{"report_id":"4267bfbb-2c9c-428a-9a3c-652012008e9e","version":0,"status":"done","tags":[],"date":"2026-09-17T03:29:55Z","url":{"schema":"http","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"title":"Inventory Check | Fortnite","dom":{"size":3163,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ecd935e76a904d523ba102755c0d9bfa","sha1":"95d8856f80cecde7264b817c299aa6bac13735cc","sha256":"94db36c5d4042cc6ffe9089a4231716767405217d83928587fa4a41021a756a5","sha512":"2312bbc7368223ae7a23978400f99206d42277736a75873f04577b7a4242eed58da3ab8fa8c136975d9725937f5edd5d665f0ae283c249b6ad386edc6b3e6fe6","ssdeep":"","tlshash":"0c51549f58e300666627507d8fefb20835329417698ace203eac525a4f88b5ec4b77dc","dom_hash":"domhasha4c0da820b24243d6c935ad44a5339ab","first_seen":"2026-09-11T17:11:59.083843Z","last_seen":"2026-09-20T12:50:00.794008Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:29:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"imgdb.io","ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-20T13:15:58.624199Z","last_seen":"2026-09-15T11:30:09.76492Z","alert_count":0,"request_count":24,"received_data":2324755,"sent_data":11736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":5,"received_data":216799,"sent_data":2830,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":12004,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fortmax.live","ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-16T18:47:17.573824Z","last_seen":"2026-09-16T18:47:17.573824Z","alert_count":30,"request_count":6,"received_data":359842,"sent_data":4349,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-09-14T09:51:27.827912Z","alert_count":0,"request_count":2,"received_data":408701,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-20T14:52:40.666661Z","times_seen":55289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"43450fab796f3d8c3211e3dec3ea9648","sha1":"55d1a783b0cfff6d7f395e348d1323b637ce53b1","sha256":"4aececc6a05a589452cae1fc3308106b468e36d21e3149cea210668e38120aac","sha512":"912841383a91e1a83275213807e25ccc1737757fcecd9c6da0e74e1d0722e749f57273c84a34d7b816fddaffe6900f159fd369bba0898b7fe75cd6c1d441c260","ssdeep":"","tlshash":"e9f0c268edb41b631242147859ef0222b625124bee2c3cbebfcc10941f0d00d99393ac","size":606,"data":"","first_seen":"2026-09-11T17:11:59.119901Z","last_seen":"2026-09-20T12:50:00.816029Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"832b6909f374b01af195a3703bc0a5b4","sha1":"a5f2fa03bd115f1cd72deb1a02d5978fc4ee06df","sha256":"987cb15b17811ce3a96c8c2af049a14ad40cea4e49e40cff6032b6439e41c335","sha512":"6a4e6a874a4b53306f61ceb5863af4fcf4f3f24923236ac84e563349c69d24a685c9e71d2a1c51eefda45ed1bbee1768c0882144680b1b011f01b95c8e3b391e","ssdeep":"1536:lADfCVqfPBBW6lqMBcrnjA5KmnHZKrcPZFo1hWhCKQ/:lADqVVrjA5JnHZG4a","tlshash":"9563b47ad170191401935a3ab2e6b641a11cac03ee02f4f87b8d96091fdda5f90f6efd","size":72201,"data":"","first_seen":"2026-09-11T17:11:59.121064Z","last_seen":"2026-09-20T12:50:00.81503Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/ahaiambpaockadjc.js","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1f22df357231624d8152ac1be01b56c","sha1":"beef238ef51529573f7b910e9c7b142273cedab9","sha256":"5e765dc52ab87c52e22408778d85fbe31f9a165e9844777b210ee1dbde6e9b40","sha512":"fedbc9f6144a4c1d1b5d0cf3b9934bf13417f40a9f4f8e860999c0b7d9903610ece4fca43fde66e465ac76ea0e074a3a234a0e63f4ebf7310d43ad88471c9832","ssdeep":"1536:fdHnrjyUzPUnLleGJ40xiAEsqsfsjWabwrXzBQh66+pVgVPGB0m5Y+LwIWlDf:VnrjyU5DJc6+pUsZ5YBr","tlshash":"3a8384482bc068445b5f9f7b3b2b70dae85a0cd9b245484be214bcb4fd6531ae7f5a30","size":85643,"data":"","first_seen":"2026-09-17T03:29:58.181408Z","last_seen":"2026-09-17T03:29:58.181408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9abb23788991806e8e6ed2d7986e54bf","sha1":"2e611adff7079c84f8bd223a094c1811b69b5b03","sha256":"8680d04c15b17ce2abb7f4d9ae3d75e62c890d76f966b377ea1b8ff2e76a9e09","sha512":"601f4809d2bcb5d61bea7d200bc6dc409c316fbec07616e1740488ff9844fdc51320fe1dabdf5ced88949dd66f5f18d607aa0e95beebe877c3bbdbd1d4a24692","ssdeep":"","tlshash":"ab4101df5cd311625a6720bdcf9fa24830326417688ace203d5c821a6f98b2ec5b67cc","size":2224,"data":"","first_seen":"2026-07-20T13:12:01.400346Z","last_seen":"2026-09-20T12:50:00.815538Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"imgdb.io/i/0ffGnp4.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.929Z","timestamp":1789615765929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/0ffGnp4.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"4a5a-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 19034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19034,"size_decoded":19576,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"5be65e8da8e482533aec5e8950136ced","sha1":"9ef519315646abb4c389ce9187a3dc52b84bb29a","sha256":"518a27c0007501a04fca223be0362767b1fda02ca799870e0d4afd9395a3ef29","sha512":"1612eda7a43fe1f6f8063c09e21ad1cd3af93ff0737a4afc4df027c3722c64dc1fd3213ebabe655e70df385d934e2f31a35cf4cda1cc4a75ae0bdfb385b8b8d2","ssdeep":"384:o2qnHQ0Cf4OjXC5z7qASNkGTH3o0QUqRt4I/w7vlGiUxhAfrbT+IdX:inGf/jX+qAS1HRQUVr49hADbPdX","tlshash":"d482e1e7596a87b9d5cf1f2d9e1c303049dc4aee370b9baac85060117f28c6c038923a","first_seen":"2026-09-11T17:11:59.10799Z","last_seen":"2026-09-20T12:50:00.804535Z","times_seen":9,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":64,"dns":9,"connect":20,"send":0,"wait":88,"receive":7,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/cUqGNAQ.