{"report_id":"5d95448f-bbb1-410c-9d7a-c0c01a594ffc","version":0,"status":"done","tags":[],"date":"2026-07-23T08:36:36Z","url":{"schema":"http","addr":"bloxmax.xyz/","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"bloxmax.xyz/","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"title":"Brawl Stars","dom":{"size":21042,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1177)","md5":"92e6d7209e7aa934e822c273608811a2","sha1":"39dca1c47ebf29f8b877326f99a47be795675e60","sha256":"e9a73539c56301b52a80a17849c4c821c4c8839fd1eada4a2224d1623ac96cd1","sha512":"961eddf3a034428e167a827a181f38a9c800974b84f4f1229be1f765898869cbaa5e9e7b69f73f22c8a34cc0cc6c9c2fdc8c1a598f1aeb1c97ac5af523553c0b","ssdeep":"192:N+MH9H4rKwfOpnZPSxCyslnOrPZ2UAA+GZ/dPZ2kAhQoKvNs1O9shAEZ26A1+vml:SCOhEFNqZqo0orGllHufHkaRsI","tlshash":"859276a45263025a703385a66be6570a37a5c013e507dc2b3fed22d8cfc6dddd6e2389","dom_hash":"domhashe2f47e1fca96af51edd3d3caf4ff5eab","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bloxmax.xyz/","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T08:36:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bloxmax.xyz","ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":211309,"sent_data":5433,"comment":"","tags":null,"fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-07-20T08:16:40.328836Z","alert_count":0,"request_count":1,"received_data":29071,"sent_data":549,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bloxmax.xyz/js/landing-prompt.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae5abf2950e5bc671f5c3750918e6eae","sha1":"5a9922cf15b1a9e92bb375713629ca7390984cb8","sha256":"2356a79c55857ce87d1fd4a6ff712b24353550d482920d2c5f96b54df0682372","sha512":"8d75e0879e7a82b121ed6369d43b5fdd1ca9a15c6ea3c2c915a5cc79e4e31dbaad3737ea69c46df77610a3264f6d3654f5fce2a0106bb9d089aa42597686de53","ssdeep":"96:OQhOYgkCVXuU7nm2iMQLj+LTYih5W8vzqsis/CS:tMdVXuU7nmTjgcaWm+1S","tlshash":"2b9111a668872547c5b6ab7debfb9a4cf52d14370996d2063c9c84742ff04254172fcc","size":4502,"data":"","first_seen":"2026-07-23T08:36:41.392327Z","last_seen":"2026-07-23T08:36:41.392327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/js/api-adapter.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28244de664d1f04748ca8838cdd9e14f","sha1":"1a37acff5ef561cecf104b0b9e2f12d690da06b7","sha256":"4f4769858d95351b3e415715b19d45eee1f7907e5f835a9c2920c53d07de9ec1","sha512":"f9def8aa5b301dd5f77c569f1747676fa860b389b413d5441089b33edc979074fe8569d6466f8c77ea78df41ae72095d6178ce1c665f674a9959ab5204927140","ssdeep":"192:DvcAgoD0LE+F54/ge65VmDVW/2PWdMCUJ7WaJLWabG7SS:DvrgoD0LE+F6X6QeSCUJ75Lg3","tlshash":"ff1221debe8560269273b33dce17c404fa36a433221a9621bdac80647fb48719775fc9","size":9483,"data":"","first_seen":"2026-06-19T07:19:19.098064Z","last_seen":"2026-07-23T08:36:41.396584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/js/app.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f21574138e9650d53908ef924d87709","sha1":"da76e695a62fbbc50600e8c9c2a8546bb8be6aca","sha256":"cedf0244012489bfe53eb518e3f9a4e9d61a4fd746f45843d4dd56bd50e5154a","sha512":"6e8796e12439aa6bcd6d8329aef0306a4a3ed64052bd01800925ec9c5353649f55e6edadbcef1ecdce7356219038c0f719ebcda741ef41e1ac941cbf032285a8","ssdeep":"192:elpSlvbes2L4l8RFhiLlp2YSiSixtbz/zI0YXZn0A+oDYW3cnGXMhhl5C0MaKkm9:ngiLlp2YSQLFn7ajhn","tlshash":"0e72849e369924769973f33ad7ab6a08fa3601370841c2247dec4a266ff0c509675fdc","size":17259,"data":"","first_seen":"2026-06-19T07:19:19.099607Z","last_seen":"2026-07-23T08:36:41.399678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bloxmax.xyz/","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T08:36:00.102Z","timestamp":1784795760102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=60\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\nset-cookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6; HttpOnly; Max-Age=300; Path=/; SameSite=lax; Secure\r\nvia: 