{"report_id":"86aefeb4-cc0b-483d-9ced-eacf05ae0c08","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2025-10-30T00:43:44Z","url":{"schema":"https","addr":"maiifjq.top/","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"maiifjq.top/#/verify","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"title":"Facebook","dom":{"size":25992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8802)","md5":"a93101778656470d32ecbdd0c8380923","sha1":"38f2d4c6007e5c386c090df2723b6564fb7730b2","sha256":"9335b90b69dc41390f9d8359117b9c61697691c61789a221372e60ea78824dab","sha512":"eef08bc11b849bdf85642140d09eb40851cec830d08a0b2dfbf2bbbbb46c5b0317e94a07001fd5c86244a3f286e020b6f616a26da6bc227f1731385ca7f17946","ssdeep":"384:dt2M3oG96azLBsarbPf7lGXim1pk7r4PPaL6/AyPHK9Dglj52:dt2M4GsBaH7lKiX7+3/AyPqiK","tlshash":"8cc283f2d29422de6017cf63e965ab6af38f667a0530cc84ca9c5f1ddb547c8436a483","dom_hash":"domhashaa0f851330000ba49bf9e0655fb91954","first_seen":"2025-10-30T00:44:01.218097Z","last_seen":"2025-10-30T00:44:01.218097Z","times_seen":1,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"https","addr":"maiifjq.top/","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-04T00:43:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"maiifjq.top","ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-29","domain_rank":0,"first_seen":"2025-10-30T00:43:48.479666Z","last_seen":"2025-10-30T00:43:48.479666Z","alert_count":392,"request_count":98,"received_data":11797216,"sent_data":40300,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"maiifjq.top/conf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2130af600383d6005b084062511eb3c5","sha1":"6d223ec4a7a58885eb09a93e9d4eb4e50c997bc1","sha256":"223f8f2ed028e1b0c86fe1e20c9053d8984eb4eb9f56300907dda0f869604860","sha512":"0f5c235f0d879dcd0f4e6ff695eaeaded1396dd78e8ca4423b13525ea39f180f6913e4ff8322a6ec0823ec77e754d51d6daad25ad94fb3cb45ce84d89564c540","ssdeep":"","tlshash":"8da00214557c65341c70d54131cbb22e751055c6498e243db34293a33b1a317f5a16d6","size":61,"data":"","first_seen":"2025-08-29T14:27:28.996829Z","last_seen":"2026-06-05T08:23:29.89373Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/js/app.eb3bbd96.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20e82ea2537a9e0ad9b367ef90a11e9e","sha1":"4b505f0d94285d9c31233af5b64acc00fdefccda","sha256":"6dca2aa06582f2edad00022d89cefacd5b9fea8b34c0f2ff6e30c494220076d9","sha512":"1edee3dd68487bdd323ddb94de580d84956cdbbe127160bb76a9b6f3d6739a1ffb54401a4a23a3f8cf2aef07377d0853859990fed6e24e55a6d36bb3f4f33b55","ssdeep":"24576:SFILf8ObKh8yMU9WSPkKTVZtLzT9HxfUZO23ZkxK5Q+4n69cEdswB9LRbWxQ7BAS:SiLf8ObKh8yMU9bPf/tD9H9aTpFC+AXK","tlshash":"f4558def67da77fc08545646a04f3975319c1cbafb95f4e008ecf61922e9e808212f69","size":1380129,"data":"","first_seen":"2025-10-29T00:38:00.092213Z","last_seen":"2026-01-09T07:14:56.213718Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/js/vendors~app.674252e2.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0c47cb1d4ce0d8e33c9d5294ff43967","sha1":"5e6f38931fae38c00a814420d54494b22ea9e327","sha256":"64760e4fda8ea4f31037392c5c602aead96b99a13287f5536d2044de9ef2e157","sha512":"456ff12a733e691ef742c6ce7a4d3ce164196d1ec8ee20a9377cb64c4f9159a4136b8677ef19779d1614d5584d601e91b423a716cd1ca291e422bf1e15f3148d","ssdeep":"49152:dU1t1RLhgbYOgzWvGbJUV/8thW9ZpzymDzGzIdp9T/A5ZtIyHvRf:M/dgoWvGFUVBE6GQ9TaDIyHvRf","tlshash":"56f5b35c365af340914ad0e7e43b3c49d26ae189a40b40d07f7187f31eb574ae7aee26","size":3556855,"data":"","first_seen":"2024-07-22T15:58:17Z","last_seen":"2026-06-05T08:23:29.969541Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-63c9da5b.e811a748.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b71a55f7d67f653e65028660f0c297fe","sha1":"5a69e7f77330e11b670582f109fabfa81473bc05","sha256":"dccc36b7ac0c81dcc560366f9a9f22abf8f8a95cf03078c37ba6c8601a16354a","sha512":"c3effba638bd315063ce36e608f66ab52458ee8af39b0eef15cea9606e901afaec9bf6b29c02d84f88d054cbae21d52b0379fba4b11baeb07138f7070ad47d64","ssdeep":"","tlshash":"44410202ac46e6ec9d4f9064718e6630a5321def15439083bab88c9456b1de4736f1bc","size":2025,"data":"","first_seen":"2025-06-23T10:25:51.957865Z","last_seen":"2026-06-05T08:23:29.942945Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/conf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2130af600383d6005b084062511eb3c5","sha1":"6d223ec4a7a58885eb09a93e9d4eb4e50c997bc1","sha256":"223f8f2ed028e1b0c86fe1e20c9053d8984eb4eb9f56300907dda0f869604860","sha512":"0f5c235f0d879dcd0f4e6ff695eaeaded1396dd78e8ca4423b13525ea39f180f6913e4ff8322a6ec0823ec77e754d51d6daad25ad94fb3cb45ce84d89564c540","ssdeep":"","tlshash":"8da00214557c65341c70d54131cbb22e751055c6498e243db34293a33b1a317f5a16d6","size":61,"data":"","first_seen":"2025-08-29T14:27:28.996829Z","last_seen":"2026-06-05T08:23:29.89373Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/js/vendors~app.674252e2.