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.547Z","timestamp":1789615769547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/cUqGNAQ.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"6c2-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1730,"size_decoded":2270,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"a8575501d1fc816a0eb21149f628d8b2","sha1":"8bbe78b438137576dfe6ddee5f07475330786677","sha256":"c967bb66c3a0ce68d8efe8e0d8457b8bbc3c917d1ac5c07289e51f3a4ac0a253","sha512":"f2f5eb22cfe6426a2cd958542ac85b14d29cd00eaccd6532cc80842b852fd96416ab3cab0b672145c92d0f551cc6e4e01679501d83e7396c7940098e18df7c57","ssdeep":"","tlshash":"2431d876b544d6e97a40d3f713fcc611de95cdda2146084e10e2c7783ac7ee5b14e112","first_seen":"2026-09-11T17:11:59.109409Z","last_seen":"2026-09-20T12:50:00.812767Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/I4LAtSY.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.551Z","timestamp":1789615769551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/I4LAtSY.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"728-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1832,"size_decoded":2372,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"b58ca32dd0c9b0e67b97be0b2d4c96fa","sha1":"90ab51ea6b663beeff151cd801349ab97e0458db","sha256":"c6538baaf35c5665660af6b1c658a3e57ae7373c4728f2dcbb7fcc7c311593e1","sha512":"c9f01741eb7fe7cf57134eb7f2dab13753fa26ecb136537c9164820b969208e78bc6facb2243b26f694b008b6c89e98eba5514f808565cd6c11a041739e7706f","ssdeep":"","tlshash":"613109ffd470e2f88a64a9a26321f030dd0cf2c0467a44756a0efd84d468ab4740b293","first_seen":"2026-09-11T17:11:59.114345Z","last_seen":"2026-09-20T12:50:00.802904Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/vzJwoCw.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.922Z","timestamp":1789615765922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/vzJwoCw.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"18d-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 397\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":936,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"917ed333a23bd7a067cebb00b1e7b1a5","sha1":"e5a4d9702caa26734708d2459ca679ea20a72c29","sha256":"874ec1fd0b3b87c58fc3d67dea7d700cc32c287e79cea3cf0c6084c686e65dd1","sha512":"5f6fcfc7e60157df913cf68b495091fb275c6c4a64610d043342cd5a04ee37bfbc2d9abdcbcd0b2d81a7ee5dae2c80762770404efb8da197269fdfa2f6dbeec1","ssdeep":"","tlshash":"60e061fb13118439855498b314ad4d49c453b9d462516005f4f1f5c377f1498245e195","first_seen":"2026-09-11T17:11:59.118118Z","last_seen":"2026-09-20T12:50:00.799832Z","times_seen":9,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/dgNPxPw.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.925Z","timestamp":1789615765925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/dgNPxPw.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"1d1a7-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 119207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119207,"size_decoded":119751,"mime_type":"image/png","magic":"PNG image data, 847 x 629, 8-bit colormap, non-interlaced","md5":"2aaa694faff6c50f26de2fcbba41da74","sha1":"fc7d6c1205eeed203aa89a00220bfa3976084190","sha256":"b00afcb698ed30e67ff7b4d0499ca029bdf5674f5000b16060bce924a32878fc","sha512":"a716902c3d41ae3b51a23c06d53e22c6e338b1d0e7f84a4775e21be40fb26aaae12308d1b80abc3c336bc1e84f9a4634418bd56107825ccb4006aeb9309f11ea","ssdeep":"3072:BoDivCYLRKeiSsynii5SehGuGZyV3XwIPwJtb9/U1FmMM5:OOCg0E1SmGuGstXStbRQcMM5","tlshash":"bec31204cd47c0f1d0479a8ed15c38b9baeb83b61bd822c3c53da8d4ad57a9a06fc526","first_seen":"2026-09-11T17:11:59.086227Z","last_seen":"2026-09-20T12:50:00.812295Z","times_seen":9,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":28,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/H8WwpQ8.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.930Z","timestamp":1789615765930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/H8WwpQ8.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"451a-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 17690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17690,"size_decoded":18232,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"77ced95db51e814d95d6b872be0e1a87","sha1":"dfef4b7dba230b30579f61e0d1f2d168afb34447","sha256":"b5ca5680b85b8bed7e2e8bde79155ea36e6c50a7a5b0f5e6590182d29c959966","sha512":"bf8c5032b26beec5d8ee2911436b383fb3b962ac6afd7edddb05603945f59f79433d323efdd8696ba7dd6ae04bb453b50d6996ea8e3f847813a2895c782961b4","ssdeep":"384:LoDYyBe9GA12fi2lnalJKuga6/jbzTmsN80qG+O4p62P:cDLs9GFCkNxqB7LP","tlshash":"e182d00a339a284bc7cb6ceae97135764fe4295180ba89170eb804e51cd5e0a15b9bdf","first_seen":"2026-09-11T17:11:59.091037Z","last_seen":"2026-09-20T12:50:00.805055Z","times_seen":9,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":64,"dns":9,"connect":20,"send":0,"wait":25,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/QtJdiJw.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.470Z","timestamp":1789615769470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/QtJdiJw.