{"report_id":"b4adb60b-f6af-496f-b6fc-1fab5f5596a5","version":0,"status":"done","tags":[],"date":"2026-10-14T20:09:59Z","url":{"schema":"http","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":0,"asn":54801,"as":"Zillion Network Inc.","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"title":"Met tax","dom":{"size":112598,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1273)","md5":"da47dffa79127c7c188e1b6aebad6977","sha1":"d061fab032a4f4e466edffe6e06167573cfbf479","sha256":"7cd50c3dcce5d12c8c9841d05549ef1d888454d277acb105e511466ae253da06","sha512":"b24fc0ca77a43a63c75a22429dafd3cb92a8ec2dd331a67b14b4e33a8aa719e93b8f83aa2e933f9453c29405a58312730ad2d015c436fe682a5ce529d6554fde","ssdeep":"1536:sSdoAfRuJKz3j0cNDhVH+R+y26MFvxI21GXfQGBaCJJ:loAJuKFRhaYxI+yQGgCL","tlshash":"69b3e770a39c093a20d750c7d7a4a6ca79fad533da2bc4093afe46506fc6c44d9236ed","dom_hash":"domhash97657e123e436fd0e71704da606d5067","first_seen":"2026-10-14T20:10:33.090454Z","last_seen":"2026-10-14T20:10:33.090454Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":0,"asn":54801,"as":"Zillion Network Inc.","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T20:09:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mettax.vip","ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":56,"request_count":56,"received_data":2861732,"sent_data":31051,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-11T23:25:40.076337Z","alert_count":0,"request_count":3,"received_data":330338,"sent_data":1658,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap/jquery.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84284,"data":"","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-10-14T20:10:33.129566Z","times_seen":872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/layer/layer.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-14T20:10:33.136177Z","times_seen":16915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-14T21:45:51.273658Z","times_seen":10538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3688218f8ec05482687f9a087f91e7","sha1":"37849a992997e141bc6f39172109959003545057","sha256":"f073a14de09bddace476b1c86ec97f50d08596e6300fc3d1dbb189af222e4a98","sha512":"42dd177a2b88446e7e7ab9e031762a9b1a0918d51808c50dd0a29037a21624ff6e69028996e21d94b8144727797e2b12501533dc97c4b80f30b7dbfb9c81d041","ssdeep":"384:ubYpA2XqL6zngJ44J7yf9uqDU5a4+NS6hfsy2fcJsWqBJFpv3aM8BFYD1bfoE+Wg:uH+Skt+y2kJs9FvxOF21yv4qXf2m","tlshash":"4be231a2e72c673612d7015fe6ce81e2e735c16b2a2b850e389cc11817d9d3887b63f5","size":31454,"data":"","first_seen":"2026-10-14T20:10:33.356559Z","last_seen":"2026-10-14T20:10:33.356559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"d662dcb00abd93a4913f85b96d1a3069","sha1":"0fe96174f00f73f9e7080d86f981e7735633a3e9","sha256":"149b86462b959f162781ce52f39edc9c6d20129c891c377cbf01d94d01aba8ae","sha512":"172b8c91cdfe9bb8a0469e70f6e34c2b6560f7d8f2b519bf9bca522bc9973ea65ac18d93a0734283dcdcddd223a0b594307336626d0432800d90d88796f5a9e3","ssdeep":"192:x+9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9we:x+vm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"6522b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10272,"data":"","first_seen":"2026-06-09T08:24:23.856239Z","last_seen":"2026-10-14T20:10:33.362252Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e951ccadec7053c28ad5a64f31d481","sha1":"13328ffc309fc222bd1e5009d029c2b2e6d55819","sha256":"521b2f7c72caa8b0063909fa695494538293dc98ef65e03f282c3e482aaf86c4","sha512":"0eafd63d06bbd402c5ad10ea1e15765b143c5b42407a32908e33f5e194e52ca446afc2194d4b4df6d66fd1016c834c642e3eecad144015ce44b25464ab13ab55","ssdeep":"","tlshash":"a1f0c96e0a1ed7ff709802355326a2ee30cd4baa90076407fe87021716ac018bc01ea1","size":522,"data":"","first_seen":"2026-06-09T08:24:23.860945Z","last_seen":"2026-10-14T20:10:33.364304Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"0493b16288b05cf354a6089113f6870d","sha1":"59040bea326e362335dffdf80038b194a14ae72f","sha256":"f94367639ba92ac2b18938900ec24d60af1a9c53b0d1bb7d75a5f9d10bf88dfc","sha512":"b13812b7c2d3acd24deb5a82984cfe482f2af29945cd6cf3efeaa9426b58e67f1b977e75e8ae9c01f7093bd01dbfc66ce7f717a3d89a341fd52cca6fad897088","ssdeep":"","tlshash":"9f3146c4df2d01acdc4853e82aad82cc0a3c3a703c339c696c185e389c68dbe9519d79","size":1715,"data":"","first_seen":"2026-06-09T19:00:23.03553Z","last_seen":"2026-10-14T20:10:33.369696Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"d81b64898b39258242f30c41c9fb0a79","sha1":"cd64752861eacd6b0da0b6b6dbecfb6e814c6b5d","sha256":"41948649bd03e708df4542d16bc8381f46cda35b078baad4519006d97f9f5943","sha512":"5933893140273761f1c99276e19e444bf85f5c9529d61b27fbd817d08fb459296c4b274bcbad8f61e9d9029ce2c2d450d366d6bc6e564cfe08aaf89a59baffbf","ssdeep":"","tlshash":"09d05ec39b4d1058587b319784eb15cc005c426288920d89bc3d91908ca01ec5371f2d","size":249,"data":"","first_seen":"2026-06-09T08:24:23.86383Z","last_seen":"2026-10-14T20:10:33.374434Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"d11ffebe25b93469f49edfa50cf1fd6b","sha1":"0cdf745cb53c2c5f78fb19a8c69c620911cb9472","sha256":"f9371b2e83705ce74404c6f2ec02d95e58ce46ccce85c8cec511021b9d1ddbaa","sha512":"1d4f7a15dc0d258ddabe86bd911da48aaf2446d3a5e433a3b5de0a3d4b4d4233d67204f9bdee920617eafee0230ca51ee973266a0ea8df6e0e3a01a58639383a","ssdeep":"","tlshash":"19b012c900760e8e1599662bff7dcf004573cf03e58015378f08799d5888503d221c1b","size":102,"data":"","first_seen":"2026-10-14T20:10:33.376516Z","last_seen":"2026-10-14T20:10:33.376516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/vendor/jquery-1.10.2.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93107,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T22:59:08.148521Z","times_seen":17790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-14T21:19:37.202606Z","times_seen":17919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/vendor/pako-1.0.10.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","size":45988,"data":"","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-10-14T20:10:33.113111Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/scripts.