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0c47cb1d4ce0d8e33c9d5294ff43967","sha1":"5e6f38931fae38c00a814420d54494b22ea9e327","sha256":"64760e4fda8ea4f31037392c5c602aead96b99a13287f5536d2044de9ef2e157","sha512":"456ff12a733e691ef742c6ce7a4d3ce164196d1ec8ee20a9377cb64c4f9159a4136b8677ef19779d1614d5584d601e91b423a716cd1ca291e422bf1e15f3148d","ssdeep":"49152:dU1t1RLhgbYOgzWvGbJUV/8thW9ZpzymDzGzIdp9T/A5ZtIyHvRf:M/dgoWvGFUVBE6GQ9TaDIyHvRf","tlshash":"56f5b35c365af340914ad0e7e43b3c49d26ae189a40b40d07f7187f31eb574ae7aee26","size":3556855,"data":"","first_seen":"2024-07-22T15:58:17Z","last_seen":"2026-06-05T08:23:29.969541Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maiifjq.top/js/app.eb3bbd96.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20e82ea2537a9e0ad9b367ef90a11e9e","sha1":"4b505f0d94285d9c31233af5b64acc00fdefccda","sha256":"6dca2aa06582f2edad00022d89cefacd5b9fea8b34c0f2ff6e30c494220076d9","sha512":"1edee3dd68487bdd323ddb94de580d84956cdbbe127160bb76a9b6f3d6739a1ffb54401a4a23a3f8cf2aef07377d0853859990fed6e24e55a6d36bb3f4f33b55","ssdeep":"24576:SFILf8ObKh8yMU9WSPkKTVZtLzT9HxfUZO23ZkxK5Q+4n69cEdswB9LRbWxQ7BAS:SiLf8ObKh8yMU9bPf/tD9H9aTpFC+AXK","tlshash":"f4558def67da77fc08545646a04f3975319c1cbafb95f4e008ecf61922e9e808212f69","size":1380129,"data":"","first_seen":"2025-10-29T00:38:00.092213Z","last_seen":"2026-01-09T07:14:56.213718Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"maiifjq.top/js/app.eb3bbd96.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/","date":"2025-10-30T00:43:19.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/app.eb3bbd96.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-150f21\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1380129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64210), with no line terminators","md5":"6537fe10cf9425833e62b1469bec7e47","sha1":"c6a1058510a38e8b9877dc5942b18348da72653e","sha256":"0fcb05e869cf5b491bf12bf47fcf29e056d7b5977ff5e2736699f5d41c2c25d4","sha512":"70e336d3d3757e21b87e977965350c859c9662a6487798f75d025d31035a5bec7e17092e8651613216d8c38ec253363474b95e3aa3d8a93b444e92b9be3fa4b3","ssdeep":"24576:SFILf8ObPNaKSPk3TVZtLzT9HxfUZO2xjDy2HCD0YzCtzIXOdswB9LRbWKn:SiLf8ObPNgPS/tD9H9aTxjDywCD0YzCf","tlshash":"28656c6f97d2d3a80fe536e1341637b01674c8e6e7edb4db07acd29421fee80411aa61","first_seen":"2025-10-30T00:44:01.2238Z","last_seen":"2025-10-30T00:44:01.2238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/vendors~app.674252e2.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/","date":"2025-10-30T00:43:19.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/vendors~app.674252e2.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3645f7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3556855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25916), with LF, NEL line terminators","md5":"e8bd1e9374ae4c272c46c64ee8f51ebe","sha1":"02b03ce7510c06257b338f93d0e4dd6a1dc60116","sha256":"9ec286199506a8ce23cd8eb9d5cbb5fd518de9af93031e238619f189638d12bd","sha512":"8ce664eabc18c14cb9497b870153ffa903608bbfc90a5f3f97f54e38fd9c7239a04dbb14386a9099b7388f320c93f86649fdf424e152f8f60ef40ecc5ee1cdca","ssdeep":"6144:In+1iA7Nub9OAXwf5KNHc6EIHhtXhMpHUY:4Yx4b9JXwfmHc6EatWp0Y","tlshash":"da254d5c2a4ef3409919d0e7e93b2c49826de189b40b44a16f3187b31bb1397f7edd26","first_seen":"2025-08-01T09:05:20.468344Z","last_seen":"2026-06-05T08:23:29.900886Z","times_seen":26,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-5daf7376.cd704402.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-5daf7376.cd704402.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-4e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1252), with no line terminators","md5":"b50aad23d365ccde72e78b8313b4e7c2","sha1":"82e1ed3080ed69d8b4384e17044cdcf837769a03","sha256":"e36128c4817614792876d24a43ab454dd8cdd52f66965bb00f14406da9011f3c","sha512":"3929980e42defe71e881ffa97bf69c5d70251a4adf0eaabc203dc87188f3d9da61887ecf8f793b9c6a2861a6b24484417bd3adc1cd46a41cf2a0f14082f92dd7","ssdeep":"","tlshash":"3f21ee67b51163ada3bb689413b29c8c7414c840f5ebebfae906411dc7c72973691388","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.522312Z","times_seen":7301,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-fdcd1b2a.1c551398.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-fdcd1b2a.1c551398.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-b76\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2934), with no line terminators","md5":"7fab75354a4c7f64c989d1addc4375b1","sha1":"bae4ad33eef30ac930e54bf5e0d6c98d545d8cf8","sha256":"b5b3f6af0e47a7901315d5e750525f924810caadc5364938261df41aa51a8699","sha512":"05245836867b6ed5019ac21a7465fd8808549ed70680c84cf16bb148004b6e17655beacbd35c09391ae98642d2cdcf35083fadff3127c86b8a2b6c71b3a57e7e","ssdeep":"","tlshash":"8d5100a1721d79bc4877e4227fd95ddf702cf25bc567820aaca1325f8ce324229116ce","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-05T08:23:29.932743Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-137768ec.a73142d6.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-137768ec.a73142d6.