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"20aea-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 133866\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133866,"size_decoded":134410,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"f4fb58f1f13c21c6b1c90221ea19f1f3","sha1":"f22e0a233a793d0d61d4c18798e8135212ecc506","sha256":"63778dddc7075e8870c416fbfce9e603c7d6471e85be413b0c8592047d049df8","sha512":"8bccaba93ab1236890650b8975370ee00ed9a6018413bcd2518ff882b43ee98f9a80f5f00899c86637a04d3b396ef147e28515375e400a9a737cde48d4616f87","ssdeep":"3072:7bUCFVZj8nyNfLtF6NLDfI1QewjpA8fTHHBuNbZ:fUCFVZj8ncC1DmQ7pA47HBuNbZ","tlshash":"4bd312e367a492a4fd7d0cdd498c904114d27c31a46a07be1a10b89feeebe51bf88749","first_seen":"2026-09-11T17:11:59.101778Z","last_seen":"2026-09-20T12:50:00.801025Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.515Z","timestamp":1789615769515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61077\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T15:42:45.596526Z","times_seen":293273,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":38,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/-9_jk8c.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.550Z","timestamp":1789615769550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/-9_jk8c.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"76a-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1898,"size_decoded":2438,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"4a4cf02e060e403bf67742fa1da7daa3","sha1":"66937556662f26363c12082d4344237afb2f8cf6","sha256":"21e8ca5e51e24c5144635273aa25130cc982215bef7d1fd06286b47dfc81cffa","sha512":"9b1d5b8263ae9267e378e16846f36925bc5e693ed19dac5a058cf750acc67dce8d44e429ea0fdcace98dfb08a9e96f2442fd6f8f996cb7fd661119b631005ec7","ssdeep":"","tlshash":"5641195e22e4b9b53c50b0aac74bac347ae336415ca21534295ea6b529c2b915827022","first_seen":"2026-09-11T17:11:59.116945Z","last_seen":"2026-09-20T12:50:00.802271Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026family=Inter:wght@400;600;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.909Z","timestamp":1789615765909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Anton\u0026family=Inter:wght@400;600;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 03:29:25 GMT\r\ndate: Thu, 17 Sep 2026 03:29:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11320,"size_decoded":1498,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f1e955cce6d73c865f338f36a1af6101","sha1":"e8a23f315bf1431616ae5729fe3c741ca189d6b8","sha256":"7d3b78e79c3a02894b454081e25df46fa736b3f225c6cf5561be0ede96f1e2e8","sha512":"efbfa7261b8d789e593521a432d0895378ff196ad4ba779f808b4416c45daa7e22a599a849b33e2433701f00c2ffebae834b2fafb82bc8d51c46f340a662ca41","ssdeep":"192:cqGhlTNNIxO34OxDNNryfO3iExlfNx0NO3kCxHYNCbOO3Lxxgx:clXJpl7GQK","tlshash":"4932aa92002ba400ab971dc233cf7f3aaece50856085d1b96ffd0dc99cead66436875d","first_seen":"2026-09-11T17:11:59.111558Z","last_seen":"2026-09-20T12:50:00.798557Z","times_seen":9,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/ahaiambpaockadjc.js","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.913Z","timestamp":1789615765913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"GET /ahaiambpaockadjc.js HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nCookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-store\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 17 Sep 2026 03:29:25 GMT\r\nserver: nginx/1.25.5\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85643,"size_decoded":30572,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d1f22df357231624d8152ac1be01b56c","sha1":"beef238ef51529573f7b910e9c7b142273cedab9","sha256":"5e765dc52ab87c52e22408778d85fbe31f9a165e9844777b210ee1dbde6e9b40","sha512":"fedbc9f6144a4c1d1b5d0cf3b9934bf13417f40a9f4f8e860999c0b7d9903610ece4fca43fde66e465ac76ea0e074a3a234a0e63f4ebf7310d43ad88471c9832","ssdeep":"1536:fdHnrjyUzPUnLleGJ40xiAEsqsfsjWabwrXzBQh66+pVgVPGB0m5Y+LwIWlDf:VnrjyU5DJc6+pUsZ5YBr","tlshash":"3a8384482bc068445b5f9f7b3b2b70dae85a0cd9b245484be214bcb4fd6531ae7f5a30","first_seen":"2026-09-17T03:29:58.181408Z","last_seen":"2026-09-17T03:29:58.181408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/JVPBxW0.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.928Z","timestamp":1789615765928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/JVPBxW0.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"4b32-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 19250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19250,"size_decoded":19792,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"7dedc800f4066adbe71a1e37254285a7","sha1":"32a1b064d71623f075f2c61cc822f7af0af23418","sha256":"917c6d2b1e927d6c2d8a35bc0b53692770f24f83e4f3cc52a3d27250eb537a48","sha512":"ed30363ee4ff924cc4fbd0dc627d3a6462f766f8a6d97c5ac65d72928ac7f593b04b38edbb870eada58f769ac8532a2119fb8eee4f45067e076c5fbd77ed9716","ssdeep":"384:uu3FMobj/ByG3QXR8ud1IwIkYtUKCDwrMx2vYX3elb9BV8BtTZn1lg2ZdBmNWo:uuMOjAhRd1pIHvCkIx2AXOlbitTZnogG","tlshash":"9382e1e7b9ea2f339a9900e8ed84080158cd8d1abfad2d716041f33f261da7b0f51725","first_seen":"2026-09-11T17:11:59.105171Z","last_seen":"2026-09-20T12:50:00.804063Z","times_seen":9,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":64,"dns":9,"connect":21,"send":0,"wait":23,"receive":1,"ssl":273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.052Z","timestamp":1789615769052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 4456028\r\nlast-modified: Wed, 26 Aug 2026 11:24:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FUcDMk5aPJ6iHEqGVjYCyzZQf32YGjmaAr9qPCtIdLCox83JQVn5EY9h9E4cLQ026Mze9%2FSI%2BxyavcNKimJVZu2g9AHhKyXC9PJL5O27q6FwUNPiuDcEhiTPkFTzTUfSm06aeY%3D\"}]}\r\ncf-ray: a3c506dc9eac1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127120,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-20T14:52:40.666661Z","times_seen":55289,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/rDGVrjw.