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-14T20:10:33.246894Z","times_seen":8604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/js/market-read.js?v=1791826517","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ac542bf4a3685f5841ac581a0a13f69","sha1":"502864ddcb736c1d4e11fb02253e03c7fb677b05","sha256":"a9580ccbffd14478b83967338d4b7bd73e954c1c7dff9a42a012be981474971e","sha512":"35b17839e6b51494bdcf8cecc47beea253947d0544705b340ac9693599862a3bbbdc433086de57034fd130c84d7e01d54f0f98bc10d8c19167ef26335a80988e","ssdeep":"192:NrNsR9ZuYokon+Z6Ke771B9RENxvFfhabCcTg0Q0OK4YyIATPqI25bqWeFR:rsR2nX52p24mWR","tlshash":"eae1a88ab08a22e0c473d0ba97b7825937754e13424ac619f97c49481f74a78b1f7fed","size":6931,"data":"","first_seen":"2026-10-14T20:10:33.252013Z","last_seen":"2026-10-14T20:10:33.252013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mettax.vip/Upload/public/629c72d268234.jpeg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.938Z","timestamp":1792008197938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Upload/public/629c72d268234.jpeg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92466\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-16932\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92466,"size_decoded":92694,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x300, components 3","md5":"d2ec614dd56337288a48c3504872d752","sha1":"1fa9772c7f2eb6e93fe1edeacef816b6850507fa","sha256":"d4ca7b176180c645d813c294b8174fe3c58a9cf83db951b5b8fb6f1ba9cb2cfd","sha512":"ffbee79889cffadad6106cf0535965fb5a5ce7e39b16a1998084d38aad60f4ecdb1ff0d2281fd34e999ccdd04c3d2cc25bd7aec119a58c18e5cd91b8174118a3","ssdeep":"1536:M9qKZoxlS00K5Xr6B7rdSKgWoCL8DyWKl7mfmxnyKqhvYPZmXxilegMMCdDIDG7:QZygKUFlgWnLV7ImxnV/P9C1r7","tlshash":"72931296b38a4919e7697732485ec1e073f29ea0be451fae51f3c478c8dd032b117a39","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-14T20:10:33.094392Z","times_seen":6882,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:39.068Z","timestamp":1792008219068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3655,"size_decoded":3926,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"93dd171b49d241df187d72624bc2da34","sha1":"b039db314f847b3dc5a589da97a21b4a6f147e3f","sha256":"c258b8490a62c54f8948f491cc85a0f3bc78e407b983790b92402158d593f5a3","sha512":"ac1c7cd4c2f9acfb2097b562219bb55e84b3ce493b1bebe9a213cc0c431e5b98268e0ca074ac81287c4393a32ada4ace16b4d12f145bb6720149e95c65e472b9","ssdeep":"","tlshash":"2871c18729205a3e6c02a6dbec527ee40d5e13a6c5414aaf0aefddd5107431fb17ef12","first_seen":"2026-10-14T20:10:33.097027Z","last_seen":"2026-10-14T20:10:33.097027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/1613786513998262.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.945Z","timestamp":1792008197945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2780\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-adc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2780,"size_decoded":3004,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-14T20:10:33.106162Z","times_seen":26240,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-fil.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.951Z","timestamp":1792008197951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-fil.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:30:52 GMT\r\netag: \"6ace6acc-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"263a8eb5df14790718a06611c306dfc7","sha1":"1168d49a247576edb16b52b94bb5ea07ccbd478e","sha256":"6180a890232d5aa81c21c5b730002994b0988052879fba5dea8144853b00e802","sha512":"3c09334b6597a1f561ec4ac5a3b7c4f2f38d3ba434bf561082b3f52e80627792e4b7de39f8b2c233829f0c51013f0a134b8fb60ef41b66a1caa7486878332d4d","ssdeep":"","tlshash":"37d02b5a90a85719dd08c915d32b7419219d74c8ed81891df4b1442364ca957324830c","first_seen":"2026-10-14T20:10:33.108846Z","last_seen":"2026-10-14T20:10:33.108846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/vendor/pako-1.0.10.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.990Z","timestamp":1792008197990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/vendor/pako-1.0.10.min.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 45988\r\nlast-modified: Tue, 13 Oct 2026 16:30:15 GMT\r\netag: \"6ace5c97-b3a4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45988,"size_decoded":46227,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45987)","md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-10-14T20:10:33.113111Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/advantage_phone_ui1.7a062617.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.432Z","timestamp":1792008198432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui1.7a062617.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 8158\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1fde\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8158,"size_decoded":8383,"mime_type":"image/png","magic":"PNG image data, 620 x 384, 8-bit colormap, non-interlaced","md5":"7a06261784d3908ab66f836816376de0","sha1":"3ea8a00b11b016e46703e0b873f005eb5e70adf3","sha256":"c6aa1f5b958419cbaa53682faf70d19d2737d2fc3ec58aeda3f83de3802ac4d0","sha512":"fd838b02e21d15d948d357fcea888bc7fe11bbe2d268d82f6b5f14341b2f253f5ffc6f8f34bac7beb7cead9c4780f6d4ee0b1e73db99ad3c681839965c886572","ssdeep":"192:RCD7357jDYAgAY0UKt/wetdU7BxeTKgPG2ZgwPhlTAAAAAI+GpYSTOFgWsh:RC3357ZXt67reegPG2ZvPDgGhCCWU","tlshash":"4df1ae00e21cefc3fdfce446b5a9916f24b44271323294ce50a39b65d8f459fa7966b0","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.114345Z","times_seen":7884,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Upload/public/629c72e4af37b.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.942Z","timestamp":1792008197942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Upload/public/629c72e4af37b.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 429802\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-68eea\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429802,"size_decoded":430030,"mime_type":"image/png","magic":"PNG image data, 1140 x 465, 8-bit/color