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3007\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12263), with no line terminators","md5":"9ebce121b37bd802d940cd872f511f91","sha1":"a3db43785a891931f50d0f3ce3d20ab41baea241","sha256":"2d494d3cf0e48960fe3a5a222aac3e947d26ee92d61023083a56d21cb47d64d6","sha512":"d57bbab52d9c287c23141256d190e3222771d73c726faf4215365287271c7fcc191b5ae81c8409b36e451eecb9a50694912108c4b4a965caa304bce3dff3dbf6","ssdeep":"192:nBs+3gCnMy9fnS9gHJJhDJcZfNcj1iXcFWA2I5eAW0Tu8M5hHBaSLob:pTnMy9Bp9cZfNcjVWJc05hq","tlshash":"3e42a6097153b42e5d6b81a1300e7420b6743fe94801d08abab8ddf977d8c79732efa9","first_seen":"2024-08-20T04:36:00.70233Z","last_seen":"2026-04-04T20:11:40.167182Z","times_seen":25,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-2d216070.4a46fefb.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-2d216070.4a46fefb.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 371\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\netag: \"6901be7e-173\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (371), with no line terminators","md5":"436e548e5aec068cbc97f76be8d95390","sha1":"028cab40fcd9ded75e54f010fd172c7658272a15","sha256":"8b3790cd745b34f8a62d05378e4238886ec9ca3885fbc9f2b819fe4c36b51411","sha512":"173f2e4ab09ffcaf236727b99da587c93a44b49bb4f9e6a2af869acc9e911dc892dc69a8c0be8b617fd82cfa0c024885091eb40f969c93886db5ed3db2110168","ssdeep":"","tlshash":"0ae0c07820537ebc536830ce236f5993c55b1c0d0fdb94e11ed0c499623951f4524b99","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-05T08:23:29.893011Z","times_seen":319,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-5508a8e2.6fdbb534.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-5508a8e2.6fdbb534.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1b6c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7020,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7020), with no line terminators","md5":"248ab745998240fddb6d930552476628","sha1":"57c3248d4014ab1184e6e77230cf08e3ebc23b32","sha256":"03c2dd99b08728671ae1bfa553cefa8225f7a2338a0db915402229b923321b97","sha512":"1880928ff5fe9e1beef2eff77499802c4e588ff48c344a8e32aa59b96718d0b8e640d90f277a0ad89fb648d9e746a431c41fcab6f69c64d31d1d05526df51a61","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfSBX2:iCQRDeBzT8lN9lc1JKJ2","tlshash":"8ee14cf6e0768061ab37e1a671e0ace47810c923ec9743e57790751cccc36a35726b4c","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-04-04T20:11:40.05927Z","times_seen":180,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-2d0daea6.7dc15874.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-2d0daea6.7dc15874.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-15c10\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54758)","md5":"64fd3bd032d776ea4973fc22409c4943","sha1":"f0390cc463b3bc5e9616933f1c46a0731fc67798","sha256":"53e06698cba5db96fa5574765ab68e2f1d31d6752e19ada8e905269b1d23f70a","sha512":"1da51fd74c1855a318d9bb770cebdf6cabcd67a7c3092b26eecdacc05a3b02251dc6dc5626c4e40b6e791dad72d2f88614eb10cc34906e8af837d8bd14ac39e3","ssdeep":"1536:KVpb5uz9we4EPsStPHXannPzQY2Y2eN8ce9PNoZAlE2f:KJ3qHrY2g+ce9PNo2lx","tlshash":"18931a88f2d5b17603a355e0442f140bf176a929a84988a8f734d4e1bdf4ecea47bf74","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T14:40:04.332698Z","times_seen":639,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-56841202.94d61a2a.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-56841202.94d61a2a.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-510a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20746,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20688), with no line terminators","md5":"da967187b0dbf7f72fe0cb8f2ea50513","sha1":"75c5c8a4a0f9e8006b21f85b92906f37380d372a","sha256":"a2c32e3baf9d3068dc78b04507a95291f6319599ed64ebf0f951492140a30ff8","sha512":"fed75f3989b67e1aaec51e1f898f10db36802e52d913e442a1e8cbb2d6778ad3d67c1b718c53532fb6c8e0b4b53b022a5a2a55d3273c8da4135d1387579717c2","ssdeep":"384:YFHsASXLK8peDXbyuJzIHXsv6XT7Bb/2McDVbk7wK6EL/:57KGeD3JojVb/2MqVbk7wKH","tlshash":"7f92c98ae072a8fc855b5261351aa3b4b6752bd4a040d459fa3cdcb825e8d64333fb7c","first_seen":"2025-10-29T00:38:00.043795Z","last_seen":"2026-01-09T07:14:56.184767Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-6dbd6b68.26ad35ec.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-6dbd6b68.26ad35ec.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-6233\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25138), with no line terminators","md5":"ba05e0c9daa399554bdc2d09d97561b7","sha1":"558556d1859a909a813cfa34522b7007dc29a0d5","sha256":"97396ee3890f9ca665ae32d06728f9c243d2e6d769cc12e6e9e11b00a935c056","sha512":"0bf0e10fe0fb571d92119d0b03233c3e7aab9332977551d30d1a51b366905ef6bbfc55e9271b623ca6ba64d264e1033bb84a8f59ae6264c8e4c8628feff916fa","ssdeep":"384:491uAewgnOgkpz1r3NJdF8Eb4AAyJss3dEM1+ERvYxv:JAlTTpd8ewsdJS","tlshash":"feb2f7dc70a0f0ae42f334e000aba443b27b5a1a684c1c65e351d9d47876aded77bf69","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.903482Z","times_seen":328,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-8086d990.3f408caf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-8086d990.3f408caf.