{"report_id":"73095c32-ba08-4036-be74-0d180cabfbf6","version":0,"status":"done","tags":[],"date":"2026-08-24T22:17:03Z","url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"title":"MAX","dom":{"size":12599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11710), with no line terminators","md5":"4c9bf47afc853ced0466890ac44ef640","sha1":"cbb52a661540ecee4c20529148e092fe372b655c","sha256":"5ae6f8ad4350203dde70f1ee9d45f604fa6ea51183f0e64e01ffd711a5a5fcbe","sha512":"71bd6c16bfed667f9e37d3a4a401f97a2372fb39195e0c5eb6cef5b96b9eaee4c5ec68901077b817d8d3b0610edc3f920612c0d603743f50fbb4e2da9dc5e02a","ssdeep":"192:HBRIL+c2lL4YEpHd/+zsEARAAZug/jnhQyAimgnqzcpmumXTU8lKNd:H8r2lxAri2ug/zhQytTeXhlUd","tlshash":"ed42cb21d90add5be517ac89907fae3e20cfc17f47e487a495f8cea513818fca256c80","dom_hash":"domhashb02349ce4ae2f084b58fa4cf61a8587f","first_seen":"2026-08-24T22:17:08.816048Z","last_seen":"2026-08-24T22:17:08.816048Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T22:17:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-08-21T04:39:48.057872Z","alert_count":0,"request_count":1,"received_data":103512,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxnsf.net","ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":16,"received_data":898958,"sent_data":7575,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":7003,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maxnsf.net/telegram-web-app.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d81da7304889cf10b6cfbaa26f39f38","sha1":"8998e98c1d306c7ed132f7eeaec45bf178588dcb","sha256":"a4922a0d95877fe0699dbaf827ac8d50df3137acb0cc372aa8c5402e934a5df9","sha512":"c58ff07da3e52c590bcbf07493a13ef3bb4b4a5aabc81cd7a36b68b4251bd21ce1c50368c5a4b920e8092a3fc0e217e5cd3d30c5aa89c8c5794bf4ca30a570e0","ssdeep":"1536:papTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:YpTpRdfcKFU7Rx1v","tlshash":"4ab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-07-14T04:55:42.451858Z","last_seen":"2026-08-24T22:17:08.844956Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8460750a8b1cb6fcbd0a20c809e826a2","sha1":"e1946704d59855e1c0c47dc7098b88987081eedb","sha256":"30d800cf6c3560563dc4664dc4fee06e259e356c63b1cf5e027d119ff284cb8b","sha512":"8e325962b73d3103d1e8bf5aa6b0d824f778e7245ec860b10f87322bb7e490ca24508ddc819c7af9ba69e50b07070b4592cb2d3b96ba74b1c05ecadc6d97ca41","ssdeep":"96:pms9LbenRvuJ1OLBWhH82lL4/iJmZ4m7bdmtYBw8YP9:sReUL+c2lL4YEpHd/+9","tlshash":"20814612815f5eb5e307a08bd5cfb7093aeb42bd6ee5435098b0cdd523e14fde026069","size":4144,"data":"","first_seen":"2026-08-24T22:17:08.845966Z","last_seen":"2026-08-24T22:17:08.845966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"deb8de783ab68dcaae93514256d79764","sha1":"48d681af8ed009aa0401c22a31fc49fc94333120","sha256":"91e01db15a703c3055feed1aa77fb1aeab28ba9d9257fcb2e754349aebd1a9ca","sha512":"999c19d88b43b3774c329b5f11a1fe63a679a57d741f0c5c1165e81c0acbffa9a4c162f4d1d311cf2c4ca2fce3874c428b32ce5b443323d5ca4207778723d13a","ssdeep":"","tlshash":"60a002f5a3d37d39a13305a9287218631ba4f11d360c52c25f21c856a752995a790dce","size":67,"data":"","first_seen":"2026-04-19T06:31:24.463232Z","last_seen":"2026-08-24T22:17:08.848121Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-25T13:42:14.588071Z","times_seen":238486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3e5d9abed37f41d3726d19300ea2974","sha1":"8ac0cb42f707b9474a34ef522b9d55874dfe9fb2","sha256":"cd230e93af478d2b04343d7563228fb657fdde9bfa8fa9b8a472acf601c914a8","sha512":"096f9a6589a54e008b6719c9c8235ef7e7947bb174ae4c6f8ef9747052a3fdf646f444cf1ce0a3ec91e1d26d35a5c60d61d76e9b8654e925c225f762059942b4","ssdeep":"","tlshash":"3d01cbacf348e8c24821cf5741631d3844dcec3d02a0929e669dce1e4216d7ca3a8841","size":689,"data":"","first_seen":"2026-08-24T10:23:40.542113Z","last_seen":"2026-08-24T22:17:08.850112Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d18af9cfc04