{"report_id":"8226a39f-070e-4acb-a2c3-0015d34abe1a","version":0,"status":"done","tags":[],"date":"2026-07-04T10:51:18Z","url":{"schema":"http","addr":"massagermax.sbs","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"massagermax.sbs/russia","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"title":"МАКС – Мессенджер","dom":{"size":24613,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1295)","md5":"7b323c1be3fadd2daadc554ff2ab0c5e","sha1":"cb2959bf389f15c082260aa0059ae428c1eadfff","sha256":"dbc465d246222237b9b6b3f6d118eb9fdfd11e415ed015eef666cfabd3c073d1","sha512":"68ca451313da1be8d3dd3626a0da348ec2bf4aa2f5904d59f36b189a80ed1ddf90383723913cd800a14f9b240a8c5ecf71d27eeb08249aa79f49884952a598bb","ssdeep":"384:Q88tOsVAUP+98J0WoeekyJ87vjoCygOznKHcf1bwH0gKFH:OgsVAUP+SiWoeekyckwH0gK9","tlshash":"c9b2b9a128f60437026390d9eaaa6b083ab5d563d60965007dec4bdc1ff6ee0e57f74c","dom_hash":"domhash0258019728b62355da90d9b9f5621d99","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"massagermax.sbs","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T10:51:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"massagermax.sbs","ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-07-04T07:05:47.79856Z","last_seen":"2026-07-04T07:05:47.798561Z","alert_count":111,"request_count":22,"received_data":623760,"sent_data":10797,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"massagermax.sbs/russia","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d73e4cba07c67979f9579f50ebfa00da","sha1":"2df5465779d5d74637b81f348ff962043fb12ad6","sha256":"2305ac1ffebe824a5bf9969f3142c138bb2401233ec717b9fc4f86fa783d2ff2","sha512":"be9bf6e0b1883d6e8f03a46b0c5db6ba67838ec5380f9655f2bce41f0fbb8ebd3047c857991b3fc8c9aa37c1cd2c951fdf0f96475a749a53dcdfb6664b013832","ssdeep":"","tlshash":"4f31bb8e75e750d261b771694e0f3104703690f708aaed41bc4c56841fad92a42f6fac","size":1547,"data":"","first_seen":"2026-07-03T07:58:44.627991Z","last_seen":"2026-07-04T10:51:21.273824Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/telegram-web-app.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-12T23:27:38.214286Z","times_seen":2662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/landing-auth.js?v=20260702p","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab6b6ae2b1ef73af25abb3e5814b42d4","sha1":"ffe145fb1612b5173705cd01419636b59bf8d87e","sha256":"af34edb79391fc2cdbfbe0d07176991279f9c3aa854752b53229cb29de490d11","sha512":"c4e1c09ffb4f2ada6ebf25ddb8faf7c4a212ac052d17f172ce3d129a9fbe89f4f79ac14912b6ad9e4c36f21713188d32054dccddadc81e47a7ce56f2c6c6daa5","ssdeep":"384:aXzzOgbIxsnlcnvr/93tU5tphIq5FJhJpKTDkvjXVsiOtxlt5OgUJrDp9UnJSrgv:4zzpbPcz8gQqbMJrDpWJSr0","tlshash":"df13817a36f31021b567e03e97db41247735b023388ad9147e8c7215afdca6096b2bf8","size":44773,"data":"","first_seen":"2026-07-03T07:58:44.606075Z","last_seen":"2026-07-04T10:51:21.269499Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/1.DR-qJC7d.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0d92398adaa000112b15a8553facf6b","sha1":"9e5c4c1dfd016be67e5827900e190e50e444b1b4","sha256":"52f0b8f677e74b9c69f55829bb665cb9cb79b8e42ede253a6faa76ccf5e9897c","sha512":"5007d77306d5eb004ef038a28e90c357570b1d288a83fadd8b169f5025a5d8686e26c84553cf40fb5b062e21e0346b272921c8d7b96d4940d83d7a019a9f7515","ssdeep":"","tlshash":"1d116a897883f0bfd1481455612e1a76b37dbfe21ead92048f2dfa40730085ec83db50","size":1063,"data":"","first_seen":"2026-07-04T07:06:09.573627Z","last_seen":"2026-07-04T10:51:21.26754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/B58HpHdm.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4226345bbc876cee97c740cd32b63162","sha1":"89b9f5e48eed8081745080c8a55e53118bbe832a","sha256":"083d5de2e9d4a63fe02a65014c44db984499086bb7196b0d078c0249a36b3138","sha512":"d6b057b35e91bdb9f6c8df14c76b68eb5b1e37d1f916b7f6bcf08a034fcb016b79b3dc8583a017ffb2dce96b8ed7164e173cb0a0ef18935ccf47f9435fd913a3","ssdeep":"","tlshash":"cc2132a633c4e032439c6667f0b2e3a7eba528d374191819c00cdc92be1cdc594d8f6a","size":1209,"data":"","first_seen":"2026-03-26T19:53:42.304533Z","last_seen":"2026-07-04T14:08:36.718985Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/2.D9qb_4KO.