{"report_id":"ae7bf6b0-c605-44e7-a3a2-12542fce0766","version":6,"status":"done","tags":[],"date":"2025-10-07T20:10:24Z","url":{"schema":"http","addr":"metamak.ru","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"metamak.ru/","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"title":"Pаскрой свою женственность и создай гармоничные отношения с мужчиной за 12 недель на авторском курсе Юлии Маколкиной"},"submit":{"url":{"schema":"http","addr":"metamak.ru","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-11T20:10:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-10-05T22:17:33.15614Z","alert_count":0,"request_count":1,"received_data":89131,"sent_data":439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":5696,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metamak.ru","ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-11-12","domain_rank":0,"first_seen":"2025-10-07T20:10:25.147341Z","last_seen":"2025-10-07T20:10:25.147341Z","alert_count":94,"request_count":47,"received_data":1245040,"sent_data":21129,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":5,"received_data":140669,"sent_data":2796,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamak.ru/js/script.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce33f59a1daaab3f8489ede7babbbddb","sha1":"2d4090d3d255fd7b028eae632dda8294b0058f28","sha256":"8697126da802e7ee42f5b64b96649bd8afcc9f5e81a9c4a1a4d8b80a212a752a","sha512":"f29d23024edb3a11c9a78565945d37da8ed8c3f24268b2ebb20ba5d58025f58d3510a804340d4238fd2f0d9ec3ffbffbdbae08f3c79e515026acd2f86a0bcd6c","ssdeep":"96:AQipyDddDixJV/7iHpDibI5jdFt5pSDV++EIWXtJxtomlGDWtVAsl:AQ6yPesJtpSDVpEICtlomlZ","tlshash":"24f1849db575816808bf72778fbb8208efba511bd246c705bd9c0dc50f74190a652fac","size":8040,"data":"","first_seen":"2025-10-07T20:10:31.805161Z","last_seen":"2025-10-07T20:10:31.805161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-11T12:05:31.508632Z","times_seen":138845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/js/owl.carousel.min.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-11T11:38:46.792068Z","times_seen":67142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/js/jquery.maskedinput.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a9425d889ee5c9505a72bb30607d206","sha1":"989c2b04a3d2375f14dd379d7b5b4b3efeb2bcbb","sha256":"ccbf8a06449084139a373f5f4d0630e4a6d8c52fb46e4423b32cc99f3d3f8c39","sha512":"edc48a70d533b4f534e485b0b36b59ad0a717725fa87ca83859a0ae4c09c9b6a61a7b5e28cecb1c67b3d601b643b42a26ca6f000fde73444ead2ea1cbd667072","ssdeep":"192:Ds5rc4SP1sSINgSsmBAYcra3KHNagp6TRq3CAYD0:gd5SIg+3K9IU3BYg","tlshash":"6f222c84ffee2086466730be5aaf40cd503c85371499dc5bbc6c62902fa487d477aeb9","size":10819,"data":"","first_seen":"2024-08-20T15:32:58.223687Z","last_seen":"2025-10-07T20:10:31.761821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"18cb3e2ca1515b1f8dc787db18f0b711","sha1":"99e26bf5bde1f988a204d25cc3d15f0162a680da","sha256":"74b7a87cb0f9070f095358b28bfb85f897667424905b901c99ede7d920196bed","sha512":"f0125021e4256211efbb392c10c62bd4d90115925be67594f05a6e6cd7fdd42b1b3475ca93bcdca286334014c4158ece7aedaf64d4575fac3d3bdb300b9ca06e","ssdeep":"","tlshash":"e9f0ab9938981425c3b6116967eb610d7416653f0c0abd25f90dc4422fae9ad086ba4c","size":440,"data":"","first_seen":"2025-10-07T20:10:31.822646Z","last_seen":"2025-10-07T20:10:31.822646Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-1.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-1.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5201\r\nlast-modified: Tue, 17 Nov 2020 10:04:27 GMT\r\netag: \"5fb3a02b-1451\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 135x135, components 3","md5":"11fee6939ea82e55cf2a28186472de96","sha1":"77834f9b152732d11c4c73a594b60cf04c2452e0","sha256":"124ff8017221787d411ce371ec641a8e4ad2ef611aa4242dad1ae858c42612c1","sha512":"363295d5236e9892d26b3be6cffebeaabe00300c88e0f18fab5c802f23674a41b2c961f36a505764f60a579df14eabae6b842fb031979a2a3fe2bdab93551d72","ssdeep":"96:bAK9vp3jCIeC/Zu0UREmty8sif3Cz6o7YMMwbJuVhWTQ/91X3qJ9nY:T9JzeOu6mkaf3Czrd7xoMY","tlshash":"d5b1af70bbba282bda700d708cfa202f374074560cfa8defd545850403ab39519c51f7","first_seen":"2025-10-07T20:10:31.718381Z","last_seen":"2025-10-07T20:10:31.718381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamak.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:16 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 457964\r\nlast-modified: Wed, 10 Sep 2025 16:49:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23304, version 1.0","md5":"de347c8e5dcd2bedbbad48599deadd76","sha1":"16e8268fd11ba443a3a5b357fe4025be857277df","sha256":"51b2dac698333379dc3a3486393fba787d17f1dcbcb50f46582ca759d53c25fc","sha512":"ffebcabbc926ae04fe3ef32965a53cd386865fb293863763e186f0d944c9267bbc720acfda02412d64b922f32551a66aab5a660a3f7d5d8d2d605507cc878dd1","ssdeep":"384:/SmVFBgUNyn2+SaFFbj/yg0mlWxz45dLRWrhGtUhEY8/KO4xoyRzARXl/T:ak/yntrf6g0mlWpfrEUhz8cxlzARXlL","tlshash":"29a2f1c56254c4ed699fd27a141b6bd776117a8d2e9310f8cb815b2b000fd98ff4089e","first_seen":"2025-06-19T17:31:29.320176Z","last_seen":"2026-07-28T09:41:43.217324Z","times_seen":68,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":127,"dns":1,"connect":21,"send":0,"wait":46,"receive":7,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bd-4.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bd-4.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 848\r\nlast-modified: Tue, 17 Nov 2020 10:03:37 GMT\r\netag: \"5fb39ff9-350\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 13, 8-bit colormap, non-interlaced","md5":"d04d64798a93b65fe82e0c03f3fe17b8","sha1":"30a6bbdd4b6bc058b89608351416d3463dd7a97e","sha256":"83b0c1194ff533988344de0421b0214c0a3ebe9183b38e756bd66f67f146f3d3","sha512":"faf96086b1564ac03d8381816ec867bf302e508fd47862cb3576bb04a8bba29180b60e1eee2495dc8f72ed9e6cbe7c0c67165a97dd05a161bab46d72e64db1de","ssdeep":"","tlshash":"a30144e665c124b48ff37e419cdd5191a86147a401397f112a26383580b02642544471","first_seen":"2025-10-07T20:10:31.721764Z","last_seen":"2025-10-07T20:10:31.721764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/fonts/manropelight.woff2","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /fonts/manropelight.woff2 HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21476\r\nlast-modified: Tue, 17 Nov 2020 10:02:17 GMT\r\netag: \"5fb39fa9-53e4\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21476,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21476, version 