{"report_id":"dfd35d91-a4d9-44de-83e1-40b3018d752a","version":6,"status":"done","tags":[],"date":"2024-10-22T17:56:29Z","url":{"schema":"http","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"title":"Работа сайта временно приостановлена"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2026-12-31T17:56:29Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cozymeta.com","ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-26","domain_rank":0,"first_seen":"2024-10-22T17:56:29.10292Z","last_seen":"2024-10-22T17:56:29.10292Z","alert_count":2,"request_count":2,"received_data":227835,"sent_data":802,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.reg.ru","ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":0,"first_seen":"2022-11-17T09:46:40Z","last_seen":"2024-10-20T04:46:51.20497Z","alert_count":0,"request_count":2,"received_data":206325,"sent_data":989,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-22","alert":"Sinkholed","trigger":"cozymeta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-22","alert":"Sinkholed","trigger":"cozymeta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bae51b8e92fcd4a4ae6d8007b20907b","sha1":"2d349dcc80d19591a083ac2989fa2b941e6e7001","sha256":"d8a0560358c51b493362768b5e550e2a0f7e5403e9a5e58f37e0eb28ab75c594","sha512":"965511c40a366a367bcd31fcde5ff53ba352eea23c004732a706f9e90fee8b03473b7253a441febd3f64bdab4c0b883d34bfa7475fa1f1c21b048beb6dea852a","ssdeep":"","tlshash":"39a02208a020220888a230b2c2b3f0280aab000c0c088a0203020008080200b8088afe","size":60,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-08-03T04:32:55.580916Z","times_seen":2873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a63aa02365d8405750e6c560d9afe95","sha1":"1230597be75e20d8122dba9654522c876925c229","sha256":"29e8ec6c70702ed0a9326625f4a7ed731293db9c1cc952a006249bda7c8827fe","sha512":"8446e82584f3ab8294685d15745f7b56e8fca8aaa33c850d7ffa6111ffe9e2b0190a69cfccb8b10d4a68ba313e574cf5c77ccaf445051be59847c796000f5309","ssdeep":"","tlshash":"4f31b76621b8e49437965a84491f4057f202a937103ef4e2f70fcc6a6834a420132f76","size":1492,"data":"","first_seen":"2023-09-11T03:57:05Z","last_seen":"2026-06-01T16:26:44.897791Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"af5429b55f3a5d60b13742cfa3081b59","sha1":"a2c20c24eab426ad07de5a108e561a197381eb9b","sha256":"be06fc492045064772f1cd9fd9ab54a2e7bda71872ce3c55aa63a6dc7324c522","sha512":"61d0aeeb357b300d7785e6a39e1d505c1a78dbc8b238f64c5a79b24eac595b608f075ef8fca58a575bd8c29653cb28b7814141c8c85902fc18ea7daef50ad4ce","ssdeep":"384:juhwsKk5heY8J6+S7BUgLXY/N3Zucwy5Gw1SPu46CcrkiyFSLe+Z+Cz5wke24l0L:juhdraX/c7lKR4dS0Bc6KY65aMv","tlshash":"c613b688b592b06947676060613f840bf2371a54749a9960fb22ecdc7cbe84fa073f7d","size":44911,"data":"","first_seen":"2023-09-11T03:57:05Z","last_seen":"2026-06-01T16:26:44.898311Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d78900ce9bebbe860f39f5580efd45d3","sha1":"9b983dfaff56f783a6a8b47a212d4bb0c96b47f8","sha256":"550c7aaeac54f76fdd4e2bc9d0de7cb271089b72702fc71c303044689d69f8c8","sha512":"456eb7099163238eebfe160347e93c0ab5c940187cf8ad6f516069b6be8b19ae4794f14efad36b9330638bb2d3321069f3f7e11fe741a4f5d89122baf322a066","ssdeep":"768:8TUwclhCFe7BF3caJiglgcd6LM6mkIhwMY4ExN1b4:FzBhiglTyM44","tlshash":"dbe2b7c97992f07d17a26a90802f5407f12b1a59b80e98d0c766d9e1b8bd88f8077f7d","size":33369,"data":"","first_seen":"2023-09-11T03:57:05Z","last_seen":"2024-11-12T14:02:07.249888Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6d1b5e9093a97af8428a32d049a0382","sha1":"875968619e5ffd0ef974f04dcf1efafd2035c143","sha256":"f5c294a7f1b57123c7c6042ddb57cf996151eea436ea895117771fbf7527eb0a","sha512":"b86021961be52c0271e765955a7c109ceda93660664b35f17799a1fa62f1335b06a748a68b011c1c5fd519213688edb014282ed49f5ede382aba635c807f98f1","ssdeep":"","tlshash":"f311bd2c2ca5012cd6f37279a9d87280381a1117aae1d40cfa5c64040ff0c39ba75fdc","size":886,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-07-22T23:52:57.026237Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cozymeta.com/","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-22T17:56:04.494Z","timestamp":1729619764494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozymeta.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Sep 2024 23:52:54 GMT","end":"Sun, 22 Dec 2024 23:52:53 GMT"},"fingerprint":{"sha1":"DA:95:04:0A:F5:A8:AA:7A:1F:E1:D5:22:59:F8:F9:61:F0:5E:80:28","sha256":"55:61:C3:61:A2:38:08:6F:A5:24:2C:65:04:2B:BB:9C:22:0D:C9:83:AD:EF:4D:92:C1:61:45:C2:EB:0E:EF:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cozymeta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 22 Oct 2024 17:56:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://cozymeta.com:443/\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":162,"size_decoded":162,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4f8e702cc244ec5d4de32740c0ecbd97","sha1":"3adb1f02d5b6054de0046e367c1d687b6cdf7aff","sha256":"9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a","sha512":"21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f","ssdeep":"","tlshash":"0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1","first_seen":"2023-04-05T03:07:27Z","last_seen":"2026-06-21T19:54:48.518449Z","times_seen":131106,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-22","alert":"Sinkholed","trigger":"cozymeta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Regular.