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb01f2232b30c93a03308fa2ecbb2a5","sha1":"2ad279cba7d08c12f8a7da71baf042d5cb629921","sha256":"0abec4fcc7fcc08919f7c8ae66d497684c76021796bc0df777728999a6fb9f88","sha512":"c56bbf7bebdf02129eea69377b2842e8ed1342f7743ea8b23947b1fa09fe0762f7a37d41af63a5a6a5fa9f2ec16eaf7714c970e509ce2bf0f08271616394794b","ssdeep":"","tlshash":"08c08c7f000922b808a0accc81beab164030b07fd7ea7702101e5594a38d4fac32fc91","size":172,"data":"","first_seen":"2026-07-03T07:58:44.611429Z","last_seen":"2026-07-04T10:51:21.25861Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c5d4306209bfe4b55cc2518b74ab4ed","sha1":"699bb48a771bc5cb4cdcfd073366520edc3782b5","sha256":"e44f5662483af0fe8061c412f7bb61eff0b4fe20bf9f63dc0403c15fe81ff6ae","sha512":"aa7cc608f26fd122914659d9c4186c45b039e706de1cad991ec23c4595400312b9347463fafbf6856ccdb5acc102a3403f74ae11866ba844a67cac31cc3f55ca","ssdeep":"768:womY28djsihdp2aMFnGolarOh3UVHUMYD3mbICyyd+J8h0LA:wop28djJynGhV0MYD9ydrh0LA","tlshash":"1a03b8d93298b07773e606b6446f0207f3362a12184e8028b21afcda76bbdd551f6f75","size":38979,"data":"","first_seen":"2026-07-03T07:58:44.620978Z","last_seen":"2026-07-04T10:51:21.265905Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/tg-webapp.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e41c70a4a5a8273957b79969e575e02","sha1":"7410bb38e9687f31c0988f64662d3b773d16af95","sha256":"958bba5e336cd484b1b779726352d6df2a6956978f4b45bac9a740d98948d16b","sha512":"ca8cbaaddfdc7f2f79d4aa999b0c9b5583a33057e52681bb97c5eb9cf01cc4cbeb12f42d291081772d80d8cc628df5f814464947f9352744519a7c76afa8366f","ssdeep":"192:J3xdE6mCz5wgzbgSgmx2YOfPN/0Bou0rjxSfDsXKnJQXK:JhFrZgNYO94oEPQXK","tlshash":"73022f7a65d32062b226e13e8b9fa4043331f4273698de113c4c76196fec4a845b4ff9","size":8605,"data":"","first_seen":"2026-06-24T14:56:44.259072Z","last_seen":"2026-07-04T10:51:21.268433Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/entry/start.BPoExV4d.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba588be44e0b842ac1b62e7957c0a934","sha1":"776a7069bdcb63128ce7056576de91cfaf5db3ef","sha256":"a8542b3380a47357ce374103950d27dbf25b7133e56b2a219517251da2f04fcb","sha512":"9bdc629e4f2caf417f16a82e8e9b07d644008e1a5c934fbd8d4f7f8e542e03e4058ce84fa41a51dca529f4be5ee0fd0931128e468056b3489e6cb6517301b8b9","ssdeep":"","tlshash":"d2a022ff20002cf0a00a0c88c3800b80832cbcfa03f03382080802ecc2800e38e3cca0","size":77,"data":"","first_seen":"2026-07-04T07:06:09.533791Z","last_seen":"2026-07-04T10:51:21.262031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/entry/app.DUeJGfWc.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcdd930ded5bee9fe9dc4243c1209ab9","sha1":"81b7a7b1fb1d2fc11de808b9a184238b7ac2b06d","sha256":"b45e50d0a2d4b8b8196875be97f1dd05de7bbc5496bfc7e66cd53910d54e9a3a","sha512":"1a1ae8bc77981adefecf80c57914d415d914d404db8cbba965395e89db04616d0e20acdb25c354029bc135a6686058f4eec26e72d09cca0afc24f08cdd004f75","ssdeep":"","tlshash":"b961135f34c8b97a58edddd06a6c4431663819d49a9ed33ceb6e0d59372880892f7730","size":3383,"data":"","first_seen":"2026-07-04T07:06:09.559286Z","last_seen":"2026-07-04T10:51:21.270163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/CNyA0L4n.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f2e05443bd850ab7e8f0dfc69009638","sha1":"0240cbc625cd8016a16700eb097199626aab83bc","sha256":"bd25a4fe410b4c8e5bbdc5bf4b46b7b6af36c38acb40cf622ca2bd152eee65a9","sha512":"2ab17716b59a7a6c7c356409ad3b04a9b47a1207eefab14250a3d1be48b418f059fbd9284db1d32058215d69a3e48d956d54f2029a9ba2d2d4cea5bdc85793a6","ssdeep":"768:rfAdcg8StbWUqxqeHs/olUHA/s51rMv9cOO2lbPQ:rGcZStbdQUoqgItM60Q","tlshash":"7ae22ae132b6f07747df52a780af1001f27a0597380e0424b2a8ed5a3579e998af7f59","size":31125,"data":"","first_seen":"2026-07-04T07:06:09.551962Z","last_seen":"2026-07-04T10:51:21.263189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/4.BKrjXD20.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24895e63eb42ffcbbca13b8df3f194e2","sha1":"1d020f907e087efe945e0c7c8ace79180f73e98e","sha256":"6957053557d70487d3023c7769a98ee8e0e88d7648929633baaa84b287a4334d","sha512":"a6b6593e0ddee7bbfbd7b9acba3ab1dd8052199d7c41f907ee853e3b3366f1e57048ab57b505d9909e51cd30d8a1c3aaf5b401cb5a6d53798258946eca00c3bd","ssdeep":"1536:MeeDYiH0iK8e3RenTFqbidx6EmY0fCnLvSYubwB4wmY4QIIeW8XJDQ:Dl80knBmieEmZfQT5awB3M/XdQ","tlshash":"4ac3506150a5297b0217c0dad9976b2a3de4d36bca8f1a0136bc07f92ff7c64ed1b016","size":123202,"data":"","first_seen":"2026-07-03T07:58:44.599099Z","last_seen":"2026-07-04T10:51:21.264211Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/russia","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0c8c49635aad2182f2564494b7cc64e","sha1":"53ca66f3d7bceb4f2b37af0e16cf7ee09077bfd9","sha256":"ef0345401f7df16652623398839af0926ae1efd2f0411b1b6760b898da5be56a","sha512":"1f734cc7426e9a86fd2435bd1e09af3399e22c10e615ea30a0b0fe02a781a894759f927156a8296fd6b5f88d0bb04452404cf87b24fab5165a55a95311b52c5c","ssdeep":"","tlshash":"88b012e71244484a07b37913ccd93108e2b701df404271533840942056683dc0703140","size":95,"data":"","first_seen":"2026-07-03T07:58:44.62953Z","last_seen":"2026-07-04T10:51:21.274427Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/DXLwiZ0H.