e09140b5a35c2635665da","sha1":"e37e692da6f1c48531ae2e8d84d87d15cb3afca3","sha256":"8fa372fb0c4b5127524095f9aed316b11ddfbb638d57af709f7b5e78fc6f6de4","sha512":"ac3b5cf1f1cd53e88550413b84d46e49e3e81f04bcbabf614725371e954bc10a835f41129f51a1780dc07920dfd21fed7795d21643e3bc9818d90f2e6c2e5194","ssdeep":"","tlshash":"be61cb2d6009de4fec6e7d69027e9d3b20cd897b43e5deb88688cf140a8647927d6dc1","size":3211,"data":"","first_seen":"2026-08-24T10:23:40.544241Z","last_seen":"2026-08-24T22:17:08.851008Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"91f879e0c7da0e6e53f5b1cad66d3c5b","sha1":"9dd54a0f4af786b87e214eb621e776f52bc2afc8","sha256":"17772583103950658dd1457b849b75e6c345101ab2aa32413ee921f37cfb74b9","sha512":"d61cc63a3cbe25b110fac9ef055d00878072ba4caa615d36231cb9f2a709aa03601b42e03d82443d8b98b2e57710a1db8e87038c32b443b04fa4768dcdbbb0fa","ssdeep":"","tlshash":"74b01278e011fe9114b620726139f0ca326f544d19642470211361c8120431d2703fc0","size":91,"data":"","first_seen":"2025-07-26T21:55:22.063936Z","last_seen":"2026-08-24T22:17:08.851882Z","times_seen":749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0b18e504289a2f7778f0677e608bb2f","sha1":"21166f4c519a9774aa218c5695f510d707470b7a","sha256":"61516c2f6e3601b59bb3a5a2729b199ada0465960272fe07f2c59866a36e843f","sha512":"76a9f05a4d93a93cfdb0894f33353c553dbd232f4085cf2b4f91901ece6fb64947e4e1a35a680f7f0262eb4bf513f3699f1b0c929bb1b0a990aa83f2ab493d04","ssdeep":"","tlshash":"34e0cd91dc12dc1dc7564f152c3e1d2521cdd5750645524bbc84cd389d95d3409b0dc6","size":294,"data":"","first_seen":"2026-07-14T04:55:42.479586Z","last_seen":"2026-08-24T22:17:08.852735Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a6261c6b355bd5bd0e6eaf4838cc9ef","sha1":"5db32b96157a501ff02b80b566b1ad6346ac4b2d","sha256":"42d41cb1b2f3ed9c859a837cda0d48e6ebfe6d51bf1194a99a9c74aabe58d2e2","sha512":"d9775e0a58c04e67ff1cb26c27f6d93bc782959145cd9f7a943a11c4d55dbaa2f0b060a8f7df4e7cc669cba6d0775333341645a5811354bc05b13f4ea0ee28af","ssdeep":"","tlshash":"b6c02b105400cd03843924b3047c8c2410dc803ec0e0096043c1cf391a0007be973d91","size":134,"data":"","first_seen":"2026-07-14T04:55:42.481006Z","last_seen":"2026-08-24T22:17:08.853595Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"50d79ec1aaad6451be319ee0a696dd33","sha1":"4c191932bce63f31ced964e8d12c43032319eb2f","sha256":"a18ffae3960d9e2233da3d3662a0efe78954111d876c75896980973a34b548e9","sha512":"8ece952c854f234307b3b86c0026adca369e0c729085c91538845d3c06e03b512b772e3b073880656e996347b554eaf5dda532f30517acf93f2fdd585fc88cb1","ssdeep":"","tlshash":"c3900470d0400d574533001314fc7103155cd04c0c011d501f51fc5f5c531d57707dc5","size":46,"data":"","first_seen":"2025-07-25T21:09:25.855802Z","last_seen":"2026-08-25T12:52:28.119042Z","times_seen":3708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/main-app-8652957311e3a932.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e199bc040ed263f70da0b6dea0d4e4a1","sha1":"cd8779fd828247bbcc3111eb4a7cd85d5944328c","sha256":"b6a1410bcbf3b2946911d0145ac0464b7921686cc8051ee05dd61dcc972d742d","sha512":"64e9ea9d863af24130e8860cf4125001461323826c65f7be19ec09f7f30f97679b58c5e24e3092a11f9df2c88be5ce82f18a0b90f1da990037df240424ea88c9","ssdeep":"","tlshash":"f8f0f45a4f0cf56f5c27ad60fe97ace6185f4135302b4d647910eea23c23b6cd270409","size":557,"data":"","first_seen":"2026-08-24T10:23:40.534865Z","last_seen":"2026-08-24T22:17:08.842772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/webpack-6856105d5f9cf26b.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b302735c850cda6d3e620fbbc44047ef","sha1":"6655b4f3ba553e0bc1cc66f15e66e737958477d5","sha256":"cca9b0505cf074625254b5d5c5fc2aff4898e99ee022053b00e59772ff8fa983","sha512":"ab891896de54ca35aeda48fb74b92a527c8d187184b7f26b0017f8cc8d5f2ff85fd71c821bea04a0a7cf126904c79a9bdd798003655ca1c053e6d36c6f370152","ssdeep":"","tlshash":"d861b4a93625fab556f108c5887fc142f619603b052afce0e717dcb9b468ae10562ff3","size":3424,"data":"","first_seen":"2026-08-21T17:59:24.870412Z","last_seen":"2026-08-24T22:17:08.822321Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/app/page-aa622d71255bf88e.