RGBA, non-interlaced","md5":"225ca6bb404d12e23b7b386fad845b9d","sha1":"5867c40e357d614354b83402482c4587ec910544","sha256":"670d66f9a6d3a2428280c04d570de82d99bd3c254888abafb92882cfae08ed44","sha512":"91cc1f7d6e940496ccd1d6285188e9b0c8150c39a24e724152ad53401be977259b6a8f66fc0d3e5cf17b19c31dad8370fb4d81d20f8b7b591da332aeff0790b8","ssdeep":"12288:JuQM20o9QXiA45lDD1mpVl09MrFrJVh+y5:t9lDJmnr5vhV","tlshash":"4d942395c5c6bc3391c6d10c9ab712b1b2239a7998af5bd506997e8c144cccac3fe24f","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-14T20:10:33.119303Z","times_seen":6889,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Upload/public/629c72dbe18e2.jpeg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.941Z","timestamp":1792008197941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Upload/public/629c72dbe18e2.jpeg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137718\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-219f6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137718,"size_decoded":137947,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"96abd4588e557e6a37f5d3c213f0dd52","sha1":"6647c6a4e45c0963d31ed26ffd3fbf47d8891dc1","sha256":"62fca4cd746244e0a048bec7fe7d714efd224221851c3a91ffe8d1daee2bb8b3","sha512":"a7a2e192d4e25de386ba726c28b53c5321687450227e70fd77ee4a25fa26e8d52e5e8bbc81c18e33e85095fb3cdef51c8a0fcd3ca3b553e18d8bea383546f267","ssdeep":"3072:lFn4afMToBiTo/Nk/AU9MfbHpEbxsUNuJdL0:l2wBikAAUzVuJh0","tlshash":"5cd3f1a2ebfbeb2b4b5b56bc826dfd3b535019c828d69663185b0d12f908f31564703c","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-14T20:10:33.12265Z","times_seen":6894,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.424Z","timestamp":1792008198424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mettax.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\nage: 766309\r\nx-served-by: cache-fra-etou8220039-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":107537,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.1251Z","times_seen":13004,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap/jquery.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.716Z","timestamp":1792008198716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap/jquery.min.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84284\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1493c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84284,"size_decoded":84524,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators","md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-10-14T20:10:33.129566Z","times_seen":872,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/layer/layer.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.984Z","timestamp":1792008197984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 19843\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-4d83\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":20082,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-14T20:10:33.136177Z","times_seen":16915,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/ios_down.e011cb37.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.426Z","timestamp":1792008198426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/ios_down.e011cb37.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11997\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-2edd\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11997,"size_decoded":12227,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e011cb37e1cdc749fa40e455f952c628","sha1":"c102a94a6beb0a26de83c2e21ab6ab409f265e88","sha256":"5b8c67057adbf739c8bbe363ef30d3e57638991690cd9930aa237e5b408849ac","sha512":"a92a160de1026815ca8078f6cc059fb8fba29284a5c792295a9755e8f6e3c10ae138c90b0cac9774f35cdf430106e4a7ccb5c88729e9750e867cf826479001fa","ssdeep":"192:sb39cIK/24cUfDfcFDOlozy6RWSmwQn0F3TRe3nclNXAJdlIPprWl:2mIK+OrcFKozy6RrIni+nKNXAXlI0l","tlshash":"9b3255f79354c0c4791e99e5cc3f1ae93a0ef0fb9a81a08832ade841e753ddd865ad44","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.139578Z","times_seen":6545,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:44.070Z","timestamp":1792008224070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3655,"size_decoded":3926,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b63bafc1319d984f686c7f2c9b1c6aa2","sha1":"3d9db215429accd8a4caec027abc3016d54f2e7d","sha256":"339b73d9cded8677f6db2118d23478e1ff45f5a16cfc76bb3fdda4fc7bf296c7","sha512":"01f309f7a7b7de7a20170c237ce2e20acc39669fac743a860cc1515503b77f70db6ddcf77d54f3864135bdae02acb9291f799ff214eaf63640b08b5a02ab577f","ssdeep":"","tlshash":"1271d0872924563ea80261dbec52bee50d5e23a6c9404aef0aefddd5107421f726ff12","first_seen":"2026-10-14T20:10:33.152445Z","last_seen":"2026-10-14T20:10:33.152445Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/style.css","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.917Z","timestamp":1792008197917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 589\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-24d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":811,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-14T20:10:33.157545Z","times_seen":8592,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/app/static/code.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.937Z","timestamp":1792008197937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /app/static/code.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2084\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-824\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2084,"size_decoded":2308,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e771e33040933912f595c33752841f1a","sha1":"21f3508cf8de50fd51a039bb4739359c3e3c449e","sha256":"e5e16fdded488d9d391073c321eb1e994fd8d15e4ad06026023d3b236e683a63","sha512":"277ba147c18260ce2ff637ddd47e04e0a3f293b5d5ebe940fdbb26e329571487507c946d9e8b39b68b15b434c671ca2ae0c36991190c655fb6e1bf68d65405a8","ssdeep":"","tlshash":"db414e64a1c129686331a9df9acb87bff96a40e2fc6c14f59101011c9ad087dfd8637e","first_seen":"2023-07-05T14:45:42Z","last_seen":"2026-10-14T20:10:33.160181Z","times_seen":1002,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/5fc.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.947Z","timestamp":1792008197947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2694\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-a86\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2694,"size_decoded":2918,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.163377Z","times_seen":23081,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-shib.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.952Z","timestamp":1792008197952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-shib.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 267\r\nlast-modified: Tue, 13 Oct 2026 17:30:54 GMT\r\netag: \"6ace6ace-10b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267,"size_decoded":494,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6af0965965f9c9056784c72bf755d388","sha1":"a9535a6b9a82279aa28828465ac009b97a6e59c5","sha256":"3c1370bc9fa069bd33aa0c77225ceaf9d634d06c3db94d9e25b744fd58844a5f","sha512":"e30179cd5c256f0ba634deded3a53442f32c09873c62dd2221cbee394c68b02e1596dd104d0ac992b20f9a938e2383bc090c7a98b13e82f47590cfc7f91c98b6","ssdeep":"","tlshash":"5cd02b5a90a8570dda18c915d32b7859219d74c8ed818d1df4b1443368c6993324430c","first_seen":"2026-10-14T20:10:33.164372Z","last_seen":"2026-10-14T20:10:33.164372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-avax.