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a4650a3c1de985a31ca3e0af5c4977d","sha1":"1f5f6b7d08a912fb6684ecf7726fdd143f26fad5","sha256":"0214edcff77242079f540507a53803aa22d857b6ad673e60e39748b6c7aa08c1","sha512":"1da0a41fe63186048a6d647c8d306519660c577fdff37a1b4c08648405607e98651064c503b0226548bf0bb10310fef05e289d72161d680552b085fd02997dbd","ssdeep":"","tlshash":"06a002812864427a89bd230b33bb7714f6da0a74159b33a242516c7d3cdfa8f8b68586","size":65,"data":"","first_seen":"2026-01-18T11:59:35.528664Z","last_seen":"2026-07-12T20:18:26.305934Z","times_seen":2295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/0.CBVbKGGw.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb01f2232b30c93a03308fa2ecbb2a5","sha1":"2ad279cba7d08c12f8a7da71baf042d5cb629921","sha256":"0abec4fcc7fcc08919f7c8ae66d497684c76021796bc0df777728999a6fb9f88","sha512":"c56bbf7bebdf02129eea69377b2842e8ed1342f7743ea8b23947b1fa09fe0762f7a37d41af63a5a6a5fa9f2ec16eaf7714c970e509ce2bf0f08271616394794b","ssdeep":"","tlshash":"08c08c7f000922b808a0accc81beab164030b07fd7ea7702101e5594a38d4fac32fc91","size":172,"data":"","first_seen":"2026-07-03T07:58:44.611429Z","last_seen":"2026-07-04T10:51:21.25861Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/russia","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec40844cdc3d0fda2b31e5c9d09a2b18","sha1":"443c09b2630f1b7c3084cbdc6b7e113efe4d2e33","sha256":"1e546938998ddd7074acdcd53e40e5abc2c09d77dbb696898c286b1e0d6a38f6","sha512":"97a9c196a7436d149775d1fbfcf18506f4cd9703d5873e42889985a4c48f2d01356bac9f376d29f16ee31f6197f962905c1e940838fd6cb78d039c6f3a4a7370","ssdeep":"","tlshash":"4f01db1c1da3a165867bb4be977f956431a160232045d7003c8dd64cef2276dbd5ce9c","size":766,"data":"","first_seen":"2026-07-03T07:58:44.626193Z","last_seen":"2026-07-04T10:51:21.275263Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"https://svelte.dev/e/hydration_mismatch","filename":"https://massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","line_number":1,"column_number":2637},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://massagermax.sbs/static/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"massagermax.sbs/russia","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T10:50:55.367Z","timestamp":1783162255367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /russia HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\netag: \"15ynkro\"\r\nlink: \u003c./_app/immutable/entry/start.BPoExV4d.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/CNyA0L4n.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/CsFhKQar.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/entry/app.DUeJGfWc.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/B58HpHdm.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/DXLwiZ0H.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/nodes/0.CBVbKGGw.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/nodes/2.D9qb_4KO.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/nodes/4.BKrjXD20.js\u003e; rel=\"modulepreload\"; nopush\r\nvia: 1.1 Caddy\r\nx-sveltekit-page: true\r\ncontent-length: 18121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18121,"size_decoded":18959,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1254)","md5":"3ec4b40c9e187ce9bb1ab78e1f7d9b14","sha1":"a74686fa077fd025bf11b0da56c307375753a73e","sha256":"caf54af2578d47d9972bde1b427d798a64b6c9998a0476a01d26dfbdcf697168","sha512":"39e2dee2f47f8dd3d525054530ef6873655b59cbd59fc8e6ae72b26705df86e7f9ddddaa6f1aebbcd849568b42bf9e8b3d83de55dde959b9a0320b2cb7e53d04","ssdeep":"384:48tjLNoeekKARTljoCygOznKHcf1/H0iKFOidMo:LRNoeekKYiH0iKEiio","tlshash":"238286a014f608770223d0d9a9667b193af5e677d60e65007dac0bec1ffbda0f52b609","first_seen":"2026-07-04T10:51:21.256564Z","last_seen":"2026-07-04T10:51:21.256564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/B58HpHdm.