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc8c436aa7dea9290de6c9bf804a85b","sha1":"2b7ad3c4d7e61e59193ea6c8dcbfc70297096c1c","sha256":"57ffa9542795e2c8b55539c50047d2016673a8bbfcf95623b5a13ba40cdc41f0","sha512":"0ee5407a55929cd173bf9e01647f6062e1f200eced330d2480e639b4b30b71045eb298a7556476ff41c321374157601664848b908b740775ee51353085857b41","ssdeep":"3072:ul6a6bYVvgQuyqglgyrZnZ5Vqz8pAMheOrdv6Wn+lNwpN9:tHbegQuyqghrZnZ5FAMkOrdv6YCwpN9","tlshash":"9104e540e155beacf52a449c866fa01c717e2bacde0e4874fabc2c3636544d4b617bce","size":186740,"data":"","first_seen":"2026-08-24T10:23:40.515635Z","last_seen":"2026-08-24T22:17:08.843518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/app/layout-c1fc542203fe5b02.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"25615b0bbc9088f486355a24e43f0335","sha1":"5c338e35f0dfb23ac8df8635054069b5b2c7c529","sha256":"4b5d887af5c108cd3cd89536909d25476da198ff02fd801a2578bacbcf5dc5c6","sha512":"1e6ff5e6869c2197edf5f4961477831a5206451c3105d3b3afebca7a0eaf1e310ce3c964fcedd6c0fc66be805d35a227de6562a62345bf23108a896ee3f697d7","ssdeep":"96:b31rvrAbbDLY99n5GUKqN7xFhgDBT7DBTDA9GCPsY89GCIlP6:b3Fj8DLY9GkxFhgD1Dry39TP6","tlshash":"86b1e9f736c5fc3151aa485058378657ba142e37341fa0d0abaacce93268ec985e1f5a","size":5335,"data":"","first_seen":"2026-08-24T10:23:40.522343Z","last_seen":"2026-08-24T22:17:08.824986Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/255-eb4aecc3ff015961.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae9c0ec95cdd00ec0d1fa269321a174","sha1":"90bd42546ce8f32dcd4074e559231654473d0156","sha256":"bfd934c48ee7007bb34cb98078ea6ba5dcef5d8a8f4ffc2103dc174409680c7b","sha512":"4b09cbebc1245ee789381b0f8b40b81b201c5fde65d5aac05c775e7850688069dfb6e54543b00ffb14377faff800392fb09fa43b3dff549145246396226f1c02","ssdeep":"1536:rh7TN+Izz+cHr6U3lHm0dS/7ZcyBPo7ecq0MEsiTtSocZXxreXRNwrky/SQhuzQP:9TN+UrFA0YLwF5W4RNsz/SQuLi","tlshash":"8e04dab676d0f8e107a780e5843b400af3295c37146f74a0a3e6dcd975605dea1b3faa","size":173611,"data":"","first_seen":"2026-06-06T02:29:26.375182Z","last_seen":"2026-08-24T22:17:08.823653Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173019,"data":"","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-08-25T13:57:22.452156Z","times_seen":4816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/928-c3e13f7ad5c9c845.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"de0eb52e4b551005bb43ad825f9d547f","sha1":"80d7092abd5d745b6ea007301a54efa820973611","sha256":"43fe283b5c937f3e9fe194892ab479a1f346be043f3c0505d5bb766e457d0d0c","sha512":"418d42c9700bf54de67b9c49ed10875e65ff52ff6b239f93cf89d6a770c9128a1a14710b540c2fcd60f014bf58f9dc4de73d57d40024ba8764ae6b9ac96fb553","ssdeep":"384:D42HvDkSF0MFsLzyHT6WOamcz2f3Ga/RcVVKrXHOWTdy4WQBZuk1U4:8FMuyHRODBua5cPKrXuWFBp","tlshash":"6582f9723789fcee575bc184c82f0009e3b95d71322aa454739e9ced96d1584e0a3f76","size":18462,"data":"","first_seen":"2026-08-04T10:36:41.191248Z","last_seen":"2026-08-24T22:17:08.836494Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://maxnsf.net/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"maxnsf.net/_next/static/css/2083910021e6dbe5.css","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.180Z","timestamp":1787609795180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/css/2083910021e6dbe5.css HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 56866\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"de22-1a02faa5884\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56866,"size_decoded":57178,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (56866), with no line