientsupport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}