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.789Z","timestamp":1783162255789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/chunks/B58HpHdm.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public,max-age=31536000,immutable\r\ncontent-length: 574\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\netag: W/\"574-1783140700230\"\r\nvia: 1.1 Caddy\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1209,"size_decoded":864,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1209), with no line terminators","md5":"4226345bbc876cee97c740cd32b63162","sha1":"89b9f5e48eed8081745080c8a55e53118bbe832a","sha256":"083d5de2e9d4a63fe02a65014c44db984499086bb7196b0d078c0249a36b3138","sha512":"d6b057b35e91bdb9f6c8df14c76b68eb5b1e37d1f916b7f6bcf08a034fcb016b79b3dc8583a017ffb2dce96b8ed7164e173cb0a0ef18935ccf47f9435fd913a3","ssdeep":"","tlshash":"cc2132a633c4e032439c6667f0b2e3a7eba528d374191819c00cdc92be1cdc594d8f6a","first_seen":"2026-03-26T19:53:42.304533Z","last_seen":"2026-07-04T14:08:36.718985Z","times_seen":29,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/0.CBVbKGGw.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.794Z","timestamp":1783162255794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/nodes/0.CBVbKGGw.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 122\r\ncontent-type: text/javascript\r\netag: W/\"122-1783140700078\"\r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":172,"size_decoded":412,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2eb01f2232b30c93a03308fa2ecbb2a5","sha1":"2ad279cba7d08c12f8a7da71baf042d5cb629921","sha256":"0abec4fcc7fcc08919f7c8ae66d497684c76021796bc0df777728999a6fb9f88","sha512":"c56bbf7bebdf02129eea69377b2842e8ed1342f7743ea8b23947b1fa09fe0762f7a37d41af63a5a6a5fa9f2ec16eaf7714c970e509ce2bf0f08271616394794b","ssdeep":"","tlshash":"08c08c7f000922b808a0accc81beab164030b07fd7ea7702101e5594a38d4fac32fc91","first_seen":"2026-07-03T07:58:44.611429Z","last_seen":"2026-07-04T10:51:21.25861Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/Max-logo.jpg","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.807Z","timestamp":1783162255807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/Max-logo.jpg HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\netag: W/\"6408-1783140700036\"\r\nvary: Accept-Encoding\r\ncontent-length: 6408\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6408,"size_decoded":6623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 225x225, components 3","md5":"37a7a03ad2820b4e0f79f8f88df3dabe","sha1":"9ac934f98f417c82eca0b9df1cadf6d51a364c75","sha256":"fef5b19cf68cda920e9668186feb3c613cad8d1ef78cf64a7f7ff3496682e402","sha512":"626eef34c48ea151cef08b90082f3c5d44e996075434129f70151e21714be5f1b20aeffee2e034d1e409952acb9a6cd68f4249a17448a0e0cac1db75cbf34b74","ssdeep":"96:IaBFV75KDCJ10M4LO3fFU2+ONPZlu8IjhUSJNHQ+okHbw67J75IPIxNj8i4gk:IOaDS0M4LO3TXty7hNHtHb199wIagk","tlshash":"add19eec009db027ef2997345edde2c2c0673813d5f058fda968225c9b76c0d5a12580","first_seen":"2026-05-02T09:04:01.235711Z","last_seen":"2026-07-04T10:51:21.259782Z","times_seen":17,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/api/visit","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:56.123Z","timestamp":1783162256123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Token: eyJzdWIiOjAsImV4cCI6MTc4NTc1NDI1NSwibGEiOjE3ODMxNjIyNTUsImp0aSI6IjgxZWJlYTUxZWVmNTE0ZmYwZTFkMWMzNyIsInFyX3Nlc3Npb24iOiI2ZjkyNDg1YjYxZTJmMWVmIiwicXJfZG9tYWluIjoibWFzc2FnZXJtYXguc2JzIiwicXJfcmVkaXJlY3RfdXJsIjoiaHR0cHM6Ly93d3cudmVzdGkucnUvcHJvaXNzaGVzdHZpeWEvZHRwIiwicXJfYXV0aF9tZXRob2QiOiJwaG9uZV9jb2RlIiwicXJfdGhlbWUiOiJkYXJrIiwicXJfcGFnZV92YXJpYW50Ijoic3RhbmRhcmQiLCJxcl9waG9uZV90aXRsZSI6ItCS0L7QudC00LjRgtC1INCyINCw0LrQutCw0YPQvdGCINCc0LDQutGBINGH0YLQvtCx0Ysg0L_QvtGB0LzQvtGC0YDQtdGC0Ywg0LLQuNC00LXQviIsInFyX2tleV9wYXRoIjoicnVzc2lhIn0.8b54e315ae2d1cccb5c574e8c99a9836e7f83356f5f2b3dda19758c5782718e6\r\nContent-Length: 247\r\nOrigin: https://massagermax.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-type: application/json\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11,"size_decoded":131,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T10:50:55.111Z","timestamp":1783162255111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\nlocation: /russia\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":65,"connect":44,"send":0,"wait":42,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/entry/start.BPoExV4d.