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.957Z","timestamp":1792008197957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-avax.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 267\r\nlast-modified: Tue, 13 Oct 2026 17:31:03 GMT\r\netag: \"6ace6ad7-10b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267,"size_decoded":494,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01fc30fda32f67c24ab7fa67c6408ed4","sha1":"feeb13dd65116a6926cefd1d6132f407b3822138","sha256":"4a7b6e1e1ffd06efe6f5a697a57a0c9af27221695fdbe7c1778dd9e1410de612","sha512":"d8243bd029fa57267fbd353665ba1b85a7d8faf8b3a18199b8aaa9bcd397b2af07508e17c36f9740301a530ef3d187cfe5a41c23d32a794b6b92a1025beb3beb","ssdeep":"","tlshash":"ebd02b5a90a85709d908cd15d32b3519219db4c8fe818a1df4b1442264c6953324430c","first_seen":"2026-10-14T20:10:33.166999Z","last_seen":"2026-10-14T20:10:33.166999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/icon_margin.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.999Z","timestamp":1792008197999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1620\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-654\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1620,"size_decoded":1848,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.171693Z","times_seen":5014,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.216Z","timestamp":1792008198216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Oct 2026 20:03:18 GMT\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"135c3c367321461fc8ffad224ab866d4","sha1":"fe5b0ec6761c73f5818846a5302294c43207371d","sha256":"e784dfecfe6b739c49b0b4a4bd837525eb881b0c2ba16ca403667bab1a2e974d","sha512":"a092bcb11e1aeea62738b99081e5a94532423cc8c2991383a1219da637a4530e880f1bf72eba312be0c17ecdf34c1e93364ee94e38cd394da03ec3d3486f233d","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+qaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkIkH0yXLkyLHbywkkhH","tlshash":"02b18891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2026-10-06T10:36:35.556162Z","last_seen":"2026-10-14T20:10:33.175353Z","times_seen":17,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":3,"connect":17,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/advantage_bg.a5d6d444.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.429Z","timestamp":1792008198429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_bg.a5d6d444.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 30697\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-77e9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30697,"size_decoded":30923,"mime_type":"image/png","magic":"PNG image data, 1392 x 1048, 8-bit colormap, non-interlaced","md5":"a5d6d444c8524a6d8e39fa1618582284","sha1":"4fda97683b94717d7597718b1e01c4a091f78ff2","sha256":"b2503b762cb8bf80f11571c1a10ac888258b78cc2a3a847780dfecef23dbb39b","sha512":"cfaf1fb56063ecbfc8d8a07ca56e6be8663b32188308ea349debd55b57e847c8005dbcbb1d72dfb8a7ca7873da81e44ed4b993345d673cf78bb3d3045f5cca11","ssdeep":"768:J1+dBPa7fkey90Yf5vWOjCuMg4+26RwDN1OvagerN6gA30Mh:3+dVa7fke7YlV14+d/vageR6gI","tlshash":"dad2e1dcf0f1d689567b11af43f47e48f5a5377e223344a05bade009a28095b3a7b41e","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.176243Z","times_seen":7875,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.911Z","timestamp":1792008197911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\nage: 1979756\r\nx-served-by: cache-fra-etou8220197-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":8777,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-10-14T20:10:33.181221Z","times_seen":17704,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":58,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/css/base.css","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.913Z","timestamp":1792008197913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 25765\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-64a5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25765,"size_decoded":25990,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"8739b7f6cc1db5ea89afe0a14afacd7a","sha1":"f7dc32e9b67f5a0190cdb0d641f141294522fe46","sha256":"446377cfd8abce9140615cc2df1cfd3c2e8f908f179cbe1c7bc6209ef1bd2f3e","sha512":"8daa0f9ebd76dc9e94f4c5cf0acd3380b91abe7186648e41574d747c9cd0bfc2a6c28ba80c0e34ce2aba079782d9061d73bb37010cd77f7f59bc5879a19612a6","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBe:Y4cN39FDwFx9EZS9YzqtRB8TF3MDdu","tlshash":"12c295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-10-14T20:10:33.182005Z","times_seen":4672,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/1613786496962262.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.944Z","timestamp":1792008197944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-a83\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":2915,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-14T20:34:30.891792Z","times_seen":34766,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-ada.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.954Z","timestamp":1792008197954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-ada.