1.0","md5":"eedac74e2a2e164c4422ea454b9a172e","sha1":"aa675ddfab4f1c16399bc3b55c5ced10b62e62d3","sha256":"64b7d39f4f825cefe7260fa2902c6b297097afbd2797d6ad2b62a1e62276d0f2","sha512":"d829d55c5cd772a16f963c45528f6d1094711b126480a93643e8abdfd8f679951c6c550c763bf220f7456bb8db36146da89f74048837b20e3ef27b4ae134c7c2","ssdeep":"384:l2FKV14RGXJumKj76bPnId8DukaDpW46PCkJyg1YuY3IgVwfvgdYLlFtJd5fjChZ:laKVj5ubj7KDApb4hyEY3IgVwfIGrPIZ","tlshash":"b1a2e128cd0c54367868917680285ea802dd71c57bb3b3a81fc35ee69ba29607ef50db","first_seen":"2025-10-07T20:10:31.723363Z","last_seen":"2025-10-07T20:10:31.723363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30774\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:43:20 GMT\r\nexpires: Fri, 02 Oct 2026 12:43:20 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 458800\r\nlast-modified: Mon, 13 May 2019 14:37:17 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-11T12:05:31.508632Z","times_seen":138845,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":64,"dns":0,"connect":7,"send":0,"wait":8,"receive":8,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/logo.svg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 17 Nov 2020 10:02:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39fc6-1e78\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbc2cc021c5e097be920f0ca2a4ee19f","sha1":"1000ff9919fdecdfbe9f67790fd852fd9d308ca3","sha256":"af6a38fd49b77b6b7207df9372eeb0220d47347f5d4f0307b72994b1edc40947","sha512":"eae3e363ef312bae2b32607f0e4036518d1003c80c4b2d367f910bb208ec587d1b0a7f8aac9de883d37fc12998e9cecd2e3389320acc2f265e70d52b239c9457","ssdeep":"192:hQAnYiLqxUcQh5OgcoZAth3DLTsy+r73MLYBXCff1YX0pR:hQG6akgcz3Du8LJYi","tlshash":"c6f195b4eb5405b9cb89078956e00d903b4b140f7172eab8d79fe7b36823ee4482597c","first_seen":"2025-10-07T20:10:31.725373Z","last_seen":"2025-10-07T20:10:31.725373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bd-1.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bd-1.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1023\r\nlast-modified: Tue, 17 Nov 2020 10:03:36 GMT\r\netag: \"5fb39ff8-3ff\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 11, 8-bit colormap, non-interlaced","md5":"9bda852b8cae18bc8c8e7aaf86a31b9f","sha1":"cd50bad30f6b78a32570f1b73e7d8f7734bfc4ef","sha256":"b1b56b1d7dc2af7ec0c2fba0e3f5dd9c8bc035ca612f3c37c5cd1fb27648b447","sha512":"383dd5abf85cd690ffb22734ca9f5968983a0081312fea436fe41bc6a4056bfe7b2796f5e18ee3a420902ccf8df1b6d8384ef229ebc443d55297369cb297bb07","ssdeep":"","tlshash":"f7115669e3540d2f1c3b96218cc8d5c8fc4483e914960409a0f4bd5a1e9a609b45a057","first_seen":"2025-10-07T20:10:31.726903Z","last_seen":"2025-10-07T20:10:31.726903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bg-4.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bg-4.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50404\r\nlast-modified: Tue, 17 Nov 2020 10:03:38 GMT\r\netag: \"5fb39ffa-c4e4\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 504x564, components 3","md5":"ca9adb415ae69ea6e3c2a3a86a71b156","sha1":"32ce9804d51f8114f0c17d56a768bb33a6b13009","sha256":"84b84496b80c6fbbe3a7ee12e345ef7d18bc1e4c2b42a4b7d31e0048158df8ac","sha512":"8a7089c5931297bd5a920c7edbe45e552023697085e484d646e232b0739934c0f0be38baf68c70f63d790ed65f75443230d2b85fcc7aa4fc7da8f1d0cad719d3","ssdeep":"1536:VxwzfPS5KiP/jwwZorRquUeZHXt5SWFB32F:DwzfaFP0wQZ3+WzmF","tlshash":"8a33019562f4a801f032673200595c768f19cb7d272fd21a2fd48c5d5fa0a2ef69af60","first_seen":"2025-10-07T20:10:31.728221Z","last_seen":"2025-10-07T20:10:31.728221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/reasons-bg.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/reasons-bg.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85013\r\nlast-modified: Tue, 17 Nov 2020 10:03:58 GMT\r\netag: \"5fb3a00e-14c15\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1927x991, components 3","md5":"e1893e45d2db4da83fbb8d8f15d6408a","sha1":"8f6a8efbe0535d2c26c1349434f41a28c02e50f4","sha256":"365bfa43f43eb8a7cd8382b6b28558a4e66668a259e766ffbfdb4f062e456697","sha512":"c020073418ad89f26b449f70065cc0235546627c7bd9a9b6a20d931b362d7e859e94f5a98e0892a7a189e0da91184317eace46bcd8d030e8eab052bb93aae67d","ssdeep":"1536:Sw/7x4eL/VmHex6EShELFFD5k8x7yG2439J6b+/f8/zSOhRoSAhyRvk+h+:9/tTJBHD5VxWj43z6Of8/Lcyxk+0","tlshash":"6783020b13b28041e9f845f494b3972f5b78373544fbae4cda2c19767cc9a922e44e92","first_seen":"2025-10-07T20:10:31.729676Z","last_seen":"2025-10-07T20:10:31.729676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/reviews-bg.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/reviews-bg.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62957\r\nlast-modified: Tue, 17 Nov 2020 10:03:58 GMT\r\netag: \"5fb3a00e-f5ed\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62957,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x978, components 3","md5":"33886ed3841e55782ec6401f87622828","sha1":"a358d14c2b8678ffd4f12d0f8744d71e095d33e2","sha256":"e59c5c790dd7d75c670f3e5685718a56b3a6fa3daec31b18336e4a134f332779","sha512":"cd11c385d20c64c755af094038a29305bdff800fe474a7e2a30fdedb51103c8ed5670a19c40b25a421a786dfda52d311d88f6bbd82da81cc49e64ba62baadeb8","ssdeep":"1536:EEjrNkfNnIfwQlxf/AzT2E+3WLIIW2p3L9XctJ/g:1xkqfbxAfXBW2pbKc","tlshash":"6053cf625331172dcced387eb487ee37869a0344bd8518fae4b7ca8341f8aa0796471d","first_seen":"2025-10-07T20:10:31.73113Z","last_seen":"2025-10-07T20:10:31.73113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/question-bg.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/question-bg.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 102945\r\nlast-modified: Tue, 17 Nov 2020 10:03:57 GMT\r\netag: \"5fb3a00d-19221\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 605, 8-bit colormap, non-interlaced","md5":"1d352912032747059924563c9fd91be6","sha1":"a227cd6b404ce5b4df2ba70a37df50619993e3ce","sha256":"8bbcbc7776d7bd8c02b1119698187a9cd6db7e4f043057c8cc8e8eba1410d7f8","sha512":"4f2b7a5f4f7ff5f87d5048206788f7ff274b731beaf8b902328146f631ce372c42a1d99f97ec60e012b1cda27eef2541b6fd5b9bb73e0510c9f7b63c44e32665","ssdeep":"3072:oRNK036ANcYUXSnsUnNkZKgTmKhxS23gjH:oy036ANcYBsaNkIuvhk23gj","tlshash":"b0a3121e58bc839e5cab574b9c2a1a7b9c2cd062492740b0444bce75367df5c5b3f60b","first_seen":"2025-10-07T20:10:31.732629Z","last_seen":"2025-10-07T20:10:31.732629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/main-tag.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/main-tag.