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.544Z","timestamp":1789615769544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/rDGVrjw.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"809-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2057\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2057,"size_decoded":2597,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"18850ad6d328f2ea7bfe2093e6662917","sha1":"c20f90e114154235bf9ca1d95d969c0241c01ee1","sha256":"948b39299e6fffe7bb683af962d09b23d1e478e93c08333de6038bf8ad2ed496","sha512":"120d6de0caa8d37ea55f9bb199c72c6490b598eccedfa37f4746b43d0a8342faeea9daf5f3ef9692c5a528b3471086ca79cbf8cb8f0ec37acd775a3cbd56cbc4","ssdeep":"","tlshash":"46411ce3a2ecea2755c404d32556c53420e721b84ec1672274a083e28615ad69ed52de","first_seen":"2026-09-11T17:11:59.097324Z","last_seen":"2026-09-20T12:50:00.795662Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/log","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:34.571Z","timestamp":1789615774571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"POST /log HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://fortmax.live/\r\nContent-Length: 513\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":513,"data":"{\"action\":\"visited\",\"salt\":{\"timestamp\":1789615774534,\"iv\":\"78528efb567ae83045d8f3aec4a6af26\",\"data\":\"ef6a5277c8d9e36a1d1f922371fa070b5521e98b20c51b4a10423e27b4359373af24e8ae5559af7f53a6c8ac040dbe847af7409a92bd1122317241b3ef20f2cfd9351cbd28c5dfbb2a815c78cdce7bdab67c0d583e7563701d2989cd8f346eb7c17ff6d65e94577b2fd06119091f10717cd8dda0c0c5e9d7ef30ed5423726e315ad9aefd6cc57c43699da5e1c6e7e18c51c82cbf0cf56835b132e6c58ac541dd9bf29a6a100a00911b2a710b62f0642fb65b68b751a8700052f0715d9668adb59aa46bb278b4717857fa4275\"}}"}},"response":{"raw":"HTTP/2 204 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ndate: Thu, 17 Sep 2026 03:29:34 GMT\r\nserver: nginx/1.25.5\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/log","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:44.535Z","timestamp":1789615784535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"POST /log HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://fortmax.live/\r\nContent-Length: 513\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":513,"data":"{\"action\":\"visited\",\"salt\":{\"timestamp\":1789615784503,\"iv\":\"2da8ade8a7a85a7b47b58a3366c0ae6d\",\"data\":\"59c8ef77b07b0394a816d43d743da6ecf8062bb3f1cf0936e6973ec90621db294dc35b4bce79d46e2e280c8d5fced28ce08efced77905bee00db0a5669164574cac81026b4869b00257a53c6b2eba1602bf7af082b9341e4ce6a1fa5c5b49eddec747c7fc8733ee3d9d910ec49d8e1dcbd7e777f52ae8aaa5ffdb2e1b80cd59160af0cb1795c7bdddd20197fbadf0799cd069d7f88a6eda939001104ae52ef2d5741e68af02d89279cea4473880884ae7f718c555f08f8d2d8e83b9a75a2604d21805f54fabf3b3435ed6d3c\"}}"}},"response":{"raw":"HTTP/2 204 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ndate: Thu, 17 Sep 2026 03:29:44 GMT\r\nserver: nginx/1.25.5\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/lsyj_0c.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.916Z","timestamp":1789615765916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/lsyj_0c.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"5bdd2-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 376274\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376274,"size_decoded":376818,"mime_type":"image/png","magic":"PNG image data, 1920 x 837, 8-bit colormap, non-interlaced","md5":"7be6d68f7a0033f71571cb39545ad865","sha1":"ae4b11782498482b314ab240c643ddd444a71311","sha256":"5afc29a84ff384bb970a51b17e0bf89ae208945d68cd0e0922099cebc878c6c7","sha512":"6794e51ac2463f32840e55d3f39a54412359a1bb839d089a9fdb60aab43331f73956ecea05422cc2ccae49690ee289b4019155b84397b6a91acab86ce610632e","ssdeep":"6144:c3In3ciFYo4AZ9FBSP1ETuhsJ2/L1paIhXIGeCsxz6O6hP1tSjPzaDdj00tLR43J:Ao39FBSP1ci+uLLB+Ge5xAl10jPzMoWO","tlshash":"898423f6d4549c0fd4aee07a54d2d7ea7ad0234ed51f84d94b00b2e2e0b3c6a783479a","first_seen":"2026-09-11T17:11:59.113098Z","last_seen":"2026-09-20T12:50:00.81015Z","times_seen":9,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":87,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/PcF1_WQ.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.924Z","timestamp":1789615765924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/PcF1_WQ.