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:30:58 GMT\r\netag: \"6ace6ad2-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"735e925ba448390eae541a764fd19f75","sha1":"96be43c6fa0e544cfff60ca1522bcb547e694f14","sha256":"009b6e7136df97e615fcb8f2286cbc1db30038ad9d1091f43a4bd34d88a7269c","sha512":"7f6bc3d2f881fbf71e549337aafdd69cdb3de3c0c13a405e305e96ff4fb1a78cb7f238f86d28848f351ccf2bde799052c14bb097e56f6f7c829217b99c5bca8b","ssdeep":"","tlshash":"6cd02b6a90a85709d908c915d32b3519319d74c8ee81892df5b1452264c6953365430c","first_seen":"2026-10-14T20:10:33.190109Z","last_seen":"2026-10-14T20:10:33.190109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.915Z","timestamp":1792008197915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 192762\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-2f0fa\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192762,"size_decoded":192989,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-14T20:10:33.196557Z","times_seen":5724,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Upload/public/629c72d72bea1.jpeg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.939Z","timestamp":1792008197939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Upload/public/629c72d72bea1.jpeg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 132170\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-2044a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132170,"size_decoded":132399,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"dfde2097912178e1ade955a1479e4158","sha1":"2a46f5160255b5b99a32ffc7c0dbec89a2ff98dc","sha256":"09dce8313f5e10579c1f58032cc3397cb4b253cf9d4c8a0b858402cef5d397a0","sha512":"34b2608914c24f8754a8097b7cb752fa1960934c3be9270110cdc6d492ba99ddbf086d4c61c29789527849041d824979186f6e0af199f8efd181a22a11d2cb07","ssdeep":"3072:aJmM1CFqby70UZh28jBlZQZLoSMi60EL5+DuWXqT1mBkOZw0C1oPSnWnWnWnWGH:9MGw+FjBl6LoSMi/Ed+DuWXqTox5CSPb","tlshash":"8fd3f130ebcbdb061b9f446888fdac23076a19f811de90166f250df5f5cabb554424bd","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-14T20:10:33.198813Z","times_seen":6915,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-link.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.956Z","timestamp":1792008197956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-link.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 267\r\nlast-modified: Tue, 13 Oct 2026 17:31:00 GMT\r\netag: \"6ace6ad4-10b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267,"size_decoded":494,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"822e818487e5f94221fd5e71b8da2d4a","sha1":"aded6e2dbe915ceb07c5f1d5b2d9bdfda8e7eb73","sha256":"50d59281feaac1410838f5d5b6c962787b81b1a3af0a8b6f287a99e85fed8003","sha512":"1d6e4935e97d06321f8dd5a2993accf7dfa7458f5bb490f616f36f60e5912595696885d5cb09254eda1fdb3f273ae2530d85c83792852acb25f47f5ac345bb3b","ssdeep":"","tlshash":"bad02b5a90a85719d908c916e32b3469219d74c8fd81891df5f1442264c69a3324930c","first_seen":"2026-10-14T20:10:33.205316Z","last_seen":"2026-10-14T20:10:33.205316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/icon_etf.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.001Z","timestamp":1792008198001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1375\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-55f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1375,"size_decoded":1603,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.212592Z","times_seen":5031,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/advantage_phone.511b5ee0.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.430Z","timestamp":1792008198430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone.511b5ee0.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 19932\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-4ddc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19932,"size_decoded":20158,"mime_type":"image/png","magic":"PNG image data, 500 x 1038, 8-bit colormap, non-interlaced","md5":"511b5ee00b739dea06dc9e55011afa57","sha1":"eb4ebfdfc46829471c2b86dc94b2e6bc83037fb3","sha256":"31b768d13aee263d4de7af1b5527bded34ad208284df0544dfe5fca9d00a41e0","sha512":"54e06fd802883d46f47e6f59f3d795d893ea797d8295c1cbb506b91a46d0d1efa79751a454049c3e6b2ac06dd5a312950658d96fa9f8c3cefd1d46f73e5ebda4","ssdeep":"384:/M6qoHUBFHYEFyqYA3ar7vWF6cCf9X+VFMsTB:vXHULHpFyRxc0X+Q0B","tlshash":"fc92d0c78eb6894efba7c47c81508bf2617a282190e61dd5fa61e3a3b432645db36071","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.217391Z","times_seen":7899,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T20:03:16.670Z","timestamp":1792008196670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0c0480c38ab578d64a87611a27edc9de; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109468,"size_decoded":109765,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1268), with CRLF, LF line terminators","md5":"0dfd1005ab2b7bd16ab4e5e26ee8e1dd","sha1":"f1f2b995ffa3b66627984d7a501b05a6566236f0","sha256":"25322ce49349e60af90aa423529ff7c7948f7407956d378039f883092737f66e","sha512":"41f06839218b1850f0b456430bd3a41ab11b58118cd95db4cc8a8608ed52ab4156dec4245816b4846e10d6ef31317d189756d399d589df2adc0fef1e35219885","ssdeep":"1536:XSdfk2uBxP9YDivfvDyq0ABvEKoeZNShGBaCJI:afnuL2O7EK1mhGgCW","tlshash":"99b3f960e39c093a30a75087db64a6c979fad533da1bc4093afe4a502fcbc54d4336e9","first_seen":"2026-10-14T20:10:33.22233Z","last_seen":"2026-10-14T20:10:33.22233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":58,"connect":144,"send":0,"wait":282,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/hot-2.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.935Z","timestamp":1792008197935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6878\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1ade\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6878,"size_decoded":7107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.230986Z","times_seen":7546,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/community_bg.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.434Z","timestamp":1792008198434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 248220\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-3c99c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248220,"size_decoded":248448,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.240113Z","times_seen":7595,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.987Z","timestamp":1792008197987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11422\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-2c9e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":11661,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-14T21:19:37.202606Z","times_seen":17919,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/scripts.