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-7b0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1968), with no line terminators","md5":"52ef2ae544b97625f5845189199201cc","sha1":"b76080fcb59f333d7542596cd4e0e741b3e16c03","sha256":"8acc16e9df3d5163ddeade80e9345d54fd7d036c433c3889ffa3b7b391d2d670","sha512":"3f1487b64251c9ac14b78fdea4ad712e8ad39fd634220aa83b4e3d018aaa87191c110370961c1bf7a97b42dc5777b6fbbd80b09316346c97ee274277b69276a2","ssdeep":"","tlshash":"1f4185de54a7fcac9bdbb042102a1035b0623ec6444a8ca67ff4ce6086d4d645f1e68f","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.936312Z","times_seen":303,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-dc75a1da.b847804e.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-dc75a1da.b847804e.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-eae\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3758), with no line terminators","md5":"29a00c814fded57e640d35cfceed9e3f","sha1":"a5bfb6725cdf6440292c332d64faeb488aa886a0","sha256":"c43d035ec61626313c63e308620f6aa2ba3bd30c30b03df852a86dbf148dc6f6","sha512":"ff5a5b7153fe9fc2263661257b5e159c98e40a78da9bfb2535113205b67954fe787c04b60554b5aef7c5351b7aa744ff1b0c21ee0a1480d0d3cd4e6d98110cc1","ssdeep":"","tlshash":"6b715258a057e4bccd9a8052301ea331f1b23fe29040c86e77b8dfa49698d61371e77d","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.885622Z","times_seen":298,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-e64871fa.5c53c846.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-e64871fa.5c53c846.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3eaf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16047,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16001), with no line terminators","md5":"6f7b025a4a54b362e07066a583d6db52","sha1":"2dfde7c7f73777ae965cda66392cab674cb5d4fe","sha256":"db38c307f578c9388cfb43883035d5ff88ce6f9accbbdfab4931598cc5cf9433","sha512":"1ae606d072e63e7ce49a87ecb72c691ae24ce2a5afe7ac9fa8e64898b4c73bdfaa11d1b5a3140d8bfcda78b7aa6b65272998cd2cd586d5e064d956634839c582","ssdeep":"192:gVthRrXBrBHFGaEERrS1xyAm7cudo8KwRHfOwMsrN8qAV9ZQzpuWocKwRHfO/Msx:gzXrM1ERhr7HOFqIQ7HOtqIts3s","tlshash":"e772d82a50446c9c0e6290ea702b3464b09e55505909df5bffb8cdaebaced38361737f","first_seen":"2025-10-29T00:38:00.026044Z","last_seen":"2026-01-09T07:14:56.176859Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/app.fa3a7fa4.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:22.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/app.fa3a7fa4.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-39b0f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"05c96d534383f6b73cc94a5462041458","sha1":"81e1590baf3d6ed80f3823271bbab28455709a34","sha256":"72e8c8c68626d62df7869243e1550ede1a285e8fe568d82d75a8656d641fee03","sha512":"f2cad6a778c662b57943d7ee8202841a300ecdf0d82ec94e4943e8bf53fc01ee333330f53039317192aaa3509c2cef982a5004ffc0c9c7d73df1784af8a2afa4","ssdeep":"1536:FgqId3828Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOd:KFFJWTPL4Q+05q2pe","tlshash":"4e34b510db1b217b222be66d75c0ba896f18c323d8725b7bfd95741ccae64891163e0f","first_seen":"2025-10-29T00:38:00.022285Z","last_seen":"2026-01-09T07:14:56.186109Z","times_seen":5,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:23.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 914\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":914,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (503)","md5":"bfb1eece7dd9d2713dcb4138d7fcdd08","sha1":"936091f44f90b135dc8eb0ed0c9929cfec861a2e","sha256":"b8fc82e4276c70b50ce48ccad9ae2aa07fbbde0b72a965cc62a8a6d629d7da01","sha512":"833be5f176262ddcd2b9e2d160546877ea91b477bb69cad33dd2bacc60e894b158694752ee21c106541a0944b740591067a40448695f59a9b14341ed58dc4d0c","ssdeep":"","tlshash":"c8110086cc11e48c52004aa1dd30f20e96ca5c9d4b31dc903dfd52be9fa4fc98967494","first_seen":"2025-10-29T13:33:02.780078Z","last_seen":"2025-10-30T00:44:29.800721Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-56841202.6015aaea.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-56841202.6015aaea.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-3e96\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16022), with no line terminators","md5":"6301294b574a2297ea5bb8ebd51502fc","sha1":"2eaf83df4e82197b710dbe963f9e47e550e903ab","sha256":"07e22451bbdfaea2059e79dbc6dd3173d29b0049ab44d72093bc8d3a62e94722","sha512":"eb625eea493993fb48886af3abd22ed0b6ff2cde89c1557394d9705cace10140424ee12a6c3d4480edc0f5d4931d3651650e2b574605cf7d97f55ab8f947627b","ssdeep":"384:Ox2CQRDeBzT8lN9lc1tXCQRDeBzT8lN9lc1JsncjUdG:Ox2Te2lAFTe2lAJsncv","tlshash":"517218e5f234512e685264b661c0ddca7849f919e2f642e6ef86b929c0c76e3273c34c","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.357724Z","times_seen":394,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-630c37b6.1a94a034.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-630c37b6.1a94a034.