terminators","md5":"9d5bf76f7eba57ea64c49faced4e6c7a","sha1":"a36641fa54df0a93808423eaac967218dee4c649","sha256":"be7a0c53e70364a115d6d31667bc334af255a5b3c4367e44ebdb9a81db93e071","sha512":"cd5720c9a57b118db7b2df599cfd0ca854440924752e702b2eb76cb2fef9a5d48a71e8e4658fc75fccbb4133440cffe6f0126d5c1f5eef029071a3dbab3164fa","ssdeep":"768:KDTVpPi+39AeCseWrTL3A6Rd8QppINr1pEtkX6Z/Cke3dmZA:KDB9rcCd0r1pE2Pj9","tlshash":"9f43a870a141213df82bc6a175b05bcf7229c013d76346adfaa662b9cfd62eb1730749","first_seen":"2026-08-21T17:59:24.851914Z","last_seen":"2026-08-24T22:17:08.820793Z","times_seen":8,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":85,"receive":22,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/webpack-6856105d5f9cf26b.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.182Z","timestamp":1787609795182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/webpack-6856105d5f9cf26b.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 3424\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"d60-1a02faa5884\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3424,"size_decoded":3741,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3424), with no line terminators","md5":"b302735c850cda6d3e620fbbc44047ef","sha1":"6655b4f3ba553e0bc1cc66f15e66e737958477d5","sha256":"cca9b0505cf074625254b5d5c5fc2aff4898e99ee022053b00e59772ff8fa983","sha512":"ab891896de54ca35aeda48fb74b92a527c8d187184b7f26b0017f8cc8d5f2ff85fd71c821bea04a0a7cf126904c79a9bdd798003655ca1c053e6d36c6f370152","ssdeep":"","tlshash":"d861b4a93625fab556f108c5887fc142f619603b052afce0e717dcb9b468ae10562ff3","first_seen":"2026-08-21T17:59:24.870412Z","last_seen":"2026-08-24T22:17:08.822321Z","times_seen":8,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":26,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/255-eb4aecc3ff015961.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.184Z","timestamp":1787609795184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/255-eb4aecc3ff015961.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 173611\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"2a62b-1a02faa5884\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173611,"size_decoded":173932,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ae9c0ec95cdd00ec0d1fa269321a174","sha1":"90bd42546ce8f32dcd4074e559231654473d0156","sha256":"bfd934c48ee7007bb34cb98078ea6ba5dcef5d8a8f4ffc2103dc174409680c7b","sha512":"4b09cbebc1245ee789381b0f8b40b81b201c5fde65d5aac05c775e7850688069dfb6e54543b00ffb14377faff800392fb09fa43b3dff549145246396226f1c02","ssdeep":"1536:rh7TN+Izz+cHr6U3lHm0dS/7ZcyBPo7ecq0MEsiTtSocZXxreXRNwrky/SQhuzQP:9TN+UrFA0YLwF5W4RNsz/SQuLi","tlshash":"8e04dab676d0f8e107a780e5843b400af3295c37146f74a0a3e6dcd975605dea1b3faa","first_seen":"2026-06-06T02:29:26.375182Z","last_seen":"2026-08-24T22:17:08.823653Z","times_seen":116,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":56,"receive":49,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/app/layout-c1fc542203fe5b02.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.190Z","timestamp":1787609795190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-c1fc542203fe5b02.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 5335\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 22:42:53 GMT\r\nETag: W/\"14d7-1a030ca8553\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5335,"size_decoded":5653,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5335), with no line terminators","md5":"25615b0bbc9088f486355a24e43f0335","sha1":"5c338e35f0dfb23ac8df8635054069b5b2c7c529","sha256":"4b5d887af5c108cd3cd89536909d25476da198ff02fd801a2578bacbcf5dc5c6","sha512":"1e6ff5e6869c2197edf5f4961477831a5206451c3105d3b3afebca7a0eaf1e310ce3c964fcedd6c0fc66be805d35a227de6562a62345bf23108a896ee3f697d7","ssdeep":"96:b31rvrAbbDLY99n5GUKqN7xFhgDBT7DBTDA9GCPsY89GCIlP6:b3Fj8DLY9GkxFhgD1Dry39TP6","tlshash":"86b1e9f736c5fc3151aa485058378657ba142e37341fa0d0abaacce93268ec985e1f5a","first_seen":"2026-08-24T10:23:40.522343Z","last_seen":"2026-08-24T22:17:08.824986Z","times_seen":3,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lilita+One\u0026family=Nunito:wght@700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.527Z","timestamp":1787609795527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Lilita+One\u0026family=Nunito:wght@700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 