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.989Z","timestamp":1792008197989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 298\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-12a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":534,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-14T20:10:33.246894Z","times_seen":8604,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/js/market-read.js?v=1791826517","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.991Z","timestamp":1792008197991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/js/market-read.js?v=1791826517 HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6931\r\nlast-modified: Mon, 12 Oct 2026 17:35:17 GMT\r\netag: \"6acd1a55-1b13\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6931,"size_decoded":7169,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9ac542bf4a3685f5841ac581a0a13f69","sha1":"502864ddcb736c1d4e11fb02253e03c7fb677b05","sha256":"a9580ccbffd14478b83967338d4b7bd73e954c1c7dff9a42a012be981474971e","sha512":"35b17839e6b51494bdcf8cecc47beea253947d0544705b340ac9693599862a3bbbdc433086de57034fd130c84d7e01d54f0f98bc10d8c19167ef26335a80988e","ssdeep":"192:NrNsR9ZuYokon+Z6Ke771B9RENxvFfhabCcTg0Q0OK4YyIATPqI25bqWeFR:rsR2nX52p24mWR","tlshash":"eae1a88ab08a22e0c473d0ba97b7825937754e13424ac619f97c49481f74a78b1f7fed","first_seen":"2026-10-14T20:10:33.252013Z","last_seen":"2026-10-14T20:10:33.252013Z","times_seen":1,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:28.975Z","timestamp":1792008208975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3656,"size_decoded":3927,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d96ddfcfbf34d0c7ed28c1085b225929","sha1":"6944aad93b4800c72cdd4b16ca2720c70a79904c","sha256":"2e1a0e2a67befd266c85af42b98c2f3f929297b5466233c6ce9e047a9b42a44d","sha512":"557961ff46abc2e329b57d300fa128c7c820160e4b8e7f530d002f51424bc9d433377b1c6f0f4d7c475ca530d4684e8cad6b0d4670344b74fef4194d9611c11b","ssdeep":"","tlshash":"e971ce832924563ea80361daec923ee5099e13a7c5414aef0aefddd5117431fb26ef12","first_seen":"2026-10-14T20:10:33.254846Z","last_seen":"2026-10-14T20:10:33.254846Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.908Z","timestamp":1792008197908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://mettax.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 20:03:17 GMT\r\nage: 619066\r\nx-served-by: cache-fra-etou8220066-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":25649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-10-14T20:10:33.263638Z","times_seen":29120,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/trx.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.949Z","timestamp":1792008197949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 3376\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-d30\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3376,"size_decoded":3600,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"94689045fe789ea5a804e04d180d5b88","sha1":"4141c8cf319b2a9beabd2f67d9da1591ae1d805d","sha256":"85acc22574a8a833c94e8c767d461f7181a18dab1c3329d955c1eb6b801b6b4e","sha512":"ec2f109ae0ff20f4518ea4d1f48c771c2a9e34acd8895d2dc7c52c3302af590bb25e29484eaea887ac4869fbfa5ad1696c409493a56ff82e6ffe3ce177f3543a","ssdeep":"","tlshash":"ae614b9fcfe19cec8700d0ed7435d46bd5e43e5b46569c6ceb0d10a757c28215986339","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-10-14T20:10:33.268682Z","times_seen":2198,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:23.964Z","timestamp":1792008203964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3655,"size_decoded":3926,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa68d4bcd03a74583f0f10760f3c0360","sha1":"4b23a12ac00a7491f72c2fc6399e89d084e48455","sha256":"4008d48b30d83aef774b9611a90e32a8cbd3f370ea8d730b69eb3f764acd7627","sha512":"6accf56bdbc11b2bbab55a3213bed06d2be2dbbd88ef83a59d6343d8823ecdf58e2adf6760fe858071c1f8cf756a68d2631a4d20851165de3b630d11cff1fa48","ssdeep":"","tlshash":"4471d38335305a3e680261dbec623ee4199e53a6c5514aaf0aefded5107421f726df22","first_seen":"2026-10-14T20:10:33.278815Z","last_seen":"2026-10-14T20:10:33.278815Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/doge.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.946Z","timestamp":1792008197946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2104\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-838\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2104,"size_decoded":2328,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.280544Z","times_seen":7837,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.988Z","timestamp":1792008197988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 78748\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1339c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78748,"size_decoded":78988,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-14T21:45:51.273658Z","times_seen":10538,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/icon_contract.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.000Z","timestamp":1792008198000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1159\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-487\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1159,"size_decoded":1387,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.286371Z","times_seen":5035,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:33.973Z","timestamp":1792008213973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3658,"size_decoded":3929,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a18b59ef81b8b0bd12884c55a26f0240","sha1":"fbae850b37e8ca646aa2957e367db43ea8e857e9","sha256":"8eb7bb9fab6a3b0505165d0e3b2cf06a50f28e65bbbda7a306fa6f177737b4bc","sha512":"9170d4c64e3904d1c086fce32679b32978d63c0dabfcb0fa939f65db8f6c78a20857c0d976920f528f90122973009a968ef7a2bb649abed0c30d913e2002fde7","ssdeep":"","tlshash":"a671dc832924563eac02a6daac563ee5099e13a2c5414bef0affddd5107431f726ef12","first_seen":"2026-10-14T20:10:33.292415Z","last_seen":"2026-10-14T20:10:33.292415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/mbn.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.943Z","timestamp":1792008197943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/mbn.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 17031\r\nlast-modified: Sun, 06 Nov 2022 12:37:10 GMT\r\netag: \"6367aa76-4287\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17031,"size_decoded":17257,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1181, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1181], progressive, precision 8, 200x200, components 3","md5":"0b20cefbeefbedd80e49d8a58d77cf46","sha1":"290ca4efba0fce95a331d716e4a56c93fe576949","sha256":"cfed7f3aa25627c440f85b40b142c87eee4e25eb898d1d3549e6c25b34d19e9b","sha512":"88133ce89aa9c0c334c4148e0f265a9b8a485e30e3c5d9aa677225954d2e4b76d292342101486053533bdaea79f84b61c9ac28ddca7bec2e257155b6bd015b49","ssdeep":"192:IH5o6A9mn+82b28y4lFqJH5o6A9mn+82U9kn91hc+1GMSCjr1LUilTgcQJ9eZ:O5OMjPic5OMxenBc+Idi9U8gcQJe","tlshash":"74722a353b0adea3e4e5453c1e54c645f332ae85956f636178cd28aabf32f920ce5306","first_seen":"2023-07-05T14:45:42Z","last_seen":"2026-10-14T20:10:33.296488Z","times_seen":1510,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Upload/public/635fe346713e9.