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 12512\r\nlast-modified: Tue, 17 Nov 2020 10:03:57 GMT\r\netag: \"5fb3a00d-30e0\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 198, 8-bit colormap, non-interlaced","md5":"cf33488429522da558413d1cdc53ea10","sha1":"0b4a53f70b894be537baca503395b50309c5d5b8","sha256":"a5eb3fe141202f3e33a2305d63672a23e70b019aa51cd18b9b8992b2247436b5","sha512":"7f5870ea0a620675c53c31bbf7115c1a4db173e4ff91d70557677873783a0618a82ffc7fb8b7820250e978de95df69c5747aef284beabdc495f190e13e94b29c","ssdeep":"192:nmbKbrPVSDeZdkA3LCQqtI52n/A3lEP2xMfNsW44awwU4df:7YDukA3LqtsN3lE8MfNsTdzt","tlshash":"2142e1789d3e42b1ca177239e71c7a44d9452fbec427dd084c067d8a4a735d8b8cc07a","first_seen":"2025-10-07T20:10:31.734191Z","last_seen":"2025-10-07T20:10:31.734191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/video-preview.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/video-preview.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69940\r\nlast-modified: Tue, 17 Nov 2020 10:03:58 GMT\r\netag: \"5fb3a00e-11134\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 467x741, components 3","md5":"d7202097e20b739bb827483d061699f1","sha1":"3b7af2dd7eec19d51f9d5741e3d37594128a4063","sha256":"22c88f7b10501659d4d1bd206e0dcab971e95bbc963ec400985a44e3fa44a7c7","sha512":"5a9a096cddb3531ed892a95f5d9761f059cb75c5dd84dfd0e9026d2cffad6e1df33d0e00c3cea76cddb29f102b52742abf80d430956c48d83f252c56846e2158","ssdeep":"1536:oaTdOVLFUg7FzJq4XSSJSG72Cx4RevjwB9NxJ4jztIlJF3oX4QaiR:oYOphJq6SqSGyhRl13JFYX46","tlshash":"636302924fdaa997d78d1abc16bdc9490140d24b90730f5e5479b2823fef3a6c20f21d","first_seen":"2025-10-07T20:10:31.735841Z","last_seen":"2025-10-07T20:10:31.735841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/icons/social-inst.svg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/icons/social-inst.svg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 17 Nov 2020 10:04:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb3a01c-107f\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"745b88a0d35db2ed34e636a65c192dba","sha1":"9066b549c5d177bb1c200e0e3903ba4c6ca0b604","sha256":"d31fa29edd39e2a4575b9005217b5a34cf4bed18231bf883ab22947332798eba","sha512":"64e9c2c3732fef5968f23b64fd528a8354f9e960efc30a1256b9bde83887efa9b3da7fe5cb69e51f2e683808afff9e4b9c60fc7405060ab8fb0150d33096f01f","ssdeep":"96:zMj2ySdi79EkZPu1MRfel6ahIzdi79EkZPu1MRfel6ahIP:a2niREkZPREIiREkZPREK","tlshash":"d29131fac2e623bded82434e19f2b06475b4295775b0e1acab36a7460007eb301b1f5c","first_seen":"2025-10-07T20:10:31.738122Z","last_seen":"2025-10-07T20:10:31.738122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/css/owl.carousel.min.css","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Nov 2020 10:02:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39fb7-d17\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-11T11:38:46.802339Z","times_seen":43701,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-3.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-3.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16950\r\nlast-modified: Tue, 17 Nov 2020 10:04:27 GMT\r\netag: \"5fb3a02b-4236\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16950,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"5bf7a6e48642e4b0aa25d7440dec4516","sha1":"5802ece2a73719b59f26f1231b31eb9d0bb008f4","sha256":"132b5d4705b79fd26cce56e73581199cf97f310f2045ede40c4f6e8b5ce76991","sha512":"e4b34925b4b620ac0ad7d61d436bcb9836a2e638d158d158e2611ae05ce80a277bb3c119be599a69253146e5873a4323bae350a876bf4caad55e536d91fd98bb","ssdeep":"384:JMTwZudW0CjBSON27YnQUjlNUESBojpbhSRCp7B/372gGoFfKO5dl:JMTlWzjBl3fltdbhcCtB/3GSK+dl","tlshash":"b072d16d767619b5da0de23ad42c6382c024f7f0a97c6a0f4279d572db40648ff922c6","first_seen":"2025-10-07T20:10:31.740751Z","last_seen":"2025-10-07T20:10:31.740751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-6.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-6.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14340\r\nlast-modified: Tue, 17 Nov 2020 10:04:29 GMT\r\netag: \"5fb3a02d-3804\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"f7c4e45ff289ebffc6733df3db9284e2","sha1":"2e7e6726295a124a9c972725ec293e9f3b6caea9","sha256":"e06da17e09c7abdb4b2ea4a2fca2ce6663d46c6416c9e8c5b4a327123b5ec402","sha512":"ade1efab5e32188a9c332d12756792be90a037f7a7daf20a7d253833ca49acfc55b3c68b0271589609488f407d0e5658bfc78d4d7cc94b489353c538b2b9d25b","ssdeep":"192:J+5X3krzqKVp1gol2ZsnfsIe+z34moT5gQhMsuFOTUahQT4Bv0mUUzoyKQ2Sox8:JunkrzJ20tnEG34motgflLs5BvnNZ","tlshash":"8b52c188f241568f2f26cb03b1cf12444fd4a8fbdaa66b5e31e809e2d0954924e1d7ce","first_seen":"2025-10-07T20:10:31.746193Z","last_seen":"2025-10-07T20:10:31.746193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/icons.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/icons.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1631\r\nlast-modified: Tue, 17 Nov 2020 10:02:46 GMT\r\netag: \"5fb39fc6-65f\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 100, 8-bit/color RGBA, non-interlaced","md5":"dacc8d88746ba535a7d7deae98203ace","sha1":"7d3c845553a7b021d140b6142fbaada407dbd426","sha256":"682da8b52d0b20b94f7b67084f6f27eadfde605b6b3644e2f718f3daaa7f317d","sha512":"853b7db27bcd7828f9f1cca2aca65a32f8d1318eeb089b34fd7eb6880d14e1b5fad9cc6501bd0fb58a4bfc3eadc5bcc76f3e6f4928b85b079e61807eea9b4050","ssdeep":"","tlshash":"ce31e806fa87ad111dc994c31cd2c1a2c8234ec45cc0f0a2a0dfe41bada52b8886b0ef","first_seen":"2025-10-07T20:10:31.748333Z","last_seen":"2025-10-07T20:10:31.748333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/fonts/manropebold.woff2","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /fonts/manropebold.woff2 HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 20416\r\nlast-modified: Tue, 17 Nov 2020 10:02:16 GMT\r\netag: \"5fb39fa8-4fc0\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20416,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20416, version 1.0","md5":"93f7eec5ca99dc6cb7e26d336041c620","sha1":"35bc781c6b590f901ce62e83241ccae3611d8c25","sha256":"6bdfa36f293c25898c5700ef178cc84880ebbb410edd8c56cc9f0e78e363eb4f","sha512":"5d2f54aeabd52027fa888312ab85ce3d95ec1727ec06b6d243cfb8ca7b6d287378809201efe0892802e9ce75f8240faa94a1c8141092452b089cf67dce50fed0","ssdeep":"384:9sti6epMFe3OYUWMBLTLsvVKrAVC2UWnH4uoVMKxDvF:hSFeAXJsvVQAVpUo4uoLDt","tlshash":"b192d1d3e0443653cff01abb21ada6a79b09ce666a1781a3c91f974c5e901433593fec","first_seen":"2025-10-07T20:10:31.751144Z","last_seen":"2025-10-07T20:10:31.751144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bg-1.