1.1 Caddy\r\ncontent-length: 20108\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":20108,"size_decoded":20489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d8cb27d53059d0ae44b3d4ce77ace4e1","sha1":"dc49026a130475e70e36266da08876515148a6a2","sha256":"0503cb81ebcfdc255c91d3f123f81e1eb177ffa7c7b1e0dc4da52ff4fcc396ed","sha512":"3fb78e46e017ad912772b2fd09077351b81133c1cd2d9c767715649c312c8538769a2dfbd336e727b3ac1546b91bd19f96a38b001ca244eeccc65fea77cac099","ssdeep":"192:7+MH9H4rKwfOpnZPSxCyslnOrPZ2UAA+GZ/dPZ2kAhQoKvNs1O9shAEZ26A1+vmP:ECOhEFNqZHxToMG9ufHkaRso","tlshash":"309295a45663124ab02385796fe2570a3365c023e603dc6b3fdd21d8dfc6adcc6e2389","first_seen":"2026-07-23T08:36:41.389793Z","last_seen":"2026-07-23T08:36:41.389793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":34,"connect":21,"send":0,"wait":23,"receive":24,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/js/landing-prompt.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.510Z","timestamp":1784795760510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /js/landing-prompt.js HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\netag: \"c4f8ca2169c6990870d7a837c6908be0\"\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\ncache-control: public, max-age=86400\r\ncontent-length: 4502\r\nlast-modified: Mon, 20 Jul 2026 12:22:18 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":4502,"size_decoded":4803,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ae5abf2950e5bc671f5c3750918e6eae","sha1":"5a9922cf15b1a9e92bb375713629ca7390984cb8","sha256":"2356a79c55857ce87d1fd4a6ff712b24353550d482920d2c5f96b54df0682372","sha512":"8d75e0879e7a82b121ed6369d43b5fdd1ca9a15c6ea3c2c915a5cc79e4e31dbaad3737ea69c46df77610a3264f6d3654f5fce2a0106bb9d089aa42597686de53","ssdeep":"96:OQhOYgkCVXuU7nm2iMQLj+LTYih5W8vzqsis/CS:tMdVXuU7nmTjgcaWm+1S","tlshash":"2b9111a668872547c5b6ab7debfb9a4cf52d14370996d2063c9c84742ff04254172fcc","first_seen":"2026-07-23T08:36:41.392327Z","last_seen":"2026-07-23T08:36:41.392327Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/js/api-adapter.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.512Z","timestamp":1784795760512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /js/api-adapter.js HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\netag: \"ff7820af70434cc3136f2097cb61c898\"\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Jul 2026 12:22:18 GMT\r\ncache-control: public, max-age=86400\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 9483\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":9483,"size_decoded":9784,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"28244de664d1f04748ca8838cdd9e14f","sha1":"1a37acff5ef561cecf104b0b9e2f12d690da06b7","sha256":"4f4769858d95351b3e415715b19d45eee1f7907e5f835a9c2920c53d07de9ec1","sha512":"f9def8aa5b301dd5f77c569f1747676fa860b389b413d5441089b33edc979074fe8569d6466f8c77ea78df41ae72095d6178ce1c665f674a9959ab5204927140","ssdeep":"192:DvcAgoD0LE+F54/ge65VmDVW/2PWdMCUJ7WaJLWabG7SS:DvrgoD0LE+F6X6QeSCUJ75Lg3","tlshash":"ff1221debe8560269273b33dce17c404fa36a433221a9621bdac80647fb48719775fc9","first_seen":"2026-06-19T07:19:19.098064Z","last_seen":"2026-07-23T08:36:41.396584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/js/app.js","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.513Z","timestamp":1784795760513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"620a22dac361d5ed69c4a8645104e02f\"\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncontent-length: 