24 Aug 2026 22:16:35 GMT\r\ndate: Mon, 24 Aug 2026 22:16:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6319,"size_decoded":1357,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e7597120f4c4687720c4f3224df063b","sha1":"a060227f90388e3a2fe138177868db7f36ae32a8","sha256":"e724d99a3bb82d733b189130b41dd984e02c5cfa5ea8a1a007321b599bf79383","sha512":"d3f1dee1032cd9d6f7627e7cf9f2e18aa7471bcdb1d1144e1ec973353d76410a668d9f6fdf6a6c4e91e09f08639d296d3005b322b88246b69d404cad7a92b45c","ssdeep":"96:j0OEaYJc+uv0OEaslNqOpabTxOpa7FZOOOpaKOpaQJc+uaOpaENqOwhabTxOwham:fc+s0HbywkkdiHyy1RkoRHhyWikvH","tlshash":"a9d19991045bd400aa472cc227cf7e37ed4e62113854c57aebfd9898ecabc272364b0e","first_seen":"2026-07-07T05:37:35.286623Z","last_seen":"2026-08-24T22:17:08.826255Z","times_seen":24,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/favicon.ico","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.647Z","timestamp":1787609795647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":128,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T13:40:44.048108Z","times_seen":18096908,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/tTPXj3tJ/36770a5b41a7.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.747Z","timestamp":1787609795747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /tTPXj3tJ/36770a5b41a7.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 24 Aug 2026 22:16:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103145\r\nlast-modified: Wed, 19 Aug 2026 07:33:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103145,"size_decoded":103512,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 895x875, components 3","md5":"d04afb298a494c0651c633b57ab7bc64","sha1":"f73c8003c2d0debbdca5f7509bc930c3a7743377","sha256":"b999a4ce232c226db70af10ac072848d781db77c33b5569da901c01f5c07d9c3","sha512":"540d5987b9319931002e4bfa6b9bd209364ca39b252d5e4099855f17b8731fd2e190cb2d72eef3da4b43d7b3df1c0d7bfa38d879a2c53af7137d70565d3bb37d","ssdeep":"1536:7o3eWJLcOq3xM3bxbokRAbk4GPxifayyzrNjeKU7R2rk6MElSF9SA3oxZh6DE+K6:7ovL9ysAUZiCyylSK82rk6cFhqh6D89I","tlshash":"5fa3128cc75ffde2c8c4aa3e48e85523f115a47c338d2a62dccd0ad6796e11c594af46","first_seen":"2026-08-24T19:02:21.771234Z","last_seen":"2026-08-24T22:17:08.828474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":2,"connect":20,"send":0,"wait":21,"receive":56,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T22:16:34.834Z","timestamp":1787609794834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /w/CkWcOnwpC HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 10473\r\nConnection: keep-alive\r\nETag: W/\"28e9-V2ZJzBPZghjefEsdgL9sv3EVCdU\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10473,"size_decoded":10682,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9667), with no line terminators","md5":"f9338012a1ee2a49ae9fa58c2842793d","sha1":"576649cc13d98218de7c4b1d80bf6cbf711509d5","sha256":"a0aaa0283c7872ae28a8bea765c64cfa901635de9b800c043d36d1c7956d6105","sha512":"30f3955e96629128b3995ec6a1e12e3d0ac731660b2386f048e482eef0471d115c0ea00984508fcde68f6542a5d5c6f1a2e5da3b5403da60f6e1184c9d658850","ssdeep":"192:RReUL+c2lL4YEpHd/+sEBRBAUOv/vnvPxyAimgnqzcpmumX6:Dr2lxs8ThOv/fv5ytTeX6","tlshash":"c922b721a80ade5bd517788a407fbe3e24cf857f4ae4c7a485e8ce9913814fde256c81","first_seen":"2026-08-24T22:17:08.830949Z","last_seen":"2026-08-24T22:17:08.830949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":6,"connect":22,"send":0,"wait":54,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/css/c1f8e00efdf0aaa4.css","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.178Z","timestamp":1787609795178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/css/c1f8e00efdf0aaa4.css HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 29424\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 22:42:53 GMT\r\nETag: W/\"72f0-1a030ca8555\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29424,"size_decoded":29736,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29424), with no line terminators","md5":"32cca43deba5498f56051809db1adbcb","sha1":"943f5bedef268ef185b82f6340069d365df655b4","sha256":"a5dcf9aa666ef7297dce2a82819966d0ca82e7599b3e4f8d5bdb54502a19105e","sha512":"5c7916b82a90dcbe818849c5c48721e9e82fd7c8981b722f8d8481280d736dac3c26e09af8e1a41e282bc969c82dc8829e4899a08185f6676ae90c05982188f6","ssdeep":"768:xuqIf8GahRRZ6HjjW+WyoKgJWaKe4Wj2KA2:xuq28GahRRZ6Hu9JWaKe41KD","tlshash":"28d296a0b32eddbfec2354b2f7acb80c611975858e21a7e8fe42251256c67f15d06738","first_seen":"2026-08-21T17:59:24.863297Z","last_seen":"2026-08-24T22:17:08.833919Z","times_seen":8,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/css/7b56e9c2c79fe8c2.css","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.179Z","timestamp":1787609795179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/css/7b56e9c2c79fe8c2.css HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 78553\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 22:42:53 GMT\r\nETag: W/\"132d9-1a030ca8555\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78553,"size_decoded":78866,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"273876377f42e1f43206ba1010f43ba3","sha1":"cefa755dad0e4b421f7a54b47acc3dce7c2d6d93","sha256":"c534078448066a76525f8ab513c41625c5423d3eb62b36c7f7274cc11f8501cd","sha512":"715b2f4c1bb5e5a6b69925d67e53c7ccf6d339dd93f83f0faf420d8c100d77db1a19355146115ecd9975d081f9dd8369dbf36eb4b651ecea1523fce88db8f3dc","ssdeep":"1536:aB5qVKLps1j8ZihxCkf+PbkoksjUVz7nurm:IPiAZOj","tlshash":"a273d854a290313ef427d4b2a5e09a9e725de113d6334fd8ddb2b23a8bc72e71672704","first_seen":"2026-08-21T17:59:24.867144Z","last_seen":"2026-08-24T22:17:08.835259Z","times_seen":8,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":87,"receive":24,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/928-c3e13f7ad5c9c845.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.192Z","timestamp":1787609795192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/928-c3e13f7ad5c9c845.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 18462\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"481e-1a02faa5884\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18462,"size_decoded":18781,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18462), with no line terminators","md5":"de0eb52e4b551005bb43ad825f9d547f","sha1":"80d7092abd5d745b6ea007301a54efa820973611","sha256":"43fe283b5c937f3e9fe194892ab479a1f346be043f3c0505d5bb766e457d0d0c","sha512":"418d42c9700bf54de67b9c49ed10875e65ff52ff6b239f93cf89d6a770c9128a1a14710b540c2fcd60f014bf58f9dc4de73d57d40024ba8764ae6b9ac96fb553","ssdeep":"384:D42HvDkSF0MFsLzyHT6WOamcz2f3Ga/RcVVKrXHOWTdy4WQBZuk1U4:8FMuyHRODBua5cPKrXuWFBp","tlshash":"6582f9723789fcee575bc184c82f0009e3b95d71322aa454739e9ced96d1584e0a3f76","first_seen":"2026-08-04T10:36:41.191248Z","last_seen":"2026-08-24T22:17:08.836494Z","times_seen":21,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/w/get?route=CkWcOnwpC","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.727Z","timestamp":1787609795727,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /w/get?route=CkWcOnwpC HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 4161\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nETag: W/\"1041-Fq0i1P3H/uNWlnOZYJfmUNMOoeI\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4161,"size_decoded":4446,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b18375a134ad5bbad1708ccb85a87a1f","sha1":"16ad22d4fdc7fee3569673996097e650d30ea1e2","sha256":"c3e4620e8b7d961505ccc82c95951110a655c473af5875d3fc700e8d1866119c","sha512":"7f2c3df28bf9b37795938d5fb18b8f7e32e60fbad7fd9c7edfade9375c7c4a1b5c7bec7bd67a7e0ac4204b4da44bbb8a02d65f1c44579dbf49f950322cb1610a","ssdeep":"96:OZms9LbenRvuJ1OLBWhH82lL4/iJmZ4m7bdmtYBw8YjS:bReUL+c2lL4YEpHd/P","tlshash":"ad813412815f5eb5e303604be5cfb7093aeb42be6ee5435098b0cdd523e14fde026469","first_seen":"2026-08-24T22:17:08.837515Z","last_seen":"2026-08-24T22:17:08.837515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/fonts/MaxSans-Medium.woff2","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.742Z","timestamp":1787609795742,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /fonts/MaxSans-Medium.woff2 HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/_next/static/css/c1f8e00efdf0aaa4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 18672\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2592000\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"48f0-1a02faa5885\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18672,"size_decoded":18959,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18672, version 1.0","md5":"e898d570a07c934e1d22a00eea531a51","sha1":"71ea9ea0e129124c81bd7891f74f475edac23fee","sha256":"9997b7b8dee3f31cf725e8552de7491d9ad7e801bcb0f01e75a4a982887f8b84","sha512":"4354fbbb87fab33d4db61245031f30d4bcb46174affc9d95214f4331e0b62af51c36e8d9e0254d535923e064b69c60a093b1446f73aa3e8e4d36146ecebb1042","ssdeep":"384:79i4nF+1x5BfkczIDrQZTswqVD3d82GfvJV2dax8Y8:7xF+1ZzIDrQhspKfjmY8","tlshash":"fd82e0398d8168fdd3ca7736b52a265ca493380c6a684d8e51227211de4f3e128f49ab","first_seen":"2025-08-07T14:12:24.518527Z","last_seen":"2026-08-24T22:17:08.840097Z","times_seen":82,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/fonts/MaxSans-Regular.woff2","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.743Z","timestamp":1787609795743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /fonts/MaxSans-Regular.woff2 HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/_next/static/css/c1f8e00efdf0aaa4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 18632\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2592000\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"48c8-1a02faa5885\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18632,"size_decoded":18919,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18632, version 1.0","md5":"7d6cb61c52f07dafc6aa5b2a7c6a4d1e","sha1":"2cca19328294ca18f23c9412ab6dc946c910491d","sha256":"d913167fd3434fea0cb5306b1199bb0a07d03f09e4f80c9ada865069f437ef38","sha512":"e2022a27f09c044d993000c71026f8eae52621a214c5586c997ebf619f39f6e8e3bd88abee28d579024cf8e81805e69fa878bd1ff4d24d9bf8b4a39b4d49a799","ssdeep":"384:siGq5LyKNJjyqH8hdHWZ/6z6FbhnWtsdN2AYHmo4eu8FJkD4USLep0Q9mPj:WqNdvgdHWtm6dctsdN2AJpAJkDiehE","tlshash":"0c82d048845101dbf96be33eac799f662016cb3d701569f1306fc43ae362a1a347df95","first_seen":"2025-08-07T14:12:24.531113Z","last_seen":"2026-08-24T22:17:08.841093Z","times_seen":128,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.183Z","timestamp":1787609795183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-c023c6e3521b1417.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 173019\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"2a3db-1a02faa5884\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173019,"size_decoded":173340,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-08-25T13:57:22.452156Z","times_seen":4816,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":73,"receive":45,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/main-app-8652957311e3a932.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.189Z","timestamp":1787609795189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/main-app-8652957311e3a932.