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bg-1.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43922\r\nlast-modified: Tue, 17 Nov 2020 10:03:37 GMT\r\netag: \"5fb39ff9-ab92\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 418x564, components 3","md5":"faebfdfad016112dadb9f34b307269f9","sha1":"65a6877770afe527a82ea73f67a13ba3c25cc8d1","sha256":"6ab8cdd7ec17f9cd0760f4164263eaa7f78be0d2fcf24e926e9c79887b8b1de9","sha512":"b796968624c2100a9e54297b63a402f44065b0c8819c5556891963c1869f3cc08c7fbec2f73d0fddc1017fabc0c764c17be107032c96ed380de5dba069ced326","ssdeep":"768:H3Y9jCCjbF+ZW0O4V1rGqcxk0HHkAryMdXgNX5zGdZ4mq4Ya60g/b:H3Y9jCCjErO81rQHHkAvdwXGkb4Yaw","tlshash":"1513021f7e4c9b34f63014faf7a18410b78f6d64e2e9b2db222902496358678a1d719f","first_seen":"2025-10-07T20:10:31.754305Z","last_seen":"2025-10-07T20:10:31.754305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/icons/social-vk.svg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/icons/social-vk.svg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 17 Nov 2020 10:04:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb3a01c-4c1\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45f1ba0c29eb8f28e4338ac89c2d99d4","sha1":"4d208a31c80db9ed5010f3ca1e2edc94d682e93d","sha256":"00050adca872fd908c9f1a5674814d47286ee603572643ea695c59483dcf0de1","sha512":"8ba7a3d43bcd64687b694fe7ee157f57937275756b4417168e62bc746fb57de2f7fe731c40dcddccae8ecda131709ad4af6e47e9820aaacc0f0c55b1b11abb78","ssdeep":"","tlshash":"b7210f5dc269e2ec5e3a0fb0e57e3092d0fb80db63c5021ee350ed60a5305d127884a5","first_seen":"2025-10-07T20:10:31.756274Z","last_seen":"2025-10-07T20:10:31.756274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-2.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-2.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31424\r\nlast-modified: Tue, 17 Nov 2020 10:04:27 GMT\r\netag: \"5fb3a02b-7ac0\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31424,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"c9e3ec0b47f6b311b91fc1665607841f","sha1":"10faf41d4a70f36c8b0ad01c425b07a611d83dc0","sha256":"e3b920c4aa3c4ea6104fc0d2cf06993643f35b3359e24da4734d4465eff35862","sha512":"22895ae1cead3bd86c1c2756042549c0682d39e1172f7e11eb295b972e830dcf663ffae954d80740696900a263f00fc302fab1e7122996b79fe00c1e49754733","ssdeep":"768:Jz0QTfvqeLGQvPIlE1VSOdIMnHGrnEXqSbVgz5KyoFGo:JLTqeKQvwSmOvHIsqShkKz","tlshash":"6ce2f20f7680734ff1e3b0fdc8c2a609e065e7f19c5da652bc81643a199ad97f152354","first_seen":"2025-10-07T20:10:31.758223Z","last_seen":"2025-10-07T20:10:31.758223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bg-3.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bg-3.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68556\r\nlast-modified: Tue, 17 Nov 2020 10:03:38 GMT\r\netag: \"5fb39ffa-10bcc\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68556,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 527x575, components 3","md5":"28622406e411c425b4dd9f85d6956ebd","sha1":"72cbbbf48a9525b2597f8d65cd6cd178949a2149","sha256":"37f605b9ba0980e3da27786b54b9147cfb5205fe0eaab74c2d7d9cf9f0ee17af","sha512":"705f989f817e5bec09cb4006b012cbe6356539cd454fc6bcce12ef8c857162bfea943d8300fa0e7863e7a5481037ae4619b613edccfdf0bea8e37d3a281a2d8d","ssdeep":"1536:8UAcfeTqhAKkdOcOCQbo3+Wf3eCkOdKMjQgNNLQTZnrfr4RvJRA:kcQq5kddOCQbo9DKgNNkTZLr4RvJRA","tlshash":"59630256f6a7a5adf8f8e2b17e9040ab0158c854dc5cef97b853fa310f89580a36e150","first_seen":"2025-10-07T20:10:31.760037Z","last_seen":"2025-10-07T20:10:31.760037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/js/jquery.maskedinput.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /js/jquery.maskedinput.js HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 17 Nov 2020 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39f90-2a43\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10819,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"4a9425d889ee5c9505a72bb30607d206","sha1":"989c2b04a3d2375f14dd379d7b5b4b3efeb2bcbb","sha256":"ccbf8a06449084139a373f5f4d0630e4a6d8c52fb46e4423b32cc99f3d3f8c39","sha512":"edc48a70d533b4f534e485b0b36b59ad0a717725fa87ca83859a0ae4c09c9b6a61a7b5e28cecb1c67b3d601b643b42a26ca6f000fde73444ead2ea1cbd667072","ssdeep":"192:Ds5rc4SP1sSINgSsmBAYcra3KHNagp6TRq3CAYD0:gd5SIg+3K9IU3BYg","tlshash":"6f222c84ffee2086466730be5aaf40cd503c85371499dc5bbc6c62902fa487d477aeb9","first_seen":"2024-08-20T15:32:58.223687Z","last_seen":"2025-10-07T20:10:31.761821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/tariffs-bg.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/tariffs-bg.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 49324\r\nlast-modified: Tue, 17 Nov 2020 10:03:58 GMT\r\netag: \"5fb3a00e-c0ac\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 609 x 508, 8-bit colormap, non-interlaced","md5":"4d10fcb8b7e64d5e6423166156649a41","sha1":"21c1d75c57e48b01c7c0b46e595e72c3e22cd930","sha256":"e9ae0ca7d3168edd7c7f076fd88c9730369f40b8461b1ae4171676e88840664b","sha512":"d1371282a524c6ab6e2aef8d987451bbbb445574138ae2c3ecedcb31344687e61311023fec323fb8d90a09a399bd2dc925d20ceb8b9daa1f1f86ca4c13e03708","ssdeep":"1536:u5X8pHIZ/YkrHImAXFnihMdW5tXvficNJ:M8oZvUmAwh751ZNJ","tlshash":"0623f2f23527fc919d1cb6a12f04f00e2f951ae8bb5073a49e0dea1576ea82687d0dd4","first_seen":"2025-10-07T20:10:31.764133Z","last_seen":"2025-10-07T20:10:31.764133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamak.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23224\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:01:20 GMT\r\nexpires: Fri, 02 Oct 2026 13:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 457720\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23224,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23224, version 1.0","md5":"9401d0214a9375f173f72cc417f6fa06","sha1":"e90a941885a5c6851fe6ca752e5b7a1cc186289f","sha256":"28453852ea165c47b5a941be00e418402e1407002ed87507f062a1e316328fe6","sha512":"8cf427deb06d8440cc0f20e4d783946c689c2cc6bb36db566bdf96898819d63c7b4f468e285bb31446d592a56fb1ba03d12d238b6ac6f1a6dd5d2a2e4437224f","ssdeep":"384:XjWBgfEyvhQi76WoZqn7XdrrTTgBOfdvZhCCKwsrsjxiZxG5juBCu/f3gg4:z1JQi1pfrXwgSA5juIuXw7","tlshash":"9ea2d148097543e5c57213a84b5e9d80dee414b07c2bc1aec8ed8e24edfe9526e8bf5c","first_seen":"2025-09-15T13:37:59.974647Z","last_seen":"2026-08-11T09:58:39.910941Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":104,"dns":1,"connect":7,"send":0,"wait":39,"receive":8,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-07T20:10:00.