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.934Z","timestamp":1792008197934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Upload/public/635fe346713e9.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 6065\r\nlast-modified: Mon, 31 Oct 2022 15:01:26 GMT\r\netag: \"635fe346-17b1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6065,"size_decoded":6290,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b0bc9348b74a0fc8d4bc29e5586bf759","sha1":"d36321696b7817a15e4d6b082e80be2bfd7c95a0","sha256":"8a5b46a70cf06ac2809e395a12daa2f9ccf5c7aee153733cc10f95d4fec63749","sha512":"d968316db7d50477454159200d73fb7bf46a53dff86287baca291d9a5b877d0fcd30451dd5b1774385ef2bac343d8cc7732a2ee983a5d1e5897fb8f3ec07aea2","ssdeep":"96:1yDe4JAwOLGH/hUx3Mla7wfzZ5cUPmGRh8xl/uKWZaDRsXpR8jkZ7EDFIvDSnibz:1pGHZUxcY72V51uahsxQ+wRAkVbOngz","tlshash":"54c17d4d6a3a0b5dcbec093456908db7a496bf244a84349be60fbfb5a80d13321c596e","first_seen":"2023-11-14T18:21:32Z","last_seen":"2026-10-14T20:10:33.303526Z","times_seen":416,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/home_head_bg.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.364Z","timestamp":1792008198364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 849481\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-cf649\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":849481,"size_decoded":849709,"mime_type":"image/png","magic":"PNG image data, 4336 x 1428, 8-bit/color RGBA, non-interlaced","md5":"1cbfba6198f4e4ff700eb43de61092ac","sha1":"ff03b54f67e1a0ae20c274c3d06ee52c3dd6ee50","sha256":"618a8249a51b933013f55571d8cdcb16e26863c921c82170e79fcbcb582eea95","sha512":"cb12167584983054c4911ee8604171dc08c8f89fef64c97ef3eb8dca7f424ce7d34b87924419f0e76e7a4b23f231371bef37231639bbb36c71950fdebbae40cd","ssdeep":"24576:2nw3WzrNqGPQiPxmnC+YarisIgK+Xy/6Nn/WMISk:2n+iQGhPxmrY651qGn2","tlshash":"7405224ca0eef889cc125b351ddbcf8d52a430b498ef6719bb63bd20895d9cd6877620","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.307593Z","times_seen":6084,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/layer/skin/layer.css","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.457Z","timestamp":1792008198457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: text/css\r\ncontent-length: 14048\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-36e0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14048,"size_decoded":14273,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-10-14T20:10:33.311421Z","times_seen":5695,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/5f87397132a8b02.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.948Z","timestamp":1792008197948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 2456\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\netag: \"62c3216c-998\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2456,"size_decoded":2680,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.313616Z","times_seen":20239,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-xrp.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.950Z","timestamp":1792008197950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-xrp.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:30:50 GMT\r\netag: \"6ace6aca-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58c6485ac6276d8decd31533a40a35b0","sha1":"52d3fdcd8829fa1d2147b7a62b85fc25b963a4a4","sha256":"c7ce1991257f0c3a300534bda06f56f7dc72882090ec8e45b5712b87c6193902","sha512":"70c6614b78291bbf5e985b69d9ecfd0d71f4eea4556e3e46fa101958b855c9366e5193e34a2b7979365faca866883077c777e11506a8ac5181e8442a91834ed1","ssdeep":"","tlshash":"a0d02b5a90a8571ad908cd15d32b3919219db4c8ed81892df4b1482264ca963324530c","first_seen":"2026-10-14T20:10:33.31955Z","last_seen":"2026-10-14T20:10:33.31955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-dot.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.958Z","timestamp":1792008197958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-dot.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:31:04 GMT\r\netag: \"6ace6ad8-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b18077b87f62741daf015c9813780f5","sha1":"1ed38155a0ec554adcae9bef921c9ace46020d97","sha256":"d2dce4806d6dcc4371af9b11bcbe5c0d760c4e57dcb5310e08d4db9fa2647aa2","sha512":"63817232f9681f0a12b1716c7963b3ce93faf80ea230ce236cbf4d50eecb849e509361a503baa4974cbf985864899e7d5760490a655846839638dc50bfb8e5a4","ssdeep":"","tlshash":"56d02b6a90a86709dd0cc916e32b3419219d78c8ed81891df4f1442364c6957324530c","first_seen":"2026-10-14T20:10:33.321495Z","last_seen":"2026-10-14T20:10:33.321495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/vendor/jquery-1.10.2.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.983Z","timestamp":1792008197983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/vendor/jquery-1.10.2.min.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 93107\r\nlast-modified: Tue, 13 Oct 2026 16:30:01 GMT\r\netag: \"6ace5c89-16bb3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93107,"size_decoded":93347,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T22:59:08.148521Z","times_seen":17790,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Static/bootstrap/jquery.min.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.986Z","timestamp":1792008197986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Static/bootstrap/jquery.min.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84284\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1493c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84284,"size_decoded":84524,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators","md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-10-14T20:10:33.129566Z","times_seen":872,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/favicon.ico","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.889Z","timestamp":1792008198889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4158\r\nlast-modified: Mon, 04 Jul 2022 17:20:10 GMT\r\netag: \"62c3214a-103e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4158,"size_decoded":4386,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 31x32, 32 bits/pixel","md5":"cef1fdcf0f902d25694d5ea83a3d8e97","sha1":"beed6c02f9875f1471122900f5d063d6fe67f0c6","sha256":"aaefc2dae382655fd38fef068fd3d8983038829141a7aee69b2748c21f11e8cf","sha512":"ad93af34db118050fa24f20b46cbe47e67ae07a671e92fed02710c78d0322591d662a83558ed27029574ace77f9e62b3e8cc5bd3b16d53aae700cb6edb661a17","ssdeep":"48:OmFtBetFrtn0t4+tPtHtRbtStj/tKJZri8jQ2nZb7PPPPPg0qlw:OPHCNvr5Q29E0qlw","tlshash":"c381d04bcc961255ea97103ef41383e1ac385ba64b9e710c2f687a1a381e77ed60470f","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-10-14T20:10:33.32652Z","times_seen":2117,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/android_down.d99dd6cc.