{"report_id":"75f4b0d7-9a08-480e-b165-3e168b98523a","version":0,"status":"done","tags":[],"date":"2026-10-07T05:45:29Z","url":{"schema":"https","addr":"mpfort.fun/","fqdn":"mpfort.fun","domain":"mpfort.fun","tld":"fun"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"mpfort.fun/","fqdn":"mpfort.fun","domain":"mpfort.fun","tld":"fun"},"title":"Loading","dom":{"size":2480305,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51221)","md5":"a62eb7a92b7af1993912f6da18df1a50","sha1":"2848324f53b82e17e75ff8fb7411877138b93f9e","sha256":"26153d5efe3501f56eaa2ac45736f43d64c2028e5f90622f59f0549acc1c11b2","sha512":"074905305f4d5c470a6381b1673c85a686e3193e0b426c9cc28cf12fc2a9703fcdb8ad990354690267c955b3deb598ff8d55b32dcae3963edb4e3a974df9e69f","ssdeep":"12288:otsoXuz3+kxru6nHOQ6xJsAZDghExteEQhsYS6KBsdcT7SpkWBgSt9tVMeefX/VW:doXu6kVuY6PfDaaK1p","tlshash":"37b563d63a91b65e01478b71368e57f648afc505c6cba089f88c9eadf0dceb325487c4","dom_hash":"domhash3510a583cc183b781043b4744a117d73","first_seen":"2026-10-07T05:46:34.824167Z","last_seen":"2026-10-07T05:46:34.824167Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mpfort.fun/","fqdn":"mpfort.fun","domain":"mpfort.fun","tld":"fun"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:45:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mpfort.fun","ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-28","domain_rank":0,"first_seen":"2026-10-07T05:46:30.487233Z","last_seen":"2026-10-07T05:46:30.487233Z","alert_count":0,"request_count":2,"received_data":2188579,"sent_data":1370,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mpfort.fun/","fqdn":"mpfort.fun","domain":"mpfort.fun","tld":"fun"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:44:57.566Z","timestamp":1791351897566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mpfort.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 15:23:30 GMT","end":"Thu, 26 Nov 2026 15:23:29 GMT"},"fingerprint":{"sha1":"7B:E8:A4:8F:A5:35:50:BB:75:67:05:C1:83:EE:63:54:D4:49:A4:CA","sha256":"BE:9C:06:7F:F0:21:26:4C:0E:79:82:B5:BA:D9:45:17:BF:6D:FB:B5:A5:EB:88:99:56:C8:D4:8F:8D:5A:B2:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mpfort.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 645546\r\ncache-control: no-store\r\nx-edge-action: captcha\r\nset-cookie: sil_ses=8d2f59b18eee5229407e14b80e98d799; Path=/; Domain=mpfort.fun; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=8d2f59b18eee5229407e14b80e98d799; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA; Path=/; Domain=mpfort.fun; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 05:44:57 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"sil_ses","value":"8d2f59b18eee5229407e14b80e98d799","quoted":false,"path":"/","domain":"mpfort.fun","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_ses=8d2f59b18eee5229407e14b80e98d799; Path=/; Domain=mpfort.fun; Max-Age=86400; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_ses","value":"8d2f59b18eee5229407e14b80e98d799","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_ses=8d2f59b18eee5229407e14b80e98d799; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned"},{"name":"sil_gate","value":"ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA","quoted":false,"path":"/","domain":"mpfort.fun","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA; Path=/; Domain=mpfort.fun; Max-Age=600; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_gate","value":"ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA","quoted":false,"path":"/","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2187429,"size_decoded":646507,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49408)","md5":"9e792d97b1b06b23f3eece9be9262209","sha1":"6960f88f169f20084571dfde90894b908ad892aa","sha256":"8b74d818d7831c897fb05b19e04fbc53e26fe2fb91f3c36535be99e4046b77cc","sha512":"0ece9488110f6f8736574c275e47518c6d3a28973cb82a73290e5491b4117c30bade4cf891e04621c8b40849ee92cebdaccdaf8f8ff39c40741e70394f88d710","ssdeep":"12288:UxteEQhsYS6KBsdcT7SpkWBgSt9tVMeefX/VAjO+ZoGZBF/TZCvDNY:j","tlshash":"4325dfd63991b65e0187877136895bf648afc505c6cba48af8cc9eadf0dceb2254c3c1","first_seen":"2026-10-07T05:46:34.83244Z","last_seen":"2026-10-07T05:46:34.83244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":255,"connect":31,"send":0,"wait":115,"receive":166,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mpfort.fun/.rt/ce","fqdn":"mpfort.fun","domain":"mpfort.fun","tld":"fun"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mpfort.fun/","date":"2026-10-07T05:44:58.550Z","timestamp":1791351898550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mpfort.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 15:23:30 GMT","end":"Thu, 26 Nov 2026 15:23:29 GMT"},"fingerprint":{"sha1":"7B:E8:A4:8F:A5:35:50:BB:75:67:05:C1:83:EE:63:54:D4:49:A4:CA","sha256":"BE:9C:06:7F:F0:21:26:4C:0E:79:82:B5:BA:D9:45:17:BF:6D:FB:B5:A5:EB:88:99:56:C8:D4:8F:8D:5A:B2:93"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: mpfort.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://mpfort.fun/\r\nContent-Length: 138\r\nOrigin: https://mpfort.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=8d2f59b18eee5229407e14b80e98d799; __Host-sil_ses=8d2f59b18eee5229407e14b80e98d799; sil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA; __Host-sil_gate=ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"sil_ses","value":"8d2f59b18eee5229407e14b80e98d799"},{"name":"__Host-sil_ses","value":"8d2f59b18eee5229407e14b80e98d799"},{"name":"sil_gate","value":"ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA"},{"name":"__Host-sil_gate","value":"ASA4ZDJmNTliMThlZWU1MjI5NDA3ZTE0YjgwZTk4ZDc5OQHi-q6sDTkgxZlSm3ut.a4Z9eqW9Sl2TZ2WaOk1AmeS1q80qVcVB_iVBMQC5iOXQPdX5iawxdT0K6gSkqC8uSJwHLkAoPdmZy7Ix4IV2DA"}],"method":"POST","post_data":{"size":138,"data":"{\"p\":\"init\",\"cid\":\"669875f79e5310717a9d484fa1d43db17b4bdeb2af60be8f282e2e72090a75c9\",\"kind\":\"click_shape\",\"subtle\":true,\"t\":1791351898537}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1791351898-ZPFD4iUnlNnxOFYsvar8AU1u7HWEht4J\r\ndate: Wed, 07 Oct 2026 05:44:58 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":1218,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T10:40:13.142093Z","times_seen":18911865,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}