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 17 Nov 2020 19:47:26 GMT\r\netag: W/\"f350-5b452c3a8d2b7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":62288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a2304887180d64b45c58891b90728c62","sha1":"7d688ec6a174ae1f9d473c066f1efe8716656430","sha256":"2303eb796a15201ffc11e2e5b69a3799081d90e043f6ec4051ace0bc0ff7555b","sha512":"043be200ce50c0b33ede21eebd15f08d6688bd913fc532824f0c1a7c144642d93abc25a57f10dc193d1b44a5642f4335773dbedd71e09600a1a9f42a66d2605a","ssdeep":"768:LWXj4xXcn+ls0WXeWIFO4A49zUGuaro5mG9:LWXMxXcn+l9rNFO4A49zUGuaro5mG9","tlshash":"cc53ce2014c628ab0072e446dd106f4effa545bfba5a261236fc6baf7ff2c10c55b259","first_seen":"2025-10-07T20:10:31.765938Z","last_seen":"2025-10-07T20:10:31.765938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":139,"dns":50,"connect":39,"send":0,"wait":62,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/css/reset.css","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /css/reset.css HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Nov 2020 10:02:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39fb7-460\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8368c29e0b10df941346e514fb4e406","sha1":"38e5926c51cd4aee83456ac025bd3b90aebbe2af","sha256":"b867e9cbdcce2a5ba010ea40a04fd82129dce582da22600a62cbbf917eaffdc2","sha512":"3a41f44a14e17a000f3bd323c5b44fa1c1949e7c8dc60680d55d97f50f7d7ff08392d37fff46103f28ff0c453381a9be597c9c6325b44bb48299747bf6106458","ssdeep":"","tlshash":"d921d02dd53248d05bc9c4b8b62ade18e76c821718898cb5f49ec71a9f4516884d379d","first_seen":"2025-10-07T20:10:31.767475Z","last_seen":"2025-10-07T20:10:31.767475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-4.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-4.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18287\r\nlast-modified: Tue, 17 Nov 2020 10:04:28 GMT\r\netag: \"5fb3a02c-476f\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x199, components 3","md5":"a9117d5b6ea51b6a3bed1423b94bc707","sha1":"621e03a82e257d65c0f05957893ccd0bfb911119","sha256":"e67fbb7e8f729c0b24ac9c555ba6bbb541d116ba0d9049d8fd034a02587da9d6","sha512":"e81b683996a9c17692d7dc28ec8f0839425fec3dfb01c7ab82aa49237fb58c0df4b31ba908b18c10fe3aae9e5cedd6b9e118635ef9955ecfba1391babe647d85","ssdeep":"384:viaUE4yF+VxosBWpNfBKPpIGd07vfnNibnW3AhSx9yGngyju8QZGGnd8wrdHhS:v8hykbWp1MP6Gd6vfNQW9XJtGd84HhS","tlshash":"1882d03a3c12c1e1ded2e5f76940439a8146ddfeb24cae701964b44e66898f64bbc487","first_seen":"2025-10-07T20:10:31.768659Z","last_seen":"2025-10-07T20:10:31.768659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/about-bg-2.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/about-bg-2.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 8410\r\nlast-modified: Tue, 17 Nov 2020 10:03:56 GMT\r\netag: \"5fb3a00c-20da\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 171, 8-bit colormap, non-interlaced","md5":"512e6539c396bb18367f83ab52e8a0e5","sha1":"77630120b17f53c038043f36ad3703bbf32a866b","sha256":"e90b6d2be6074a6d89136156b691a09a954aa40586a1df3fe5a11668e4de7220","sha512":"a38dff8c4d9debb74adaf0a07cf39295418000e2d27fa51675163e3110e0d73b51ca0586e5253fad3974b5dcca21bd07381745534652b40efbdcf3f6d93996b0","ssdeep":"192:qLY365DvvZ7VqmfqbfbW422E9hf5vLfJkomsaRQhYDqHFvWZc:qEoDBVqmf+9chf5vLx9aeSD+FvF","tlshash":"0f02b067d93494392a6c4b1303068326797c8bb5d4a22f167b06c425fe0cb7cdfb65d5","first_seen":"2025-10-07T20:10:31.770777Z","last_seen":"2025-10-07T20:10:31.770777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bd-3.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bd-3.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1027\r\nlast-modified: Tue, 17 Nov 2020 10:03:37 GMT\r\netag: \"5fb39ff9-403\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 11, 8-bit colormap, non-interlaced","md5":"5e6b2c9e4f2489eaced39d6dd2d09ed4","sha1":"9c63a14afd9a5c42b640a60dd8ac4df6de75d988","sha256":"ed472e7d673f4634b60b18dd420b4fa5673c247649140ab9e594018e203876e3","sha512":"3d3d333c50c86c3cd9b65ad5fe8b8485ed03589a056c2e91042ba51d88876b1791c7cb810ef99b9a83f3a194727332bab05bdca221342efb179682b04f9b4c62","ssdeep":"","tlshash":"f211864fac3865ee9f0931123dd329bee3228b1942190584554eb96831b1fa12c49942","first_seen":"2025-10-07T20:10:31.772378Z","last_seen":"2025-10-07T20:10:31.772378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/about-bg-1.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/about-bg-1.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 15665\r\nlast-modified: Tue, 17 Nov 2020 10:03:56 GMT\r\netag: \"5fb3a00c-3d31\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 300, 8-bit colormap, non-interlaced","md5":"55c5fb41a82e3ad33acb2360d2ebbe68","sha1":"81330000f3d7bebb278529d47f087afc3fdce251","sha256":"0bc5a0f912ba943fbe8cf6423abcbb1db0cf7b7b8f17e9aa7e4c71b24cb8e8f4","sha512":"b2dc34e492dabc85982eff1db3e76a55e1746306f50a5c16e645d5d6b3da0c35fad8aa7521b080965c73da86ed4e6e6e13161b04f6d2e39d842810b280572327","ssdeep":"384:MNd2OFkeD542fYFfWwaAA4yPZxcDu4uK4Tu+Pd5v:cWac+w1A4CxcDt/4Cq5v","tlshash":"ec62d044f4d3c259b54e23ba5205a2f4e605e6430c03588db54bee7df996cd0c5eb668","first_seen":"2025-10-07T20:10:31.773637Z","last_seen":"2025-10-07T20:10:31.773637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/tariffs/tariff-bg-1.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/tariffs/tariff-bg-1.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3910\r\nlast-modified: Tue, 17 Nov 2020 10:04:41 GMT\r\netag: \"5fb3a039-f46\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 271x97, components 3","md5":"254d515e7b61caad2f067f57c37b5353","sha1":"6200a9ab2a4ee9e9d78cb7d8e6f2723ed41307a2","sha256":"efca6f06972676a30b504faf1e9cac339ed5c8d3e6f5d57c0f1369fe8d588234","sha512":"26cfd2f3be6bbd876a460834faa60006a1b133eb8f858bb93d4e205a974920b97ea3a87668e50e561a0c8b1205ef3921ab0ce81aa1bb26614eacdf406c3396df","ssdeep":"","tlshash":"17813bd6e59b5847f0b027b28a0c5bb6394f649912b5637532a438ed063907eee490b8","first_seen":"2025-10-07T20:10:31.775367Z","last_seen":"2025-10-07T20:10:31.775367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/tariffs/tariff-bg-2.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/tariffs/tariff-bg-2.