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cozymeta.com/","date":"2024-10-22T17:56:04.793Z","timestamp":1729619764793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 Feb 2024 06:29:54 GMT","end":"Tue, 01 Apr 2025 06:29:53 GMT"},"fingerprint":{"sha1":"33:E4:2B:56:55:E7:18:C3:BE:B7:69:ED:B2:D4:B8:9D:29:F1:A3:23","sha256":"13:FB:B0:26:46:44:BD:2A:72:86:FE:EA:BE:4A:A4:1E:E2:F8:EE:AA:F1:7F:B9:9A:24:41:78:5F:62:3B:A8:FD"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cozymeta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cozymeta.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 22 Oct 2024 17:56:04 GMT\r\ncontent-length: 98868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cozymeta.com\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"dc131113894217b5031000575d9de002\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nexpires: Mon, 13 Oct 2025 17:56:04 GMT\r\ncache-control: max-age=30758400\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98868,"size_decoded":98868,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-08-04T07:48:16.983317Z","times_seen":27904,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":174,"dns":1,"connect":47,"send":0,"wait":48,"receive":98,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-SemiBold.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cozymeta.com/","date":"2024-10-22T17:56:04.800Z","timestamp":1729619764800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 Feb 2024 06:29:54 GMT","end":"Tue, 01 Apr 2025 06:29:53 GMT"},"fingerprint":{"sha1":"33:E4:2B:56:55:E7:18:C3:BE:B7:69:ED:B2:D4:B8:9D:29:F1:A3:23","sha256":"13:FB:B0:26:46:44:BD:2A:72:86:FE:EA:BE:4A:A4:1E:E2:F8:EE:AA:F1:7F:B9:9A:24:41:78:5F:62:3B:A8:FD"}}},"request":{"raw":"GET /fonts/inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cozymeta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cozymeta.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 22 Oct 2024 17:56:04 GMT\r\ncontent-length: 105804\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cozymeta.com\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"007ad31a53f4ab3f58ee74f2308482ce\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nexpires: Mon, 13 Oct 2025 17:56:04 GMT\r\ncache-control: max-age=30758400\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105804,"size_decoded":105804,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105804, version 1.0","md5":"007ad31a53f4ab3f58ee74f2308482ce","sha1":"dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc","sha256":"152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5","sha512":"48aef263aca876ba4db5a596fbb8332524d6b440a8a516e1baa7899f2f1da0e1c44452d0380869ec455d27a6e0b931210b1fb669b36e36914ca27235f34e8558","ssdeep":"3072:wo/8sikhizn8CQRxZ9UXsfH0K1yjewt8G5VYqLS8b:a5z3iHCAHjaJtZ5dLS8b","tlshash":"6fa312cab961eaecd2b1d42806545efaacf3eff0c1e315225697014898accd35ed4f84","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-08-04T06:44:31.81479Z","times_seen":20129,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":169,"dns":1,"connect":45,"send":0,"wait":144,"receive":50,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozymeta.com/favicon.ico","fqdn":"cozymeta.com","domain":"cozymeta.com","tld":"com"},"ip":{"addr":"31.31.196.162","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozymeta.com/","date":"2024-10-22T17:56:05.077Z","timestamp":1729619765077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozymeta.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Sep 2024 23:52:54 GMT","end":"Sun, 22 Dec 2024 23:52:53 GMT"},"fingerprint":{"sha1":"DA:95:04:0A:F5:A8:AA:7A:1F:E1:D5:22:59:F8:F9:61:F0:5E:80:28","sha256":"55:61:C3:61:A2:38:08:6F:A5:24:2C:65:04:2B:BB:9C:22:0D:C9:83:AD:EF:4D:92:C1:61:45:C2:EB:0E:EF:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cozymeta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cozymeta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Tue, 22 Oct 2024 17:56:05 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"64fafab2-377d8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":227288,"size_decoded":227288,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T08:30:18.219238Z","times_seen":17705378,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-22","alert":"Sinkholed","trigger":"cozymeta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}