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 428\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-1ac\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428), with no line terminators","md5":"839113b3a06297a1185b208299520527","sha1":"df67e42e507fdf888b4f0b1706a0bd54e09763ff","sha256":"ae7439473b984cf35ac3a8199ea3a3ccd8c794d239d0e36fec25cd4a3f0222ac","sha512":"da16c62f7431636915bdfa092d4468b66770272aca96b2e4c27d1bf9cd36b044dc03acb199486e709a3a82c272c9ab6ffe79305e116376d596ec30e3523dbf6b","ssdeep":"","tlshash":"2de0a0a051072a3b2563f0b6a8c20427b655f7abe91291107be305092e7b38a68373e8","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.363745Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-e64871fa.bad0d796.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-e64871fa.bad0d796.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-cda\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3290), with no line terminators","md5":"80c24978b9e2381214e624b726800984","sha1":"f8a129dcf2863395368e9af5f0019546fa79f330","sha256":"ab3b7257bacf6902f6f215b11e6d9a44a002ba553aa244d5951f354b39a9445f","sha512":"b733e13bffbacc61f95e898fcdc6bf87de7fc6ebc7d7f3de8e6bfc6965b98cb378d2e19663b45c633cf6041f5fe36633ede88810ee8cff2835fa27b10153f311","ssdeep":"","tlshash":"8f61327122295e2e6573e4ba62c511ec760ca336e392caefdd62800b8dc93f35530795","first_seen":"2024-12-11T14:26:07.860262Z","last_seen":"2026-06-05T08:23:29.932047Z","times_seen":277,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-501a28b2.2719da5e.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-501a28b2.2719da5e.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1a03\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6557), with no line terminators","md5":"547a073749f78f1a4bc90b820df14208","sha1":"f50f463b88b20d1bc51b8b2d4e449f33b27c817a","sha256":"5b8dd9c2251aa8c69ecf23b9da8ee4471f40806080dc47b87870b03fd2070df8","sha512":"701ec746f8845efdd9e39f9f8849676ee38145bd1112b37b32e6d9f58a0e4a0ce8d57396eeee93f917ad3a127a237b098c5a9397ecf6b691c137dd54825e8def","ssdeep":"96:zoVtr/FXs+3c1t6+9eXygLnWp3qkIGm6ZriCvWRZr/JGbmO:8Bs+3g79otWk5KOHGx","tlshash":"d7d1c8192147f95d496786a030063420b0683e98650da49abfb4cef976e4c18337efbe","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.964134Z","times_seen":311,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-5508a8e2.c19f93a4.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-5508a8e2.c19f93a4.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-29f4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10740), with no line terminators","md5":"067cde0f987d583e97f848f151fe5a59","sha1":"161b191852bdd6cc4f80e712fd1defa2d7cc8a43","sha256":"16ca47575daad06f07e524f799906eaae6dda84ead8f094dae07ed0b557b9c4b","sha512":"6398953023aeeb409498f11a978c8b84b5cd8e139d1bebbd5e6e8dd7fe2ab418201b259fd418952218b248f04edca00e8bf4fd85d725e4658072c7a29bde75d2","ssdeep":"192:K/sOYPMSXr67qgEI9pn5VsUPeyVzo+4cemyifmk6IrI32:Is7NX2K8LPDq+4cemTftF","tlshash":"0c22f70eb466a9f8885b41222106a27471766fd5f00854ddf7bcccf45a88eb8772b37e","first_seen":"2025-10-29T00:38:00.074924Z","last_seen":"2026-01-09T07:14:56.245355Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-23cdec97.5fb5356b.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-23cdec97.5fb5356b.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-64af\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25767), with no line terminators","md5":"f3488040091c9b8d55ef1ecd5b0119eb","sha1":"bce7518e27c8c62d3263d2c8d16a9c85ba6d91f7","sha256":"bdb88d78ffdc0eb2b6a6a3318c96197386f9c4def37c3c6d3c3bde47228aa0f3","sha512":"7c1641f303067bb9a06631a0c00f010a7e7b92c598a8a531db9f90e9d7bb649d1446a68b8e1563dbb68925e08f6bef2458879efd2a88658eb05aba71db937a0d","ssdeep":"384:Jz0nsnVXOGG82JI3lfs10HlMGoalAubIp3/jnisjWvzBCUE:JzzeGGjIs1ylMG41/+sh","tlshash":"a5c21a4ba4d26cbc499b6159341b1259e4323fc5d045c8e6b63cecf4d2b9a38772bb2c","first_seen":"2025-10-29T00:38:00.059666Z","last_seen":"2026-01-09T07:14:56.225566Z","times_seen":5,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-23ec2e1c.acb19461.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-23ec2e1c.acb19461.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-48c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1156), with no line terminators","md5":"28f02e2635cda76615f1748ab1c8edf9","sha1":"1a3de8ae99dcac4356c13d191e9b93281ba9cf4c","sha256":"a0a4f9521d4164f50aee41d3bf0d36e7a739c4ec513022bdd884317c8750e781","sha512":"1ae36df0c5be6169e4691f3f4037322c0771fc8085d2eb245aa3d8e6769df9f967f91dd87848a7ebf5c2e9c5df2e80a25df8605d92c9ddf376a5ec905093daf3","ssdeep":"","tlshash":"42211413a052794d586ea541210f2134f4f09dd64c1bece2e778c8f6d2b2daa3a9f23d","first_seen":"2025-04-07T11:44:03.62708Z","last_seen":"2026-06-05T08:23:29.959117Z","times_seen":265,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-29caa736.d6e107e7.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-29caa736.d6e107e7.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-c1d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3095), with no line terminators","md5":"904db41a401d65fac2ab81f4724055bf","sha1":"c2acf45f48b6fb4591712acc3280ca3cf7393879","sha256":"fbc44bbd28269a6039f731891eaed156a8588303cdc67ddf2d69ab917a7a964d","sha512":"9c7a07cb058239f16830c93588b34fba5a6ba3a2b504b874769cb61416ee197784fe608fc94b13822febc5361da5c1c0a151c4b1cd8a829fe5a84cdb8ffdd6f0","ssdeep":"","tlshash":"8351305d9463f4beda9e5016701db630a0313fe24805a4bebb748d99a298d61330f3b9","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-05T08:23:29.945083Z","times_seen":316,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-a7e8cec2.6a30d214.