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2972\r\nlast-modified: Tue, 17 Nov 2020 10:04:41 GMT\r\netag: \"5fb3a039-b9c\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 271x97, components 3","md5":"cd6c366a82c4b08c2200e40282c5d177","sha1":"a93324aba02b83bc82b772f6a0d34b4b43114edc","sha256":"cccdab917f3e03205082957bbebbfa2317f687e7b312ff2abb6840d667bc9522","sha512":"ca464d2f8beb79ec8057e84a5a6928816e5cdacadd28d9096996e4365e4b30385773d847084e5abf7236563af5d64a3964baad6904133b51808906d9eeb30f4f","ssdeep":"","tlshash":"75516dabe3d46ec5e8fa573578e21607b3bde9416af7075c603d84808a2c0789df520c","first_seen":"2025-10-07T20:10:31.776786Z","last_seen":"2025-10-07T20:10:31.776786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/fonts/manroperegular.woff2","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /fonts/manroperegular.woff2 HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21524\r\nlast-modified: Tue, 17 Nov 2020 10:02:18 GMT\r\netag: \"5fb39faa-5414\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21524,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21524, version 1.0","md5":"00eb7ae1354ada213e1688ca6ef0d2c9","sha1":"d850ce9f548b173b027b4130c722360545a61b12","sha256":"1a6ce748566b9a0adcdd06fe8f0473904cb36fc1e37c8abc72974709f80baec8","sha512":"c56f810e1d4a555df68d0117f89ca99128dfa348dc7022a12d27a1ab0fbd7fb2727cafe07546f1c290bc47c7034ee2a101d01cc92499d3ca85cc7228a48f9ce3","ssdeep":"384:bbdR+s2dXxNSt3qU5rYrQj6pODgZqpHFKkq9RCc5fFtdlz5nxm85FPWLnZuqXvUC:XdR+s2dXxNiqU5MUjWZZsHGRCc5fJ/xU","tlshash":"4ba2d132579e2388c3e9ba62271c2ed3b847504e89497744c5f36297c198763425a8ef","first_seen":"2025-10-07T20:10:31.778099Z","last_seen":"2025-10-07T20:10:31.778099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/reviews/photo-5.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/reviews/photo-5.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25157\r\nlast-modified: Tue, 17 Nov 2020 10:04:28 GMT\r\netag: \"5fb3a02c-6245\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"547a6383db5463436d45e5962e29a4f4","sha1":"b67e5c76e43fe51b96c6c287d7be6a72ad78e9db","sha256":"d7e25108baa44ba99a9829a962fdcbc6bd031353a8a7c3633f41251aaeaebd94","sha512":"ac5b5064cb31b73bacefd13504bf961d576dc52c50ebc02699eebbac606476b3b598e1a09bec580724b19d4bf6f41397b4d2aa01ea438a1e6e2856c26775dff0","ssdeep":"384:Ss4xmY2OWEQB8MsyvIx3Pt6BNx7UyAhghXqbsORlJMom6mfPr7AIp9az4KZCzw:Ss4vWj8T9gNx7UyETtxErpczjU0","tlshash":"b8b2e16670bcc7aee6b359f2a8727285653134e516d27f39ddb60c03cc148b32962a85","first_seen":"2025-10-07T20:10:31.780317Z","last_seen":"2025-10-07T20:10:31.780317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/main-bg.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/main-bg.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75834\r\nlast-modified: Tue, 17 Nov 2020 10:03:57 GMT\r\netag: \"5fb3a00d-1283a\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75834,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x920, components 3","md5":"8cc5a2789b37f6aad7c95b0b2cb0c6f8","sha1":"f08ae6c9e4c24472ac17b1501f7b1af81f44b37b","sha256":"9a4e59727966f8374c1199e3d737a30903fed1f1fc309bdce1fac24b00c182ee","sha512":"f16b9079ad36afc3b70087fb6872fca6102e94c128bbaef90c862b8e558c63f2e173e9e5064fa7d0d42f24fd79f96ae4d240b55598648fcabbaa3f923de9dd3e","ssdeep":"1536:LZTt7EGg2pUF2POTV6XomLCwSaFQkk4vcklxdjW:LZWp2uUPOTV6XtvBLtc","tlshash":"42731253b0f2c367d330e6b181c466cda39c0b464f07a202fe55aa5dbadf98c49c598e","first_seen":"2025-10-07T20:10:31.786332Z","last_seen":"2025-10-07T20:10:31.786332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/logo-white.svg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/logo-white.svg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 17 Nov 2020 10:02:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39fc6-1e7b\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7803,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a770e4b5e0e4fc020fd7db1e69a0896","sha1":"a793a01d1659c6c3aff00d9f99299c6dc94989f2","sha256":"d767ef12b49dfde94c42b5e2f8254c5e367fd4fc14b7f4e97c58fb16f797fa40","sha512":"747cedc22aa04226a92bf903235ee35f092c03536715e9f10a5255d870e749e017a004b0f95fda8072f4da182890363d76ddd1b9c52f6a30ba9f3ce907ad85c6","ssdeep":"192:hQAnKriLqxUcQh5OgcoZAth3DLTsy+r73MLYBXCff1YX0pR:hQGYakgcz3Du8LJYi","tlshash":"11f195b4eb1405b9cb89078956e00d903b4b140f7172eab8d79fe7b36823ee4482597c","first_seen":"2025-10-07T20:10:31.789174Z","last_seen":"2025-10-07T20:10:31.789174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/favicon.ico","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:01.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:01 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"81f5458410b42cd5f4b0f78b652c06b6","sha1":"aec2947937bc07d9a2477484413ad7594f902c8d","sha256":"d454cffc11299b3aea8be4bac3c95cf0865370ee6314da9c9d29a321fc79b4a9","sha512":"7dfd1108e097ec8a5dd60ffc7b69e7d74c4cd952434ef818afbd0a86b910bcb7c611b01a2cf49956b8c5d46212003a08bec0e345dc0283d87fa4288b27d13e47","ssdeep":"","tlshash":"17d02b9d5053228b0812155039c111c2264913f6b42a42a82dc5e847576c53dccd66c8","first_seen":"2025-10-07T20:10:31.790655Z","last_seen":"2025-10-07T20:10:31.790655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/yellow-btn.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/yellow-btn.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 8568\r\nlast-modified: Tue, 17 Nov 2020 10:02:47 GMT\r\netag: \"5fb39fc7-2178\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 361 x 150, 8-bit colormap, non-interlaced","md5":"0be729a94fb33b4b5bfe3115a92985cb","sha1":"b7d68c9f83284d94c97504eac68d6036350085e0","sha256":"c98cb95dd2b4e6641ceceed88d0c94801a394ae8caca69c5297de4876f945764","sha512":"481efc789292a625f7f292634a4bdb7a3c7656dd6a06bc1d295e2204dcbc6d0e93f10d998c6959a958d1051f2f30acd14546f5515a8888f6d63d3ad63e58297e","ssdeep":"192:bu04QZEdhV9+QdKpbNSbG2ZEOm3D89ryVp3YpaTsG/Xidjn:buV6ihmoKzIGqEO9h+YpFG/Xiz","tlshash":"8402af4643852d4c82feb320c795a1b9305a3c1e721f83e59607bb6a972de3d928963d","first_seen":"2025-10-07T20:10:31.792276Z","last_seen":"2025-10-07T20:10:31.792276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/icons/social-ytb.svg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/icons/social-ytb.svg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 17 Nov 2020 10:04:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb3a01c-c9f\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6596beb6f12bbb7b0b37773cb940b1fc","sha1":"45eab900ffb505e3bb4fe23a02c40ab6cb923ae5","sha256":"ff6d08629e7c93c1de2af5cd6033079dfac1fb6e17051702c8ab6eed7587573d","sha512":"119e67641d70e7d459a9298443d53f3479651e829831fad85e719e4a1a2867fef11d71f7fa3b1e2c2c3ccfa93c08acab6cfd9d27b8f33b3e9b8d605ff4c722a0","ssdeep":"","tlshash":"9561ef74c250c3b8dcb1c7f89536a878b89f65de54d1d33c42a88aa0b2a11dd93dd9c9","first_seen":"2025-10-07T20:10:31.794247Z","last_seen":"2026-02-27T13:30:56.13751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamak.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:25:01 GMT\r\nexpires: Wed, 07 Oct 2026 15:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:50 GMT\r\ncontent-type: font/woff2\r\nage: 17099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38804, version 1.0","md5":"2175449f9d4450ae6ffa92c12e38768c","sha1":"682cdaa40af625ceedaff11e83167ad78194cc1c","sha256":"54af24bd0f911f0fd7399d5445ea2023ff501d6a69f2d728f1213072f977ab14","sha512":"2dcc58920335757f867936e243a7f3315a8d2ea5a55c2f58412dab7361a9038d90c31e1bab6a95d0886e30c338b0a3337ca82c6e1e3f329583bc1b43e7569005","ssdeep":"768:ks9Jo7FMnoJCuKNFH68vNpT1eGJM0KtIfzaWG5Avamb5q9UcnRjw:L9Jo72nhtjvNpTlM0kIfzK5AvaWLcnRs","tlshash":"3803f11094d0b285d02d2fff9a2f48fde005cce11b6d9735abecb6f46641236a2080de","first_seen":"2025-06-05T03:25:00.901256Z","last_seen":"2026-08-11T10:22:31.990074Z","times_seen":6149,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":121,"dns":1,"connect":21,"send":0,"wait":22,"receive":24,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamak.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:25:01 GMT\r\nexpires: Wed, 07 Oct 2026 15:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:50 GMT\r\ncontent-type: font/woff2\r\nage: 17100\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38804, version 1.0","md5":"2175449f9d4450ae6ffa92c12e38768c","sha1":"682cdaa40af625ceedaff11e83167ad78194cc1c","sha256":"54af24bd0f911f0fd7399d5445ea2023ff501d6a69f2d728f1213072f977ab14","sha512":"2dcc58920335757f867936e243a7f3315a8d2ea5a55c2f58412dab7361a9038d90c31e1bab6a95d0886e30c338b0a3337ca82c6e1e3f329583bc1b43e7569005","ssdeep":"768:ks9Jo7FMnoJCuKNFH68vNpT1eGJM0KtIfzaWG5Avamb5q9UcnRjw:L9Jo72nhtjvNpTlM0kIfzK5AvaWLcnRs","tlshash":"3803f11094d0b285d02d2fff9a2f48fde005cce11b6d9735abecb6f46641236a2080de","first_seen":"2025-06-05T03:25:00.901256Z","last_seen":"2026-08-11T10:22:31.990074Z","times_seen":6149,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":116,"dns":2,"connect":23,"send":0,"wait":24,"receive":10,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bd-2.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bd-2.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1024\r\nlast-modified: Tue, 17 Nov 2020 10:03:36 GMT\r\netag: \"5fb39ff8-400\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 11, 8-bit colormap, non-interlaced","md5":"5f6f5b29ceb44d1e47a77d6acf3af8fb","sha1":"6accfbf3c0818a7d8659d8573ef091e60e70c27e","sha256":"ffca0548776359c9ea85dc07846f644424188b264064ec8ce0b95739933bdc62","sha512":"45a4caf2aa43a3e90bdf4c8994fb719e8934357bc0da34f6f4aef9bf9f3a269f7fc2c7c70a492ed0733ac3c9764b602d6c08f083de97d4a87ede1a2c3164a684","ssdeep":"","tlshash":"d011d6a206944b89ea3740ba2fc1b0f0edf4633aa9314d293e0a74684140a5070f1a74","first_seen":"2025-10-07T20:10:31.796631Z","last_seen":"2025-10-07T20:10:31.796631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/form-block-tag.png","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/form-block-tag.png HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 34970\r\nlast-modified: Tue, 17 Nov 2020 10:03:57 GMT\r\netag: \"5fb3a00d-889a\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 385 x 359, 8-bit colormap, non-interlaced","md5":"d697dbed200916cfbd9f07d2178f00b9","sha1":"8f824059e611cee6fbee1375a07ca3761c60081e","sha256":"76dcedfa6d766c5a8dac6747bb23b5e078879a709be8260c1b329f1415f4007d","sha512":"152806eafd01e536d5a05d43e37d9632914f432a0b2ca77953da8ccbcf634c2e6c312ea1a785d67d64033579f06eb45e73864971b5432e8030590f2d3946c4dc","ssdeep":"768:Cisg/Nn6j2AxfEyJqg0knuIyidqBr7Q4UjUQN7kJg:CD2AxfE2f0pUjN7qg","tlshash":"16f2e19d27c2039befb8393c81ac13c902b5b259f72fb9a43665707f074128555a7b91","first_seen":"2025-10-07T20:10:31.798165Z","last_seen":"2025-10-07T20:10:31.798165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDTbtPY_Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDTbtPY_Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamak.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12360\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:48:49 GMT\r\nexpires: Fri, 02 Oct 2026 12:48:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 458472\r\nlast-modified: Wed, 10 Sep 2025 16:48:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12360, version 1.0","md5":"0f681c34dc1949c1ef167cc14efc4cf2","sha1":"b2fe6b27fc6b6fcc2e3e029d655feda38bdf0cb6","sha256":"cfbfb0e36791f82470367d25c5a8d498dc1561a7a66a4172b7c6df749fdf9894","sha512":"35fdd68a803a225b08392cab14b7ba0170e23ae849484b11e9ddb2d7adb5b55e3c02902c967da22b199fcaa7eb5a70d94d9b95141a549cc3a113096b9ed0725b","ssdeep":"384:txwxSkCDw6CpSok6B+dJB9M5bao+9t1lFkI:2Skqskok4+dLGivXiI","tlshash":"9842d1f9f8cae357e660607cc6e57b6d442aad135809228d3580617a0df3433f4d5c5d","first_seen":"2025-10-07T20:10:31.799736Z","last_seen":"2026-07-25T04:24:16.689674Z","times_seen":30,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":126,"dns":1,"connect":23,"send":0,"wait":35,"receive":3,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/js/script.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 17 Nov 2020 10:01:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39f91-1f68\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8040,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1661), with CRLF line terminators","md5":"ce33f59a1daaab3f8489ede7babbbddb","sha1":"2d4090d3d255fd7b028eae632dda8294b0058f28","sha256":"8697126da802e7ee42f5b64b96649bd8afcc9f5e81a9c4a1a4d8b80a212a752a","sha512":"f29d23024edb3a11c9a78565945d37da8ed8c3f24268b2ebb20ba5d58025f58d3510a804340d4238fd2f0d9ec3ffbffbdbae08f3c79e515026acd2f86a0bcd6c","ssdeep":"96:AQipyDddDixJV/7iHpDibI5jdFt5pSDV++EIWXtJxtomlGDWtVAsl:AQ6yPesJtpSDVpEICtlomlZ","tlshash":"24f1849db575816808bf72778fbb8208efba511bd246c705bd9c0dc50f74190a652fac","first_seen":"2025-10-07T20:10:31.805161Z","last_seen":"2025-10-07T20:10:31.805161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Playfair+Display:ital,wght@0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Oct 2025 20:10:00 