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"192-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":402,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 8-bit colormap, non-interlaced","md5":"aa90daf63f0d87d1a131826392d1e153","sha1":"05d70b260d06d4e81341010d985420390e5698c5","sha256":"f0a4e22d2f39fecd714f2ec25e4c256d3b2ef1a606a15de09c53812b08e61c66","sha512":"25f444277f2beab4245b0f3a8daeeae636c9e9aa24a4bddff52b35682af88b4a771105845ab1ee0a4c7887e7f0de8869cb52bfa60bdfa0962159d5784bbb27c2","ssdeep":"","tlshash":"68e0f1eb4e88ae274757214133150c204de229be41d62c0af024f9e76bd09656ea6260","first_seen":"2026-09-11T17:11:59.08518Z","last_seen":"2026-09-20T12:50:00.794867Z","times_seen":9,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/DpQUf-w.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.932Z","timestamp":1789615765932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/DpQUf-w.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"14bd5a-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1359194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1359194,"size_decoded":1359740,"mime_type":"image/png","magic":"PNG image data, 1600 x 2604, 8-bit colormap, non-interlaced","md5":"f107cc7249c0c33cabf5376bf227bc6a","sha1":"1a7de2c106101d27189624321137063893a764b7","sha256":"182175b54c717237006347b30565daa3c4603e2795a61208f7b5094482bd39fc","sha512":"2225a207316bba397a039f6ccea9fbf324ca0f3726bb7a60ca9f443b5b37d5c5cd3ea49573d16671fa90ad5c33c248a7cfe4b0740e8f688b7df452adbbc2edf5","ssdeep":"24576:kmeWQeWmu6oXK7py8rTHIABZzmU2y5Ktt8yQkvVJaS5p0zAJvS11YaajFr:kmeWQuu6oX0/HKR+aQkPaS5p0zwqbz0r","tlshash":"fd2533726e8e8237f50f442559a54c087d4974beaeb49cea3c0549a643a7fe3c33af14","first_seen":"2026-09-11T17:11:59.0937Z","last_seen":"2026-09-20T12:50:00.806054Z","times_seen":9,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":64,"dns":9,"connect":21,"send":0,"wait":25,"receive":41,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.517Z","timestamp":1789615769517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61077\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T15:42:45.596526Z","times_seen":293273,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:29:25.244Z","timestamp":1789615765244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-store\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 17 Sep 2026 03:29:25 GMT\r\nserver: nginx/1.25.5\r\nset-cookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE; Path=/; Domain=fortmax.live; Max-Age=604800; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"session","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE","quoted":false,"path":"/","domain":"fortmax.live","max_age":604800,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE; Path=/; Domain=fortmax.live; Max-Age=604800; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3155,"size_decoded":1820,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"80b33bb2823c2ac02cd80f3f53dd9db3","sha1":"e273c420e50b49b62b1877b72242b1e0676a0215","sha256":"23641be3f72a0561e68e27beb6e1915152639e6ae509c0ecf8c8eb8a79519434","sha512":"c5e8156480531c0e43afa5b67eb98e90d1cbc353e04263b41f1539651699d5495c058980a1bf3cdb00d8c8941980dd5f13dfa05cc18e9a92f8f454d7e738c443","ssdeep":"","tlshash":"8c51509f888211165a33637ddfe7a10cfb226167528286253dfc901b1fb0b49c1a3fc8","first_seen":"2026-09-11T17:11:59.090022Z","last_seen":"2026-09-20T12:50:00.807902Z","times_seen":9,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":5,"connect":29,"send":0,"wait":45,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/CXKsTXQ.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.920Z","timestamp":1789615765920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/CXKsTXQ.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"1fd-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509,"size_decoded":1048,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 8-bit colormap, non-interlaced","md5":"b7adba9b0d7884f40b980527cba0e3b1","sha1":"5c63fa5cafeeb0c7a146ca95b89eedbec8cd2cb5","sha256":"29219f3b1b809fe6701c3ab45e36864e2221ba8987b160a23a0e2b3fa2e1555e","sha512":"b653abea55ce1a4c418fc0e2c456c2c66dfa6484ebf44a24f9f2f80216665de5ed144bc25ad479619c2ad38ca7e853397c565c18d335d132038d5d6b47f1315b","ssdeep":"","tlshash":"f6f0c0fd07850632045a8ba3421c4cb4a9da3a442a241118d6e081e704c11c29e3f676","first_seen":"2026-09-11T17:11:59.099516Z","last_seen":"2026-09-20T12:50:00.814457Z","times_seen":9,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.511Z","timestamp":1789615769511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61077\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T15:42:45.596526Z","times_seen":293273,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":28,"dns":1,"connect":0,"send":0,"wait":45,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.513Z","timestamp":1789615769513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 03:07:50 GMT\r\nexpires: Fri, 17 Sep 2027 03:07:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 1299\r\nlast-modified: Mon, 15 Sep 2025 16:32:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18612,"size_decoded":19423,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18612, version 1.0","md5":"912c3c9f2621e1b6f8bc0b6c8c1dde27","sha1":"b9beea08045a9cbadc819734ff402abe8c081bfb","sha256":"d0fa07ff63dd60cbc0e2f58e29c802dca2a5ae0276c999f59c6111ab7bbaec3b","sha512":"4e863160381eef28a10e3a7c51ccc6b23cd3f56ebea6612ecdbbf5fd89304f54d2254e3e9078fa5ddabc433764e174d45fd1885841135fb65f33d20d56195fb8","ssdeep":"384:CAssOmx/NqZjQxV2TegKmq8vYxp1tpubA6TyDMHM+OGD5J:C7mx/NqZjQxVYNKPnZ6TyDMHM+bVJ","tlshash":"7182e092cc6c880fd48d14ee865171b76fc96fe10221feec9826e911a19ee09d6d01be","first_seen":"2025-09-17T01:49:45.641161Z","last_seen":"2026-09-20T13:19:34.980667Z","times_seen":7046,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/yBAtbBU.