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-a7e8cec2.6a30d214.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-70fd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28475), with no line terminators","md5":"113876f9522e3a3831758a3eb320585a","sha1":"e327c4968860ed2adbd8aeb9e75e91dc0a9f6bfd","sha256":"9b3d89b7b84fff97f31a88aba31486c5066b17b5a5c78652450524f87b3e44c0","sha512":"7ffc3e820e57f3ce1e373d089100a693fdc26021f9bd3aa01a09047071f9d0dde1ee0cf553776717bb2f0037ab311e06fc24e02fda86bc2628f264a010fae053","ssdeep":"384:2ym4ERQIculTT2yRvcR1GNw3VrgPnk4lHGE:2ym4Eedulv2uUR1GNw3VrqTZ","tlshash":"ccd2e94e71a17c8e130b4261745f2651a22a6129740e90dbb7bdccfdfa9cd241836ffa","first_seen":"2025-10-29T00:38:00.062963Z","last_seen":"2026-01-09T07:14:56.15368Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-e2691b64.212cd2bc.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-e2691b64.212cd2bc.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1881\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6273,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6273), with no line terminators","md5":"914d5239a0ff30471e79d47d6f3f4c19","sha1":"6edb3fc3515dda4d42ba84408d563b2a47a80103","sha256":"7da9e28b79cd6dc7eef8000d2889104f4477473a0f690da92610f9859dfb0e67","sha512":"1ae47b7bbf982c8df9c3ad439940d00419f382a9e9be3973757fd227133f736598fa74ec2684919bb33ed1428ff829271c4f6e2969c6a5ff69905d1c1f479f0a","ssdeep":"192:Wx/sOG6MSXU67qgEI9pn5Vs56IrI3k4/z:YsxSXLK8mp4b","tlshash":"9ed1089fe45278bcc04b52a5351b332976713bd0e044496afb3ddcf82ad88a8236677d","first_seen":"2025-10-29T00:38:00.056885Z","last_seen":"2026-01-09T07:14:56.227739Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-e78dfc3c.cead7c88.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-e78dfc3c.cead7c88.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-d5f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3423,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3423), with no line terminators","md5":"5f33d835f5ee5da37d53941dd3e651f8","sha1":"0dafad850cd4ead260d9062e2f05c403f9e4aa3a","sha256":"ef83642fef405cd072ccded6e12a224d41588aab683ba4fbb3847212445b4ae7","sha512":"04b4b8a6b9341446d77ec2822672fdd045ac731d2dc3af6fea086a62ec5f738807786e97fd4816f9f474d7bf2a1dde4caecbd606c12d7c5ff33b448bf42a7ed0","ssdeep":"","tlshash":"f561740e6453747eac6e4146b11979a8a0322fd6c841c4e7fa3ccda993d0d74332e7e9","first_seen":"2024-09-19T19:36:28.769478Z","last_seen":"2026-06-05T08:23:29.937943Z","times_seen":262,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/vendors~app.38d4edbf.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:22.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/vendors~app.38d4edbf.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-3c96d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e2c553a0ebf6e3a82ae07ec78c9a275","sha1":"579d69c6381a05da2c87a55d88301788536820dc","sha256":"28d5dd7be3b9ecdecae26c5c84811a181f5eb03df646096eca8171b5ab6f9f5b","sha512":"b82a19b7b473a320b1a3f99db0badecef4ad997d367d1138bd2adfa6b97268f906a688be68b6455a0b48c1c724907e7489bc30c1a48ceeb180174abe973de7f1","ssdeep":"1536:O28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:TtKw/27eDLL6ob6v7f65WCXkb","tlshash":"ae34b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-04-14T17:36:31Z","last_seen":"2026-08-02T11:36:27.425139Z","times_seen":219,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-24f248d7.143b8377.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-24f248d7.143b8377.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1f49\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8009,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8009), with no line terminators","md5":"692ad9ebd85f503f4caefae8c1e601ac","sha1":"d58495caaaf1c0b2a42a21b8c5aff74d44ed1f29","sha256":"9c7d01dda54f3cd91a329a39e080ea8511b03dc4ec9df3ce9c1014cc2bee8c11","sha512":"8e6daa216846cbefd881eb184669a25e30459ceb8fb17935bd047ae6168613dca3f0bfec4aa10f2b0e747df10961d26c17d5b85a6c029c42161454d637fe62c7","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfP5iPxaXo:iCQRDeBzT8lN9lc1JsPYo","tlshash":"12f10ba7a0b2c4296b27f0a675a4d4f47454c522eda782e5b7d47138ccc32e35366f4c","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-04-04T20:11:40.021647Z","times_seen":174,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-3aef57cd.368460e1.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-3aef57cd.368460e1.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3889\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14245), with no line terminators","md5":"a7d6f463f9990bee2ffdcaa598320695","sha1":"07f2963f1cec478b6a88ee40a661d2c77106ccc7","sha256":"6975b4ecb6641e36bb7f241a168e09c8034f6ffa6b8a19b5cc8afd5c4c786d24","sha512":"636eb38535cef33ede45aa4905cafa015106401a0740a4b2833842fef4d423481cf9ce18d0dd6ea5d7ae4597b4f517609741e2bae9dc81d91afc29a614c541f3","ssdeep":"192:7xqT61LPDWzU/q+1mrJvgKHoBUsnyHZHJA6QXfZH+0BMa7YHNKnZ5:wT612zUxArPHotuFQXf8FpHNKZ5","tlshash":"8b52c84222ba385e5756219230fb2580a27256a5280e94eff53ddcf6b3ccc247d27b77","first_seen":"2025-04-07T11:44:03.597375Z","last_seen":"2026-06-05T08:23:29.883056Z","times_seen":262,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-7e8a3b0e.8824737a.