17426\r\nvia: 1.1 Caddy\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Mon, 20 Jul 2026 12:22:18 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":17426,"size_decoded":17728,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9f21574138e9650d53908ef924d87709","sha1":"da76e695a62fbbc50600e8c9c2a8546bb8be6aca","sha256":"cedf0244012489bfe53eb518e3f9a4e9d61a4fd746f45843d4dd56bd50e5154a","sha512":"6e8796e12439aa6bcd6d8329aef0306a4a3ed64052bd01800925ec9c5353649f55e6edadbcef1ecdce7356219038c0f719ebcda741ef41e1ac941cbf032285a8","ssdeep":"192:elpSlvbes2L4l8RFhiLlp2YSiSixtbz/zI0YXZn0A+oDYW3cnGXMhhl5C0MaKkm9:ngiLlp2YSQLFn7ajhn","tlshash":"0e72849e369924769973f33ad7ab6a08fa3601370841c2247dec4a266ff0c509675fdc","first_seen":"2026-06-19T07:19:19.099607Z","last_seen":"2026-07-23T08:36:41.399678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/game-pl-ru-tr.woff","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.515Z","timestamp":1784795760515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /game-pl-ru-tr.woff HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Jul 2026 12:22:05 GMT\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\ncontent-type: font/woff\r\ncontent-length: 94008\r\netag: \"67be8a749906bbf4448ca3352f79a34d\"\r\ncache-control: public, max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":94008,"size_decoded":94289,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 94008, version 0.0","md5":"bcbd2ac8c66d716489a9358d25edfa4a","sha1":"e68d389fb10925f5ddd55587c4d561192d7255ce","sha256":"9dfd4ead14113d135a567c4fbdea8b0967894c51e590970a53db20fe673f746b","sha512":"d38f89862013f2c997b1bd3c63cddca715ef6bcefdc41852f1567503c53ada8b1853c19bf888bd7184df220830fce190d36fe6ce788815b1446eb883f7618d81","ssdeep":"1536:Svas8BZoay5Z9koSSjdjNSTgs5+jHdFxJWe1q7cXarqqURfLzQdrsfWDo4UngK/C:a8BwfyImbKx7q7cqrqxlLzQdTUgF","tlshash":"4c9312e88fb64f45f05e299a0cd9160d6b206ddec15015638bd436f25bf238a2eb70bd","first_seen":"2024-08-19T18:49:11.807183Z","last_seen":"2026-07-23T08:36:41.401846Z","times_seen":12,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/landing/prompt","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.573Z","timestamp":1784795760573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /landing/prompt HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bloxmax.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\ncontent-length: 909\r\ncontent-type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":909,"size_decoded":1047,"mime_type":"application/json","magic":"JSON text data","md5":"dbf62803d62cde6a14acfcd411b44751","sha1":"f3e49a325fe2b68623aae8ad4463861242bd2b57","sha256":"fef680162f4b27c35fc1fadf37f0c7bf0a44cbe305489c764e0dc830eebbb9a8","sha512":"e8a10a50a6247d6fa95a4a50b199649008aa21830bcc7a9b6fff879e7768fec34529f1bd7e7739b81ba1272eca96f24fa230279400da02e9b97e73c13e85b061","ssdeep":"","tlshash":"7711dc2049ed189bc301f065d91abd4eb9bf457f59e273a21c387c6e25e3071c128b64","first_seen":"2026-07-23T08:36:41.403625Z","last_seen":"2026-07-23T08:36:41.403625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/button-gold.svg","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.625Z","timestamp":1784795760625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /button-gold.svg HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: uvicorn\r\nvia: 1.1 Caddy\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-length: 1502\r\ncache-control: public, max-age=86400\r\nlast-modified: Mon, 20 Jul 2026 12:22:04 GMT\r\netag: \"390a6c7a3e1bc063cb211695432b1930\"\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":1502,"size_decoded":1786,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a8435ce62ed8f27ff54c5692944cef","sha1":"697706515fc80fe66ebe2fcedf84ee9da7d4afdf","sha256":"2b2e4194c484d24f99dc7dd344c4559de687d66ca32c9734fb5cc36b2b9a56fd","sha512":"64489f870144155490bfbbc242c1d81cd31fa27e2193e2757bb47e0871ebf14dad4b1b7472b145934b2cc9e35870c50bcf0b1815ad3b472f20097b585600d449","ssdeep":"","tlshash":"6b3155a5c1f80784bc1083a8edbd506b742becedca90b415f6ad4830f7adcb54892981","first_seen":"2025-05-22T21:35:36.601177Z","last_seen":"2026-07-23T08:36:41.405056Z","times_seen":29,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/BjKhD9lwaeg/hqdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.520Z","timestamp":1784795760520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:24 GMT","end":"Mon, 21 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"99:EB:44:FC:A9:EB:62:72:A5:7C:E5:77:BF:06:63:47:1B:54:C7:D7","sha256":"CD:4A:F6:7A:9F:60:AA:84:9F:37:94:1B:BE:E7:AB:41:46:38:9E:68:4A:4F:36:B3:D0:84:EC:FA:44:D7:A9:DD"}}},"request":{"raw":"GET /vi/BjKhD9lwaeg/hqdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28398\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 07:12:37 GMT\r\nexpires: Thu, 23 Jul 2026 09:12:37 GMT\r\ncache-control: public, max-age=7200\r\nage: 5003\r\netag: \"1770566457\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28398,"size_decoded":29071,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"06dbe4c420107c6f4e7733251b0d5b3e","sha1":"44cee5ea1b8e172b3075cf78428e8da74b4ecb27","sha256":"3c7e4ecab8e30aa03bd0297e0dc3d5de016332de7fa30d0aaaf7ac849bfb32ea","sha512":"1e15da8f65f89fae846e38b2070b453e3c0f1ded6a962aa9d496c5620ec2b45126f5bf2d91077e377458038405872f5b92712c06d715f340625cfe9c79c8b193","ssdeep":"768:Ox1otbnoq/TymekGIZUw1w/xZeLrkyO0epN+B:Ox16bnoq/mmelIpw/srkx0eu","tlshash":"1cd2c0721bf61471c758003a7ee18b395379e81d09d45ab71682cf6a31c55f4d0fbb2a","first_seen":"2026-07-23T08:36:41.406186Z","last_seen":"2026-07-23T08:36:41.406186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":15,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/logo.svg","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.521Z","timestamp":1784795760521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"bf149c346d4dcd2566ec1707b76ece0f\"\r\nvia: 1.1 Caddy\r\nserver: uvicorn\r\ncache-control: public, max-age=86400\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5037\r\nlast-modified: Mon, 20 Jul 2026 