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.552Z","timestamp":1789615769552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/yBAtbBU.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"733-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1843,"size_decoded":2383,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"a0e3cf30e838b6f1ab055ad5366a912e","sha1":"b3659989678f09541300ca87be777a211b38f56f","sha256":"3b17df6acc3060d897782bf7664d4ec7779fd359bf65978fd9a78eb876bfa05f","sha512":"01dfc9db871adb324ba9efdb9aae7f286d3dbeb83612e5865a80e24f28117edc16521ebea0140646570ff7a848e8c473582e0d6f550d20c766c0141788b6e4fb","ssdeep":"","tlshash":"46312b79d2ca297887d4711bb35ac678f667007215c2c84004b16ced06fd1be270d766","first_seen":"2026-09-11T17:11:59.110494Z","last_seen":"2026-09-20T12:50:00.811759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/7CQYEQc.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.921Z","timestamp":1789615765921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/7CQYEQc.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"db-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 219\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":757,"mime_type":"image/png","magic":"PNG image data, 55 x 28, 8-bit colormap, non-interlaced","md5":"950d376f2e2c9e6d55e32b1c65e27663","sha1":"0a5b067d267646709a21c34eed260726f87ad176","sha256":"b7707a2236cbb0fdfe7df0218d828d0d394366b0305d0f6e7dcda32f57b94c0f","sha512":"f9ab82cd9696df6839b13e7921181d018f2262a8dcbfbe9711e63667dd9808e6e6c262c5eea9e4c6de4ade82c44ddfbca99f1029e7067584596af7eb119241aa","ssdeep":"","tlshash":"cbd023d75148897f531f2ca1976f0600880f9e591a53150d4444b4100577618d295574","first_seen":"2026-09-11T17:11:59.096282Z","last_seen":"2026-09-20T12:50:00.810684Z","times_seen":9,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/S9L6KIg.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.468Z","timestamp":1789615769468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/S9L6KIg.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"29173-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 168307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168307,"size_decoded":168851,"mime_type":"image/png","magic":"PNG image data, 1300 x 388, 8-bit colormap, non-interlaced","md5":"74616bba37a25f2ca980fbba18b0b7a6","sha1":"6cf488bf7e05c3e2754e18ba4797b1327976d948","sha256":"68cf9183d1ce3da20714fbac9c9cd91b5c868c3e4d21d24f429c02cf1c93a297","sha512":"f63b1aee8ca41f587e42fab391b24366fc96dc84c2c4e3bd2d39f04355dfc5eadc71caf3331bb4301ad36cb6d76c98e3e4893fe1814e5a61f23d47d0d09fec8a","ssdeep":"3072:bjz8BYHqvJ+/ESD6ictHwwLIDL4ghLYB63CMhj0Ao9oieEECvJd1Xm6G:bjYXwc465wfhUwSMNa9onCv7A6G","tlshash":"b8f3122fef6f98b34e8ed59393503443a72dcdae5a9e9c16d83779219a13ed1c05c808","first_seen":"2026-09-11T17:11:59.09515Z","last_seen":"2026-09-20T12:50:00.796418Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/9U7MsPs.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.545Z","timestamp":1789615769545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/9U7MsPs.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"770-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1904,"size_decoded":2444,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"6553560d6e2ddf6cdad6cff26dc7cffc","sha1":"f227c74e0dd388542ed0aaba01cd16dff2145c2b","sha256":"c0635f2bb6b06837e62f3a6d714bcc36ee8e7fa538bf9d4a365f1c61c0fe8ad3","sha512":"a69cd5909a2236f1640639c76a032262ca62543887d7f3a5165ec53931902bfe15d2af3ed742ea077e1a4137358eb3c7bcc7dd1422592f9a11839aa06123eaab","ssdeep":"","tlshash":"b1411b5d51df8883c6531ef32d0b9429cd631d39c362064e02d0beb104b8e5c6c103e3","first_seen":"2026-09-11T20:18:12.144914Z","last_seen":"2026-09-20T12:50:00.799244Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/PHE4kYE.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.926Z","timestamp":1789615765926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/PHE4kYE.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"5663-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 22115\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22115,"size_decoded":22657,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"5b99d1ae824e72086e7cf7ed9a358e28","sha1":"9fa7de88675a733fd58bf225ae98d06e37da624d","sha256":"bd62f9631f856d720c45cb55e52acb0121216cfa304ee9a0816f16e6369e3202","sha512":"86e70325c78e20a460b0aad7dc8e8fe2c715471474e3865505eea96a8c1e9728d38a4383f6ea4b6be0155b6b4a98d0b2be0830744bb74ace50b8a4e022ac2300","ssdeep":"384:mYLqBTm3Ak+MI3j2H1neUrZxh1LWdu/XKxIg+FT2RSHIkDYqj9qYF+4ZLPrsP+qz:T3wD53j2H1e2ZxKd3xxzSHIkBjEYB+Pr","tlshash":"efa2e0a7281144cbebb9a2658237816dc95d0fc13d423a0cab9466231359e6f3537fcd","first_seen":"2026-09-11T17:11:59.106805Z","last_seen":"2026-09-20T12:50:00.80353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":88,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/LXVeNBs.