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-7e8a3b0e.8824737a.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-6c44\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27716,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27674), with no line terminators","md5":"fd67341fe983528ae0703025a5d77e0c","sha1":"d3bc62d187bf187fddb8d368381a3873fbe8bb48","sha256":"89af15bb59136bf96590229a9a61e1a5007a9e94e48529450bc36a9e6d6446d9","sha512":"f7da742886981b8742d9c65753cee001bd30aca05b5740398931d879dddbecd5a94f2850d9c618175d086e15a5227582d90c9053ec1e99605a3d6387a0246565","ssdeep":"384:kFJ1G5vSAJRx5WaveIA6WwQDPqtjcg5BNK6lRguvwwOT2pWB:kFJ1G5vSaWieT5p7q1NK6lRguvhOC2","tlshash":"b7c2f72a3246242c49631fa453df4b09f33261d564264988f3ada1c76f7cd6e31bba7c","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.912724Z","times_seen":303,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-fdcd1b2a.0591eece.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-fdcd1b2a.0591eece.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3b48\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15176,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15146), with no line terminators","md5":"1a3cc4b86c4c560f1664bcad8b9759c7","sha1":"8c1b12ea9c2044d4caaa245ec37aa5d95490c55e","sha256":"d1ddc04cc01925a161876b77d8e9070570d57c1c59980cd39a462eafa3a8d536","sha512":"706bf6dcf063d38ec67ed53f41905c282d874eadce6876d7fe42b87eb6fd3ac1e774322717aac4cb64b30c5dcdaacb7c1a1e03fccc1fada35e73b82163a4b39e","ssdeep":"384:iXn2CR3gwJ3INfAKA5kzhXbFNu6Moswj+:iXn2CRBIbNuK+","tlshash":"626219122185b44d9b7641b2312621a1716539d6d40df0abb7b8edfe32d9c18372fb2f","first_seen":"2025-10-29T00:38:00.038337Z","last_seen":"2026-01-09T07:14:56.177501Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-eea86ba4.55f017f3.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-eea86ba4.55f017f3.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1941\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6451), with no line terminators","md5":"78bf24aa5528d0c4d2b2e7f2cb7be970","sha1":"1378b87ccf01cecb1aac76ef4566e4bf4a68d7ab","sha256":"201d17d766969a9b80c8daa0fc020e8ef552910cfca46d7b63ba1cbee79dc95b","sha512":"e6a4d9768801026c9390e21156e96caf3e455c063f6e99e325cdf742a4da3810bb272705c7c6bc8963194148688936f01b2434430dab9e197986436e4e4ff0a4","ssdeep":"96:nngjkd6rjYXkLIuGtdcskGQvKKfD7AkMTEWgvbVPLYsoqfZTxq:ncj45uGtmrFD7AkMAWspUsJfrq","tlshash":"2ad1e95aa518f80d4e0bd15130192572f5a93fe5b024d9da773ec8fc628cd142b2fbb9","first_seen":"2024-08-20T04:36:00.731133Z","last_seen":"2026-04-04T20:11:40.161644Z","times_seen":47,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-23ec2e1c.b30d78dd.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-23ec2e1c.b30d78dd.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 340\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-154\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"7de78efe8bf09e10f280567a395d6b1b","sha1":"a84403256fb9c265c757c632def2bf3681d921e3","sha256":"3c64df4c1120ae8af09b2670ec78de64165c17cfe281e9fd19d9a55277f38b77","sha512":"575e2e01d3b715fc66a4de91cbe6cde658c2d3953445a92f711f396196fe921f1ff198fa691271c8670688cac8b445a52076248bc01382ffdd4b6956c1137eb5","ssdeep":"","tlshash":"f6e020708b561089952be1438b034cda2af9e663d16395855fa3d03dd46704f2e2a785","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.395716Z","times_seen":7633,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-3aef57cd.461cae5d.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-3aef57cd.461cae5d.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-4c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1224), with no line terminators","md5":"8955845e2d8bd64e527ae1135c65ea26","sha1":"cbbf041cc24f594a5c4fe6ffb3e169bbfba42213","sha256":"dd63ea802d717680dd7f4dcf1513959250e5f5a9a4933b656f21dce00cad624e","sha512":"7bb84ea974994dd40ce9b9e9310dce416c19db19f64568207a6a36b019727f705db2d21cbc88002f06ccb56735187bc319e455d7de305eee0cc9990a916b368a","ssdeep":"","tlshash":"b9219041711a5366347ff42a54e0c965f22173e7d49652435db8a0804b8be663b01ede","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-05T08:23:29.876598Z","times_seen":3720,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-8106b252.148f433f.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-8106b252.148f433f.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-e29\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3625), with no line terminators","md5":"5d856ee88b3591842edc98f9c697f3cf","sha1":"cb39f87682c3d0cb789076a58acacea774b0a90a","sha256":"3e0f75daf2c30cd8230e8779aeaac9189afd0b1aff1b50258a0851b0ce65469b","sha512":"177ee54cd06fc29040f182c2a2a37eb7cb2664d9d250574ec4e8f428042ae59affba129acdc053c6e49c28d55de0c76a61188ee92f6c9f92846aa21deb3c1694","ssdeep":"","tlshash":"4e715b11ba3d62f8f426c11e6a46984d7711f117936f84f6afe0d47aced3a123b3019a","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-06T01:22:22.673816Z","times_seen":4473,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-e1928ac6.9e47b284.