12:22:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":5037,"size_decoded":5321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ada2d5c6400ed08a05b1778bf8016c79","sha1":"1a68fdcc80ed972a780357504f1dfb39b7d19831","sha256":"2eceecbf3dd412f7f6322d08b37de95cb0b550e1350815929dc0a3114791d9e4","sha512":"c69b867e138ca84f8a760522e09f2c444ca39ba17ddc7606787411c5d2891063d00742c031a284874fce8ef9c1b87a6b07c8660ecd46bc2448d0aef49a74efef","ssdeep":"96:ajJXzw2CfqwL5GfkArGor0rgRqEkcURqEkKVRrz1FYVl2sVJTW1lg:ajJXzwfqwtGfkArG0wE9NE1V5z1FYVlR","tlshash":"2fa175d1ebb91bbc4c810b1d8664747132a9246fb176f2bcb9bfa25176412f040b4d7d","first_seen":"2026-02-27T20:00:40.266817Z","last_seen":"2026-07-23T08:36:41.407567Z","times_seen":20,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/background.jpg","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.524Z","timestamp":1784795760524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /background.jpg HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncache-control: public, max-age=86400\r\ncontent-type: image/jpeg\r\ncontent-length: 34414\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 Jul 2026 12:22:04 GMT\r\netag: \"6252203624c201c82608543a26a54cd8\"\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":34414,"size_decoded":34696,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1280, components 3","md5":"f09031a54ec0f12691969e11c7df7a11","sha1":"007db51652729394ea5867a7029e6a205d230135","sha256":"18fce2ab773d4b1f40f04d85a9d20567fa17eff7d79a1835feb97dd2a399b7e2","sha512":"3d79efa4bd0ef37664e29f6f5ce7e28e22b7b4dbcd2a22d396785aa43f13aa89e72b24d68991b1d45e5789e0ebe194d241e3fb184b9d0d10e74609f68f9590ec","ssdeep":"768:7hWm3thh2rOomhKbaBGBgqNR6Cud50j9E4Sa5U+4rA:7hp3tnkOmaGnSCud50j9FSaK+4k","tlshash":"d9f2f2df5a95f249e12540b145c306613ff2a864d287f13b9a907dacdfed3882a59bc0","first_seen":"2026-07-23T08:36:41.408861Z","last_seen":"2026-07-23T08:36:41.408861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxmax.xyz/game-font.woff2","fqdn":"bloxmax.xyz","domain":"bloxmax.xyz","tld":"xyz"},"ip":{"addr":"113.30.152.229","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bloxmax.xyz/","date":"2026-07-23T08:36:00.641Z","timestamp":1784795760641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxmax.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 05:37:01 GMT","end":"Mon, 19 Oct 2026 05:37:00 GMT"},"fingerprint":{"sha1":"F4:90:5F:84:F8:07:24:BA:E0:44:CF:C3:6A:13:FA:D2:D9:72:93:4B","sha256":"36:73:D5:40:E0:6E:3D:8F:7B:AE:9A:11:DA:5A:30:A7:B1:3E:3D:5F:3C:B3:B5:D9:ED:E2:53:42:27:3B:F0:CC"}}},"request":{"raw":"GET /game-font.woff2 HTTP/1.1\r\nHost: bloxmax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bloxmax.xyz/\r\nCookie: _vt=1784795760.df63d82dfe2febfe9858a26e738e75e624ce835b1ffce29e9c0e6643e09a39c6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 20 Jul 2026 12:22:05 GMT\r\ndate: Thu, 23 Jul 2026 08:35:59 GMT\r\nserver: uvicorn\r\ncache-control: public, max-age=86400\r\ncontent-length: 21084\r\nvia: 1.1 Caddy\r\netag: \"deb5227e6c42476560a25d0950e48bde\"\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":21084,"size_decoded":21366,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21084, version 1.0","md5":"39cfbcbdb8e1b0738d18cbd7833bdf98","sha1":"bb946a2fe5780e602812fcf29378c51afee84f29","sha256":"167a3318458d450850ed9cc4a96541aba5988f52a05ed3d3b65791eb34edf0cd","sha512":"112fd0eef8e330dbb0737b275f1da99a84a4f88c8e82c19d2dd0b5cf6e9573600dcc2a4a87b300fc3f37ab379fc68df4361f888b14201a00657d574cacfbda21","ssdeep":"384:1V73kcWEl5FAgaDEPD0HzaS+sadLhwTxJ2cCgwYpClqytTDyq5BvJ:37UcWE1AQD0HzaSa7wdJGdYpClqL2P","tlshash":"f692d0e3d7cc59fb6b4b2c2dc57cf08dafbbad908d1228246b95b5186d84f484942416","first_seen":"2024-03-11T10:42:27Z","last_seen":"2026-07-23T08:36:41.410523Z","times_seen":28,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"bloxmax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}