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.428Z","timestamp":1792008198428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/android_down.d99dd6cc.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11626\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-2d6a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11626,"size_decoded":11856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99dd6cc9eeb67a17b5f64eee801202c","sha1":"6e11cb75b0529af92236763785b69749f62fee4d","sha256":"dc8a78d121b34f655fc063f43d4ef8cec3581d8539369f35f2ae0258a5735954","sha512":"fea5046497f492375a2bde60559ebfb91f67e52685d5b8055c2fd585809cfc98c3bf1a2bb0b20aa00e390c75533ba327d1b66194709fffe3c236fea363c0aed1","ssdeep":"192:Wt1zfau5v7dYMyr8R0tjFnR0tmWi2C/FNNW6xX8jVCZVzLQTsMH6IL:MzfhzS8+pn+mW4FNNFXZZJvw6IL","tlshash":"693255e793a4c0d0690fd5b5cd3b5ae43e1b70fbafc19058326dd944eb429d68b06e48","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.328326Z","times_seen":6565,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.433Z","timestamp":1792008198433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 8131\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-1fc3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8131,"size_decoded":8356,"mime_type":"image/png","magic":"PNG image data, 620 x 414, 8-bit colormap, non-interlaced","md5":"03eb46c414ca4054d6aa8bcc6146e203","sha1":"1ad3fe2ee83e35506f404b3dc6110540539e32c6","sha256":"98f20bbbd1c55089292d663c5a641e6cb4d02e91149bd3b1dbfa3dc87168d1fd","sha512":"e59d6713424efe87e45984399aab1739b3b1ff7cde9fff91c83582110c669f9bf299ccb30a7286bec64c48243f887f701f27051f9e6e8b4445c9e927505db019","ssdeep":"192:vri1p22NLEFORfDwDmxiEVHkmrogfcftKLatznubkt:vriOMR8DmxiEVkafc4czuu","tlshash":"2ef1afc2d9d35ddf9d9c0b2b34cbf454844249d0eac68d05d74245a8f8be082abe3d9d","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-14T20:10:33.332128Z","times_seen":7942,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-sol.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.953Z","timestamp":1792008197953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-sol.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:30:56 GMT\r\netag: \"6ace6ad0-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d779d65210a2c7a5fff192a81909015","sha1":"4a46b8eeb649cb39479c6b888087ccbe17a41451","sha256":"c4aa55ce4af2ef24a4f9ef0bf47cbbfc0fe943d5a35ae603c923435feb49fa37","sha512":"d74d260f3f4aede3f84d726043216b7dca2333404f2f930157755fabfdbb5e4cd43d01e118a6fd5344f6ef7999ff90ac5dfe191def2eeff17dc3a7460e7b656f","ssdeep":"","tlshash":"e1d02b5a90a8570ed908c915d32b3459219d74c8ed81891df4b1443264c6993364430c","first_seen":"2026-10-14T20:10:33.340696Z","last_seen":"2026-10-14T20:10:33.340696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/xm/market-sui.svg","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:17.998Z","timestamp":1792008197998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /xm/market-sui.svg HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Tue, 13 Oct 2026 17:31:06 GMT\r\netag: \"6ace6ada-10a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":493,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fba3dcc8ffb2964b717f426bca15dc4","sha1":"716756e5d7abfd194306ddca302882be0168cec8","sha256":"3c3dd8081b23dafecb9351633bac103dc74e1342a0a76296aa1ed244c9af7dae","sha512":"714068840f7a38ed3702ffb28ba01a04948e6a081faf1ad712961a2cc9d14512e3f7979bee350c19d0e31a9948f1ecbafe45ccc7abc5112873ac2c8d1706b25d","ssdeep":"","tlshash":"21d02b5a90a8670ed908c915d32b3519219d74c8ed81891df4b1443268c6953324430c","first_seen":"2026-10-14T20:10:33.344536Z","last_seen":"2026-10-14T20:10:33.344536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Public/Home/static/js/layer/layer.js","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.508Z","timestamp":1792008198508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 19843\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\netag: \"6385e7cc-4d83\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":20082,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-14T20:10:33.136177Z","times_seen":16915,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mettax.vip/Home/Ajaxtrade/marketSnapshot","fqdn":"mettax.vip","domain":"mettax.vip","tld":"vip"},"ip":{"addr":"154.81.136.224","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mettax.vip/","date":"2026-10-14T20:03:18.893Z","timestamp":1792008198893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mettax.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 15:54:14 GMT","end":"Mon, 11 Jan 2027 15:54:13 GMT"},"fingerprint":{"sha1":"75:3A:5F:85:DE:A0:2E:AD:D2:52:1E:48:9E:82:29:5E:0C:2B:A4:39","sha256":"07:7D:17:04:F2:7F:71:2A:D3:E0:54:D2:53:1E:D6:27:5A:0C:08:C1:30:E5:D9:F0:23:92:2B:99:94:33:72:3A"}}},"request":{"raw":"GET /Home/Ajaxtrade/marketSnapshot HTTP/1.1\r\nHost: mettax.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mettax.vip/\r\nCookie: PHPSESSID=0c0480c38ab578d64a87611a27edc9de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0c0480c38ab578d64a87611a27edc9de"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 20:03:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":3931,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dac32e5ad339474303c43de1b5b07bd2","sha1":"f048128a7838a24ce7891de43bfb3b98aaa50c38","sha256":"36bc2c67604bd828e11935481b50b1443b1870300a8b8f2b22ba02f93d5959af","sha512":"cb3627b745bc373e76e8b981cf32cb6baf2e2db3cb7762b09e42e80f44adc9424bee1731e235c86064675b0e9e895e0ce0e29b05f4e2a680ee711754dd933e44","ssdeep":"","tlshash":"d171f2832934173ea902a1dbec623ee5199e5362c5504aef0aefded5107421f726df12","first_seen":"2026-10-14T20:10:33.349821Z","last_seen":"2026-10-14T20:10:33.349821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"mettax.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}