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 557\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 22:42:53 GMT\r\nETag: W/\"22d-1a030ca8553\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557,"size_decoded":873,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (557), with no line terminators","md5":"e199bc040ed263f70da0b6dea0d4e4a1","sha1":"cd8779fd828247bbcc3111eb4a7cd85d5944328c","sha256":"b6a1410bcbf3b2946911d0145ac0464b7921686cc8051ee05dd61dcc972d742d","sha512":"64e9ea9d863af24130e8860cf4125001461323826c65f7be19ec09f7f30f97679b58c5e24e3092a11f9df2c88be5ce82f18a0b90f1da990037df240424ea88c9","ssdeep":"","tlshash":"f8f0f45a4f0cf56f5c27ad60fe97ace6185f4135302b4d647910eea23c23b6cd270409","first_seen":"2026-08-24T10:23:40.534865Z","last_seen":"2026-08-24T22:17:08.842772Z","times_seen":3,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/_next/static/chunks/app/page-aa622d71255bf88e.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.193Z","timestamp":1787609795193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /_next/static/chunks/app/page-aa622d71255bf88e.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 186753\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Sun, 23 Aug 2026 22:42:53 GMT\r\nETag: W/\"2d981-1a030ca8553\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186753,"size_decoded":187074,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64094), with no line terminators","md5":"bbc8c436aa7dea9290de6c9bf804a85b","sha1":"2b7ad3c4d7e61e59193ea6c8dcbfc70297096c1c","sha256":"57ffa9542795e2c8b55539c50047d2016673a8bbfcf95623b5a13ba40cdc41f0","sha512":"0ee5407a55929cd173bf9e01647f6062e1f200eced330d2480e639b4b30b71045eb298a7556476ff41c321374157601664848b908b740775ee51353085857b41","ssdeep":"3072:ul6a6bYVvgQuyqglgyrZnZ5Vqz8pAMheOrdv6Wn+lNwpN9:tHbegQuyqghrZnZ5FAMkOrdv6YCwpN9","tlshash":"9104e540e155beacf52a449c866fa01c717e2bacde0e4874fabc2c3636544d4b617bce","first_seen":"2026-08-24T10:23:40.515635Z","last_seen":"2026-08-24T22:17:08.843518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxnsf.net/telegram-web-app.js","fqdn":"maxnsf.net","domain":"maxnsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxnsf.net/w/CkWcOnwpC","date":"2026-08-24T22:16:35.196Z","timestamp":1787609795196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxnsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 21:15:48 GMT","end":"Thu, 19 Nov 2026 21:15:47 GMT"},"fingerprint":{"sha1":"9F:02:37:4A:E3:5A:0E:AA:17:14:41:BD:3E:89:56:F8:09:5C:F5:95","sha256":"EE:1E:BD:16:62:E4:AB:95:FB:6B:B2:72:3D:28:DC:BE:5F:E8:B6:FB:1C:90:8A:66:AC:0C:E4:AB:29:4D:81:F4"}}},"request":{"raw":"GET /telegram-web-app.js HTTP/1.1\r\nHost: maxnsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxnsf.net/w/CkWcOnwpC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Mon, 24 Aug 2026 22:16:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 116341\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2592000\r\nLast-Modified: Sun, 23 Aug 2026 17:28:08 GMT\r\nETag: W/\"1c675-1a02faa5889\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":116650,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"0d81da7304889cf10b6cfbaa26f39f38","sha1":"8998e98c1d306c7ed132f7eeaec45bf178588dcb","sha256":"a4922a0d95877fe0699dbaf827ac8d50df3137acb0cc372aa8c5402e934a5df9","sha512":"c58ff07da3e52c590bcbf07493a13ef3bb4b4a5aabc81cd7a36b68b4251bd21ce1c50368c5a4b920e8092a3fc0e217e5cd3d30c5aa89c8c5794bf4ca30a570e0","ssdeep":"1536:papTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:YpTpRdfcKFU7Rx1v","tlshash":"4ab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T04:55:42.451858Z","last_seen":"2026-08-24T22:17:08.844956Z","times_seen":46,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"maxnsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}