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.931Z","timestamp":1789615765931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/LXVeNBs.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"503c-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 20540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20540,"size_decoded":21082,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"909fa830cda6a8b51e7e47e8bbee4b8f","sha1":"4f8cc787528e62956a8d70ef3eccd7bc8c0c53de","sha256":"2f6f4da62948cb28c9108d375a8008719b22756d90466fb8ada046cb0adde7d9","sha512":"89c5119fa872189d7e17e62e12cfb3bb03fe589827fac23a355fc0791826d6ec7c2305bb702c89713e28e4f94ac57eed7866c497e822de009b9845995664d791","ssdeep":"384:vN++F9J6qFZWpY3PvlG2kTxwdG3klAb3XmnSMop3OsCZ4U8Hk3iEGUkw0PaCwTf3:1LwaPELxx3klAb32toNOlZyHkyEGt/ah","tlshash":"e492d0e6113f6de4590d7900836fb15971f7ba4c2319c1100f13ba7edbba2b1a49b6a2","first_seen":"2026-09-11T17:11:59.092469Z","last_seen":"2026-09-20T12:50:00.805561Z","times_seen":9,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":64,"dns":9,"connect":20,"send":0,"wait":26,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.510Z","timestamp":1789615769510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61077\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T15:42:45.596526Z","times_seen":293273,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":25,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/kQU0tRw.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.548Z","timestamp":1789615769548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/kQU0tRw.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"6b8-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1720,"size_decoded":2260,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"2ccd151277953ed1ba8d49887a9c778a","sha1":"4eef8aec648062e34408ae86928248d29c08fe07","sha256":"156a0941f72ee7445110143a9e7dbee260949159729b71b14fb062e6d4f9187f","sha512":"2d6e7f8f5a3bf0abaa07a3593bd3dd6f9f9e5e2d5a909d967734cf23ab6ef59ca8ac2f58371e1462de1abea0765729d726e78dc4394c80bd75b2e129dfc7de1d","ssdeep":"","tlshash":"9531d6e9a68444e080ae99a8778acd08faeb2661a3ac020335584b15d715624a1d7fdf","first_seen":"2026-09-11T17:11:59.115477Z","last_seen":"2026-09-20T12:50:00.807385Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/VnbO0V4.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:29.549Z","timestamp":1789615769549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/VnbO0V4.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\netag: \"674-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1652\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1652,"size_decoded":2192,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"75f8acb69bc3465678f42f6e01727ce2","sha1":"fc3cbb7f71dfd4fa279785497895edd1da35cdf7","sha256":"dfc2e0b597e2f994e73177f97ea08f8feed520115f549c42f5c64a101ef6dbbf","sha512":"8d564b2ff10a3829d7c92dfedc66a86d91a68fb088830e24e4323505d6cae03503c69ddd1105aa3c2b37ddd75c28f8ab199e4e4642be728e852df0c6c1119dc1","ssdeep":"","tlshash":"fe31f642f2188d5e08d870633e99f9233ce62fa55f0014a05a14862331633b9afbf7a3","first_seen":"2026-09-11T17:17:19.79014Z","last_seen":"2026-09-17T03:29:58.209326Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/iframe","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.575Z","timestamp":1789615765575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"POST /iframe HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fortmax.live/\r\nContent-Type: application/json\r\nContent-Length: 15\r\nOrigin: https://fortmax.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"referrer\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-store\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 17 Sep 2026 03:29:25 GMT\r\nserver: nginx/1.25.5\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265728,"size_decoded":59798,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44061)","md5":"a671c65b54cd8915ab585ccd66951fa2","sha1":"6810b81b0912ebbac7d4598c5a19fb04bb6de9d2","sha256":"4f36df97dde15b3fc780b56b446c0adf0b357bda152f4cd45abd9c4bc7979e93","sha512":"970b75c0d16d019303090c5c77d8b65180bab6ddaebac703706c0ad5429b9e78af086f16e142d2883ce6a6585efb13eee7372be68ea7d8c3fc3055fefb37df58","ssdeep":"1536:VGDIFGDIuGDI9sRnLFUqCdgiXmNbLDADfCVqfPBBW6lqMBcrnjA5KmnHZKrcPZFi:MfSeswxOXADqVVrjA5JnHZG4G","tlshash":"44440a7951701028544b6b6844cd7e661cbca9df9a51bcf8b28d70c83f45befa4b22f8","first_seen":"2026-09-17T03:29:58.210227Z","last_seen":"2026-09-17T03:29:58.210227Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortmax.live/#ZgotmplZ","fqdn":"fortmax.live","domain":"fortmax.live","tld":"live"},"ip":{"addr":"62.60.226.148","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.673Z","timestamp":1789615765673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortmax.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 16:33:26 GMT","end":"Sat, 12 Dec 2026 16:33:25 GMT"},"fingerprint":{"sha1":"C3:70:99:87:94:68:94:11:A2:2D:66:D0:3F:1F:20:97:C4:DE:B5:43","sha256":"C8:AF:48:66:97:A7:0A:34:33:1E:65:98:46:7D:9E:21:9C:82:28:EC:9B:69:45:B8:5D:EA:65:37:77:F4:DE:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortmax.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nCookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-store\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 17 Sep 2026 03:29:25 GMT\r\nserver: nginx/1.25.5\r\nset-cookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE; Path=/; Domain=fortmax.live; Max-Age=604800; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"session","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE","quoted":false,"path":"/","domain":"fortmax.live","max_age":604800,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkb21haW4iOiJmb3J0bWF4LmxpdmUiLCJwYXRoIjoiLyIsInBhdGhfaWQiOjI4NjgsImNsaWVudF9pZCI6IjdhYTA5OTE1YWI1ZmMzOTBlZjE1MjhiYjRiMTg4MmQ0Iiwic2VydmljZSI6ImVwaWMiLCJleHAiOjE3ODk2NTg5NjUsImlhdCI6MTc4OTYxNTc2NX0.02NKtpTI6SVc20ErbG33UU4lITjiEROEjfESMEWhtgE; Path=/; Domain=fortmax.live; Max-Age=604800; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3155,"size_decoded":1820,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"80b33bb2823c2ac02cd80f3f53dd9db3","sha1":"e273c420e50b49b62b1877b72242b1e0676a0215","sha256":"23641be3f72a0561e68e27beb6e1915152639e6ae509c0ecf8c8eb8a79519434","sha512":"c5e8156480531c0e43afa5b67eb98e90d1cbc353e04263b41f1539651699d5495c058980a1bf3cdb00d8c8941980dd5f13dfa05cc18e9a92f8f454d7e738c443","ssdeep":"","tlshash":"8c51509f888211165a33637ddfe7a10cfb226167528286253dfc901b1fb0b49c1a3fc8","first_seen":"2026-09-11T17:11:59.090022Z","last_seen":"2026-09-20T12:50:00.807902Z","times_seen":9,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"fortmax.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"fortmax.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.899Z","timestamp":1789615765899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 17 Sep 2026 03:29:29 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::dwrxq-1789615105394-b105ee56d78b\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 663\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hA34qVXTvzTbV5qjxblyLrLFJMGtv%2BSWrMHonBIC17Auq76QuiUYqITkrXBo4LYKU5Ecg6dvw1m1skViE%2FdaFnoeOqwinPImgF9LMW5cmFeo1Z3ODCly%2Bk2Fbua0JcTdqflVcQo%3D\"}]}\r\ncf-ray: a3c506dc8e961525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":3147,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":3135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/SYt0hJ8.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.926Z","timestamp":1789615765926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/SYt0hJ8.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"4cb3-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 19635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19635,"size_decoded":20177,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"a5dd603892a3e2d7c371cabb6804813d","sha1":"fdf757f07099f0192cc65e008a2dcf0547e80ddf","sha256":"634efd7902174caf4ad560b4b914e4c3c14186ccd65f6a775569819ada92eaab","sha512":"5c8c018f3347865233939512369c430320f20bdf9c5cfdda11240019a20279e47126d242f3f394e5afef0f8bccddde83283457b6fe8fdf252d72bbb96b1adb58","ssdeep":"384:jAOEU69L1iDMJIE/4rgWF3u+MCFGcgwxlJ1gagKkvsbLkCBS7tbm:jAzUY1iDMXIgKuLeGcgElXgagKkiBYti","tlshash":"2b92d0badf094475e6417cf99d9da4127e22bcfdb413c08af1a7b8eb30726636a400c1","first_seen":"2026-09-11T17:11:59.100612Z","last_seen":"2026-09-20T12:50:00.811229Z","times_seen":9,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":84,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdb.io/i/lwj2KxM.png","fqdn":"imgdb.io","domain":"imgdb.io","tld":"io"},"ip":{"addr":"138.124.32.82","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortmax.live/","date":"2026-09-17T03:29:25.927Z","timestamp":1789615765927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdb.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 11:08:16 GMT","end":"Mon, 23 Nov 2026 11:08:15 GMT"},"fingerprint":{"sha1":"2D:58:87:D2:47:0F:DD:36:97:6E:8B:C8:31:A3:FF:4B:69:ED:63:83","sha256":"8A:50:C6:BB:0C:A9:83:0F:DE:C3:10:27:68:04:5F:63:E4:30:36:BD:3C:00:6C:E8:A6:64:CA:06:F6:F6:1B:56"}}},"request":{"raw":"GET /i/lwj2KxM.png HTTP/1.1\r\nHost: imgdb.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fortmax.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'none'; sandbox\r\ncontent-type: image/png\r\ndate: Thu, 17 Sep 2026 03:29:26 GMT\r\netag: \"5009-0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 20489\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20489,"size_decoded":21031,"mime_type":"image/png","magic":"PNG image data, 206 x 255, 8-bit colormap, non-interlaced","md5":"b50b30eea18c45c8e94d86249375dc82","sha1":"aebbca06dab0a6c610e18e0da2930dc381f984c4","sha256":"bdfbafa4fdbb5e1d0a8f026752ff3f126cb908a21501dd7480da041d4a892760","sha512":"e618e227b975f9a81ef73b7b99abfbe46ff5105ce993f4ab5ffc9c5e156e7c73e78972d8e54c07a6cb864e86899894cc71a68e48e8f0094271aca0915b805e2f","ssdeep":"384:JzgLvZPMYSI4QrX/D8oUdy3i77o3UGV4IhP2BzLEclk3lBMwxyQ2YWKHz:J8viYWQrAoHy/zO4Ii3EclkVPFl","tlshash":"1c92e1de157a4d84eece572bb633511ef9974f26025320f4727cc4e86448816e7a4d3a","first_seen":"2026-09-11T17:11:59.0874Z","last_seen":"2026-09-20T12:50:00.808453Z","times_seen":9,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":64,"dns":9,"connect":21,"send":0,"wait":25,"receive":1,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}