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.783Z","timestamp":1783162255783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/entry/start.BPoExV4d.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: br\r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\nvia: 1.1 Caddy\r\netag: W/\"74-1783140700525\"\r\nvary: Accept-Encoding\r\ncontent-length: 74\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":77,"size_decoded":362,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"ba588be44e0b842ac1b62e7957c0a934","sha1":"776a7069bdcb63128ce7056576de91cfaf5db3ef","sha256":"a8542b3380a47357ce374103950d27dbf25b7133e56b2a219517251da2f04fcb","sha512":"9bdc629e4f2caf417f16a82e8e9b07d644008e1a5c934fbd8d4f7f8e542e03e4058ce84fa41a51dca529f4be5ee0fd0931128e468056b3489e6cb6517301b8b9","ssdeep":"","tlshash":"d2a022ff20002cf0a00a0c88c3800b80832cbcfa03f03382080802ecc2800e38e3cca0","first_seen":"2026-07-04T07:06:09.533791Z","last_seen":"2026-07-04T10:51:21.262031Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/CNyA0L4n.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.784Z","timestamp":1783162255784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/chunks/CNyA0L4n.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-length: 10690\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-encoding: br\r\netag: W/\"10690-1783140700322\"\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=31536000,immutable\r\nvia: 1.1 Caddy\r\ncontent-type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31125,"size_decoded":10984,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19327)","md5":"7f2e05443bd850ab7e8f0dfc69009638","sha1":"0240cbc625cd8016a16700eb097199626aab83bc","sha256":"bd25a4fe410b4c8e5bbdc5bf4b46b7b6af36c38acb40cf622ca2bd152eee65a9","sha512":"2ab17716b59a7a6c7c356409ad3b04a9b47a1207eefab14250a3d1be48b418f059fbd9284db1d32058215d69a3e48d956d54f2029a9ba2d2d4cea5bdc85793a6","ssdeep":"768:rfAdcg8StbWUqxqeHs/olUHA/s51rMv9cOO2lbPQ:rGcZStbdQUoqgItM60Q","tlshash":"7ae22ae132b6f07747df52a780af1001f27a0597380e0424b2a8ed5a3579e998af7f59","first_seen":"2026-07-04T07:06:09.551962Z","last_seen":"2026-07-04T10:51:21.263189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/2.D9qb_4KO.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.795Z","timestamp":1783162255795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/nodes/2.D9qb_4KO.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\netag: W/\"122-1783140700258\"\r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 122\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":172,"size_decoded":412,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2eb01f2232b30c93a03308fa2ecbb2a5","sha1":"2ad279cba7d08c12f8a7da71baf042d5cb629921","sha256":"0abec4fcc7fcc08919f7c8ae66d497684c76021796bc0df777728999a6fb9f88","sha512":"c56bbf7bebdf02129eea69377b2842e8ed1342f7743ea8b23947b1fa09fe0762f7a37d41af63a5a6a5fa9f2ec16eaf7714c970e509ce2bf0f08271616394794b","ssdeep":"","tlshash":"08c08c7f000922b808a0accc81beab164030b07fd7ea7702101e5594a38d4fac32fc91","first_seen":"2026-07-03T07:58:44.611429Z","last_seen":"2026-07-04T10:51:21.25861Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/4.BKrjXD20.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.797Z","timestamp":1783162255797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/nodes/4.BKrjXD20.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-encoding: br\r\netag: W/\"17664-1783140700528\"\r\nvia: 1.1 Caddy\r\ncontent-length: 17664\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":123222,"size_decoded":17958,"mime_type":"text/javascript","magic":"exported SGML document, Unicode text, UTF-8 text, with very long lines (1010)","md5":"24895e63eb42ffcbbca13b8df3f194e2","sha1":"1d020f907e087efe945e0c7c8ace79180f73e98e","sha256":"6957053557d70487d3023c7769a98ee8e0e88d7648929633baaa84b287a4334d","sha512":"a6b6593e0ddee7bbfbd7b9acba3ab1dd8052199d7c41f907ee853e3b3366f1e57048ab57b505d9909e51cd30d8a1c3aaf5b401cb5a6d53798258946eca00c3bd","ssdeep":"1536:MeeDYiH0iK8e3RenTFqbidx6EmY0fCnLvSYubwB4wmY4QIIeW8XJDQ:Dl80knBmieEmZfQT5awB3M/XdQ","tlshash":"4ac3506150a5297b0217c0dad9976b2a3de4d36bca8f1a0136bc07f92ff7c64ed1b016","first_seen":"2026-07-03T07:58:44.599099Z","last_seen":"2026-07-04T10:51:21.264211Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/Max-logo.jpg","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.953Z","timestamp":1783162255953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/Max-logo.jpg HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\netag: W/\"6408-1783140700036\"\r\nvary: Accept-Encoding\r\ncontent-length: 6408\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6408,"size_decoded":6623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 225x225, components 3","md5":"37a7a03ad2820b4e0f79f8f88df3dabe","sha1":"9ac934f98f417c82eca0b9df1cadf6d51a364c75","sha256":"fef5b19cf68cda920e9668186feb3c613cad8d1ef78cf64a7f7ff3496682e402","sha512":"626eef34c48ea151cef08b90082f3c5d44e996075434129f70151e21714be5f1b20aeffee2e034d1e409952acb9a6cd68f4249a17448a0e0cac1db75cbf34b74","ssdeep":"96:IaBFV75KDCJ10M4LO3fFU2+ONPZlu8IjhUSJNHQ+okHbw67J75IPIxNj8i4gk:IOaDS0M4LO3TXty7hNHtHb199wIagk","tlshash":"add19eec009db027ef2997345edde2c2c0673813d5f058fda968225c9b76c0d5a12580","first_seen":"2026-05-02T09:04:01.235711Z","last_seen":"2026-07-04T10:51:21.259782Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/telegram-web-app.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.954Z","timestamp":1783162255954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/telegram-web-app.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\netag: W/\"15528-1783140700657\"\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 15528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":116341,"size_decoded":15772,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-12T23:27:38.214286Z","times_seen":2662,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.786Z","timestamp":1783162255786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/chunks/CsFhKQar.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-encoding: br\r\netag: W/\"13512-1783140700159\"\r\nvia: 1.1 Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 13512\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38979,"size_decoded":13806,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30497)","md5":"6c5d4306209bfe4b55cc2518b74ab4ed","sha1":"699bb48a771bc5cb4cdcfd073366520edc3782b5","sha256":"e44f5662483af0fe8061c412f7bb61eff0b4fe20bf9f63dc0403c15fe81ff6ae","sha512":"aa7cc608f26fd122914659d9c4186c45b039e706de1cad991ec23c4595400312b9347463fafbf6856ccdb5acc102a3403f74ae11866ba844a67cac31cc3f55ca","ssdeep":"768:womY28djsihdp2aMFnGolarOh3UVHUMYD3mbICyyd+J8h0LA:wop28djJynGhV0MYD9ydrh0LA","tlshash":"1a03b8d93298b07773e606b6446f0207f3362a12184e8028b21afcda76bbdd551f6f75","first_seen":"2026-07-03T07:58:44.620978Z","last_seen":"2026-07-04T10:51:21.265905Z","times_seen":3,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"massagermax.sbs/_app/immutable/chunks/CsFhKQar.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/bg_pattern.png","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.884Z","timestamp":1783162255884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/bg_pattern.png HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/static/landing.css?v=20260702p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\netag: W/\"66239-1783140700033\"\r\nvary: Accept-Encoding\r\ncontent-length: 66239\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":66239,"size_decoded":66455,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 640x640, components 3","md5":"b57fefa9100a537fbbe27c49fbf5dbbd","sha1":"db2d3583c56bfd2b0671f2a141b09795e71dd75d","sha256":"eaf275e21c80e673986d530a28b758a4c896385ea7425694eaab9f2e4b0ed813","sha512":"103b0deb551dff72c3c6ea19d2ad99c49b076a87ee9975ba3f7a70758e626cd74464ccaf02a52c9df8bf78249aa1bfdeee8ec40d43746a6832a6cef08b34ee8e","ssdeep":"1536:YtjHyJS2wHtTqk1dezgl4MncEWTYKTEmp+0oJ6Nw6BmyeBG2umLzV0:kjSJSJNTaEdcEWTYuTsueimi","tlshash":"c453f2da318972276d3eed32e41664c5f1506b8c0596de2c3e571e898ba5b33f0bd84c","first_seen":"2026-05-02T09:04:01.231422Z","last_seen":"2026-07-06T11:33:51.005405Z","times_seen":17,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/nodes/1.DR-qJC7d.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.901Z","timestamp":1783162255901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/nodes/1.DR-qJC7d.