GMT\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5010,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a2615b56723df5b4d82d9f2036a30a91","sha1":"51af6c43dfee34067455b84ba2032a8af5c48684","sha256":"092003eee3e9098c6109335b1a7303fd4afc03b94a7f55468f8fe817b14db55e","sha512":"bf05fe9a9b5907c97876e03277bb706b5aca38691aa79d5adf41e4c8d491bdafb2ff596e36a6b008c82fcab14d3fab18f5b7d8592f7d48cd63d8e80378ae7eae","ssdeep":"96:JIYgEaV2bFZOjYgEaV2fVYgEaV2GJc+uHYgEaV2lNMIYgpaV2bFZOjYgpaV2fVYd:JJOV2SMOV2qOV2GXOV2cJrV2SMrV2qrB","tlshash":"60a1cea2056ba250da471cc227cfbf22995f71607085c63c6ffe198c6c9bd56d264b0d","first_seen":"2025-10-07T20:10:31.809332Z","last_seen":"2025-10-07T20:10:31.809332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":146,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/css/style.css","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Nov 2020 10:02:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39fb7-dc2f\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56367,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f4fc707a19af85d8627832be2dd6c580","sha1":"9890113abce2179facd709c91089184fbc60a235","sha256":"9464fcc02a9d51e74bde72b7b79660b5fd96f8bd1aa7547be17029870d62be53","sha512":"9444cd7687ef5d4a7d30bc06a7d3c3d46c92febbd3e30a8258a64fed9d8acb5e7c87abe526611132dd7cf6f878b8afcaea3023a92e3faeaef1e927508f4e4fa9","ssdeep":"384:3aemp7bq+RS86p68ZgiloFStK+2h/aQQrw3M4/Ls/I6k:G7bp6p6U2h/x3M4B","tlshash":"0843205eda002045b23bb7b8e7b20755fa694053d34280a5bfdcb6969fb648c8163fcd","first_seen":"2025-10-07T20:10:31.811099Z","last_seen":"2025-10-07T20:10:31.811099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/js/owl.carousel.min.js","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 17 Nov 2020 10:01:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fb39f91-ad36\"\r\nexpires: Tue, 14 Oct 2025 20:10:00 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-11T11:38:46.792068Z","times_seen":67142,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/tariffs/tariff-bg-3.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/tariffs/tariff-bg-3.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2765\r\nlast-modified: Tue, 17 Nov 2020 10:04:41 GMT\r\netag: \"5fb3a039-acd\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 271x97, components 3","md5":"4566deb78d3012393794c58803fa388d","sha1":"854ecea79951c7be1020d826ccf40735225828aa","sha256":"2ed92db88071e9f7ad3b3208f53e35540893f36ba24ded8d2a26ba6456dbdbd7","sha512":"a2fbda3d1967673a1cf4e240ee0a777021216460060a22858dad08a070096ac1214aed5fdc3ccab503ef0de49119ffcc5e4505555fc70cc63ddd616e45fb6a1b","ssdeep":"","tlshash":"52512b4ac754bc7ad5ac84744c769f743f05a832fbf7e1c962856c69597e0440ca50ce","first_seen":"2025-10-07T20:10:31.813829Z","last_seen":"2025-10-07T20:10:31.813829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/fonts/manropesemibold.woff2","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /fonts/manropesemibold.woff2 HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21460\r\nlast-modified: Tue, 17 Nov 2020 10:02:19 GMT\r\netag: \"5fb39fab-53d4\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21460,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21460, version 1.0","md5":"03189ef707d100738708d1cd720ada40","sha1":"2aab94276c319a601fe20c006c3f7594082ff40b","sha256":"352bf7f30185ed685a47a58cf7472150a223a3567778e9bc3f48f65e54a5abdc","sha512":"318130e1cfb34b2c563c87ab4782c2aab44868978b5a777f7a10b764ffbf39923518f01ca60ef96840b64de21c6e31238062c2884a3d832857c1edcd3770a70d","ssdeep":"384:RFvozIgWHesdtOHp0b0UGJf9iacRyzgwbGSD4oRH8Q/zls3OZKDDAkZMpwx:Rto3sdtOJ0UxcRyEQxnls3hAXCx","tlshash":"37a2dfc29f4fda5f9003073a09dc4e9b869a269173b10833f0f0955ee20523db26b6b9","first_seen":"2025-10-07T20:10:31.816128Z","last_seen":"2025-10-07T20:10:31.816128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/about/bg-2.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/about/bg-2.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55155\r\nlast-modified: Tue, 17 Nov 2020 10:03:38 GMT\r\netag: \"5fb39ffa-d773\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 522x560, components 3","md5":"0f56a0b07eea8ed2c324701d5a2ac659","sha1":"a6db840086c98a094e963ba826d812d069150ea4","sha256":"4dcfd65e0ef572b1d22285b4c2381a67485641b852666f33923e035ff48c49ef","sha512":"e5aec2784156e362f02bf683a0250d43367e5624a0b126ead14a650b664ee29ff0d7938269f9511fbdeaf02bdffa7947831bb7bd8cec7679aa477123554a493c","ssdeep":"768:W130HEddJ3HJB2mKduimUfV/WuAdUhGK1uw4k/Km/wqp/OSpHC0qj/dPoSq69h:W1kEdgEUfEuZz4wp2SpHrqLdf","tlshash":"5743028e57bc5adac10743540862bb1d2a266f29fd66ffeb01dd3ce24a8f491d1140e6","first_seen":"2025-10-07T20:10:31.818729Z","last_seen":"2025-10-07T20:10:31.818729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamak.ru/images/bg/form-block-bg.jpg","fqdn":"metamak.ru","domain":"metamak.ru","tld":"ru"},"ip":{"addr":"87.236.16.107","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamak.ru/","date":"2025-10-07T20:10:00.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamak.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:32:43 GMT","end":"Sun, 14 Dec 2025 09:32:42 GMT"},"fingerprint":{"sha1":"D7:8D:6D:50:BF:E4:4A:FC:2D:7A:F2:CB:EF:DD:9D:25:9D:BF:DE:25","sha256":"C2:BA:01:8E:D7:6E:5E:30:F2:08:AD:34:2A:9E:B8:DE:3B:BD:67:FE:C2:91:38:0D:69:5C:56:E8:36:DF:8C:D6"}}},"request":{"raw":"GET /images/bg/form-block-bg.jpg HTTP/1.1\r\nHost: metamak.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamak.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 07 Oct 2025 20:10:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63714\r\nlast-modified: Tue, 17 Nov 2020 10:03:56 GMT\r\netag: \"5fb3a00c-f8e2\"\r\nexpires: Thu, 06 Nov 2025 20:10:00 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x716, components 3","md5":"eb0790abdbed53ea3754dd46721b42be","sha1":"20232b7842f4c543425e470875284394a77d1c72","sha256":"9b1a0e8f7182845baecab0be5f92e48ac3ffd50485d74b58a00c4b10ef147ba0","sha512":"5eb714d7d614201ec6ee52eae9839ff33153e97db6afe23e65d2adf8d5e786fbdd56e377861a2088388ea01da9fc58203d1576d67e4cc35bf4f66e14e664eddd","ssdeep":"1536:t9uIfxIai/nsYicxnmqMqo4n8b4oNtJ6Nys88oPGG:HuIfxZi/sYicdmE5obJ6YXfv","tlshash":"8a5302958297dcaeec1b35f19173c208ed70256b7eeca12ede1041be15a1f4419fc293","first_seen":"2025-10-07T20:10:31.820296Z","last_seen":"2025-10-07T20:10:31.820296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"metamak.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}