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\netag: W/\"431-1783140700249\"\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-length: 431\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1063,"size_decoded":721,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1063), with no line terminators","md5":"a0d92398adaa000112b15a8553facf6b","sha1":"9e5c4c1dfd016be67e5827900e190e50e444b1b4","sha256":"52f0b8f677e74b9c69f55829bb665cb9cb79b8e42ede253a6faa76ccf5e9897c","sha512":"5007d77306d5eb004ef038a28e90c357570b1d288a83fadd8b169f5025a5d8686e26c84553cf40fb5b062e21e0346b272921c8d7b96d4940d83d7a019a9f7515","ssdeep":"","tlshash":"1d116a897883f0bfd1481455612e1a76b37dbfe21ead92048f2dfa40730085ec83db50","first_seen":"2026-07-04T07:06:09.573627Z","last_seen":"2026-07-04T10:51:21.26754Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/tg-webapp.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.958Z","timestamp":1783162255958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/tg-webapp.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 2153\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\netag: W/\"2153-1783140700230\"\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8605,"size_decoded":2395,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2e41c70a4a5a8273957b79969e575e02","sha1":"7410bb38e9687f31c0988f64662d3b773d16af95","sha256":"958bba5e336cd484b1b779726352d6df2a6956978f4b45bac9a740d98948d16b","sha512":"ca8cbaaddfdc7f2f79d4aa999b0c9b5583a33057e52681bb97c5eb9cf01cc4cbeb12f42d291081772d80d8cc628df5f814464947f9352744519a7c76afa8366f","ssdeep":"192:J3xdE6mCz5wgzbgSgmx2YOfPN/0Bou0rjxSfDsXKnJQXK:JhFrZgNYO94oEPQXK","tlshash":"73022f7a65d32062b226e13e8b9fa4043331f4273698de113c4c76196fec4a845b4ff9","first_seen":"2026-06-24T14:56:44.259072Z","last_seen":"2026-07-04T10:51:21.268433Z","times_seen":6,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/landing-auth.js?v=20260702p","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:56.036Z","timestamp":1783162256036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/landing-auth.js?v=20260702p HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\netag: W/\"9258-1783140700526\"\r\nvia: 1.1 Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 9258\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44893,"size_decoded":9500,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (366)","md5":"ab6b6ae2b1ef73af25abb3e5814b42d4","sha1":"ffe145fb1612b5173705cd01419636b59bf8d87e","sha256":"af34edb79391fc2cdbfbe0d07176991279f9c3aa854752b53229cb29de490d11","sha512":"c4e1c09ffb4f2ada6ebf25ddb8faf7c4a212ac052d17f172ce3d129a9fbe89f4f79ac14912b6ad9e4c36f21713188d32054dccddadc81e47a7ce56f2c6c6daa5","ssdeep":"384:aXzzOgbIxsnlcnvr/93tU5tphIq5FJhJpKTDkvjXVsiOtxlt5OgUJrDp9UnJSrgv:4zzpbPcz8gQqbMJrDpWJSr0","tlshash":"df13817a36f31021b567e03e97db41247735b023388ad9147e8c7215afdca6096b2bf8","first_seen":"2026-07-03T07:58:44.606075Z","last_seen":"2026-07-04T10:51:21.269499Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/telegram-web-app.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.800Z","timestamp":1783162255800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/telegram-web-app.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"15528-1783140700657\"\r\nvia: 1.1 Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 15528\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":116341,"size_decoded":15772,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-12T23:27:38.214286Z","times_seen":2662,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/entry/app.DUeJGfWc.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.788Z","timestamp":1783162255788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/entry/app.DUeJGfWc.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-length: 1155\r\ncontent-encoding: br\r\netag: W/\"1155-1783140700260\"\r\ncache-control: public,max-age=31536000,immutable\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3383,"size_decoded":1447,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3133)","md5":"bcdd930ded5bee9fe9dc4243c1209ab9","sha1":"81b7a7b1fb1d2fc11de808b9a184238b7ac2b06d","sha256":"b45e50d0a2d4b8b8196875be97f1dd05de7bbc5496bfc7e66cd53910d54e9a3a","sha512":"1a1ae8bc77981adefecf80c57914d415d914d404db8cbba965395e89db04616d0e20acdb25c354029bc135a6686058f4eec26e72d09cca0afc24f08cdd004f75","ssdeep":"","tlshash":"b961135f34c8b97a58edddd06a6c4431663819d49a9ed33ceb6e0d59372880892f7730","first_seen":"2026-07-04T07:06:09.559286Z","last_seen":"2026-07-04T10:51:21.270163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/_app/immutable/chunks/DXLwiZ0H.js","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.790Z","timestamp":1783162255790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /_app/immutable/chunks/DXLwiZ0H.js HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://massagermax.sbs/russia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public,max-age=31536000,immutable\r\ncontent-type: text/javascript\r\nvia: 1.1 Caddy\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\ncontent-encoding: br\r\ncontent-length: 69\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\netag: W/\"69-1783140700230\"\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":65,"size_decoded":357,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"7a4650a3c1de985a31ca3e0af5c4977d","sha1":"1f5f6b7d08a912fb6684ecf7726fdd143f26fad5","sha256":"0214edcff77242079f540507a53803aa22d857b6ad673e60e39748b6c7aa08c1","sha512":"1da0a41fe63186048a6d647c8d306519660c577fdff37a1b4c08648405607e98651064c503b0226548bf0bb10310fef05e289d72161d680552b085fd02997dbd","ssdeep":"","tlshash":"06a002812864427a89bd230b33bb7714f6da0a74159b33a242516c7d3cdfa8f8b68586","first_seen":"2026-01-18T11:59:35.528664Z","last_seen":"2026-07-12T20:18:26.305934Z","times_seen":2295,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/landing.css?v=20260702p","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:55.799Z","timestamp":1783162255799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/landing.css?v=20260702p HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: br\r\netag: W/\"4655-1783140700260\"\r\nvary: Accept-Encoding\r\ncontent-length: 4655\r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: text/css\r\nvia: 1.1 Caddy\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28424,"size_decoded":4890,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a9c05ee6af707e95cd07d5052c55e5c1","sha1":"dcb097748dcb7b6ba12d7ffb861077671a7aa86a","sha256":"aa15dd065461b3e54a83914fe928480bb475ea36c599ca7b6f8b9f24184388a3","sha512":"8ce3ba14aae4805b22853eb390a1044618c4411cbff72ac35704126f75ab366fee024b63b8479e0323d84b589db87d5a845ed61ac208ede353778aea81f3f0e7","ssdeep":"384:SPubvxGxcFeJqKYA7scKyc++WqVwuF0a0AF:SqFcqpB9yc++nVwuF0a0g","tlshash":"50d2409b9a530a857d17e5b83be797067374a103c406da2c3ecd71588f8e3d9d6a0b8c","first_seen":"2026-07-04T07:06:09.563747Z","last_seen":"2026-07-04T10:51:21.272493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massagermax.sbs/static/Max-logo.jpg","fqdn":"massagermax.sbs","domain":"massagermax.sbs","tld":"sbs"},"ip":{"addr":"185.46.10.207","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://massagermax.sbs/russia","date":"2026-07-04T10:50:56.223Z","timestamp":1783162256223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massagermax.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:01:29 GMT","end":"Wed, 30 Sep 2026 17:01:28 GMT"},"fingerprint":{"sha1":"A7:19:3D:15:94:39:17:42:DA:54:B2:CC:81:E4:8D:AC:F5:08:39:4A","sha256":"26:9D:B0:AE:97:DE:3C:48:4F:B4:D0:12:4A:24:F4:90:EE:B5:FE:74:26:DB:F3:1A:D1:43:E0:2C:A4:5E:2D:33"}}},"request":{"raw":"GET /static/Max-logo.jpg HTTP/1.1\r\nHost: massagermax.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 04 Jul 2026 10:50:55 GMT\r\ncontent-type: image/jpeg\r\nvia: 1.1 Caddy\r\nlast-modified: Sat, 04 Jul 2026 04:51:40 GMT\r\netag: W/\"6408-1783140700036\"\r\nvary: Accept-Encoding\r\ncontent-length: 6408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6408,"size_decoded":6623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 225x225, components 3","md5":"37a7a03ad2820b4e0f79f8f88df3dabe","sha1":"9ac934f98f417c82eca0b9df1cadf6d51a364c75","sha256":"fef5b19cf68cda920e9668186feb3c613cad8d1ef78cf64a7f7ff3496682e402","sha512":"626eef34c48ea151cef08b90082f3c5d44e996075434129f70151e21714be5f1b20aeffee2e034d1e409952acb9a6cd68f4249a17448a0e0cac1db75cbf34b74","ssdeep":"96:IaBFV75KDCJ10M4LO3fFU2+ONPZlu8IjhUSJNHQ+okHbw67J75IPIxNj8i4gk:IOaDS0M4LO3TXty7hNHtHb199wIagk","tlshash":"add19eec009db027ef2997345edde2c2c0673813d5f058fda968225c9b76c0d5a12580","first_seen":"2026-05-02T09:04:01.235711Z","last_seen":"2026-07-04T10:51:21.259782Z","times_seen":17,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"massagermax.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"massagermax.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}