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-e1928ac6.9e47b284.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-2e8a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11914), with no line terminators","md5":"3b9dcf7c9bceb31f3ba7bbdd8f839bf0","sha1":"d6389f127dda29604977eba89212fe36ac4212c7","sha256":"eea3d99d458c5d1b9474122f0908f34adf80897a48ff640ae80864a4b62f4e08","sha512":"3502cb0744944b237311768889d30ede39c01086b820a81bbe9784daead9467ff92cbcf73d4319a2a93de274376157f452400e603d3ddfbb19bd565575fd0466","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfOxoi7k2Xer4f412QRAelWklFbaiWsX:iCQRDeBzT8lN9lc1JWxoi7kGeriscKY4","tlshash":"1932f96290b2933dad23e1a57098ace83944d526dd5343eeb7547538cccb2e32632f5d","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-04-04T20:11:40.055663Z","times_seen":110,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-63c9da5b.e811a748.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-63c9da5b.e811a748.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-7e9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1963), with no line terminators","md5":"b71a55f7d67f653e65028660f0c297fe","sha1":"5a69e7f77330e11b670582f109fabfa81473bc05","sha256":"dccc36b7ac0c81dcc560366f9a9f22abf8f8a95cf03078c37ba6c8601a16354a","sha512":"c3effba638bd315063ce36e608f66ab52458ee8af39b0eef15cea9606e901afaec9bf6b29c02d84f88d054cbae21d52b0379fba4b11baeb07138f7070ad47d64","ssdeep":"","tlshash":"44410202ac46e6ec9d4f9064718e6630a5321def15439083bab88c9456b1de4736f1bc","first_seen":"2025-06-23T10:25:51.957865Z","last_seen":"2026-06-05T08:23:29.942945Z","times_seen":29,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-57796eef.c70dd4a7.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-57796eef.c70dd4a7.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 111\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-6f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6fa0ecf4147c8ce0222c50c699e3807a","sha1":"a77f07547a33f9b6ec67e6eed37629f508f97a6b","sha256":"6943a6d74dcebdb81ed9b48152a94e537946bd452b87590c4179c966722f5719","sha512":"8cc93fbb80c2bbce59ed5c2bf12fbe7ca0c49da27fa32ef1bbaafbf84aace700d4e60931ad95010ae4f7a5405b3e6f475e9ebf8431beb768ddf5d95ac4efb1ef","ssdeep":"","tlshash":"66b0123a734b04fc8c2ff0203f5988b87ec13322e11924035f9c8024451e7027c30210","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.445601Z","times_seen":8474,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-75cf3bb2.d40cf9e6.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-75cf3bb2.d40cf9e6.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-19c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-08-14T05:14:19.405864Z","times_seen":5433,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-b0550030.615f6bf6.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-b0550030.615f6bf6.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-63a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1594), with no line terminators","md5":"7bb68d7264949b255c669843ea227988","sha1":"c37129a7f0dbda018bd10436c4812ca558ccca03","sha256":"e1e47844c3390d548f1cd51ea560bf6301ebc6163228d4bf728cfd0a10b5e70d","sha512":"af29987a4411e45d99202eed3f1ebb777ea971e2b4eb617f4232c504c4f83b247c6e6651bb83c7dd153a19306a521a1e4ff6e633c6faf12308f1eb631623f7eb","ssdeep":"","tlshash":"3b31761e3e491d18f833f71f21c24a5e3212a37385b6831a7c43e55afd470c67ab12a6","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.368662Z","times_seen":5573,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-e78dfc3c.bbf1f88d.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-e78dfc3c.bbf1f88d.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-8db\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2267), with no line terminators","md5":"8c6c2e32d246f43938c015ddcdeb69c0","sha1":"b6c0900796b2f918e95196d1deec6b6bb23de45c","sha256":"2286584045d499c3f6d7e0178051e8cee89b1e36412f7e91b095f677e1b46c73","sha512":"9bb9bf502e8cfe654b271eaa74dfbc90f633cc0ffc25cd2811f89643b603d79584fc1396ad80f23b84cf54beffa20f21ab81a34c3f799d0b7b6cda721418feab","ssdeep":"","tlshash":"5241c0737065617ad9b3e36972419ccc7a81f243e3b352f8fe95e43c89c2aa2193019d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.440992Z","times_seen":6380,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-8106b252.f66e1668.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-8106b252.f66e1668.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1f9d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8093), with no line terminators","md5":"47097f2d62fa5b6132019c6af3908012","sha1":"0c4d784033c0a4838da9f6d2f4d9c750a5fd9851","sha256":"46bbd843219f5992cc181acf6f703b8c9551caf5b41467c759665a0f26b74a3a","sha512":"243e8cec124cdd93077eea3ccd0801ca77ab0f928ea447ac13c8e1f6019e2dc9cacd76e6a20d617190c88635edaf4435b0ec46db03f6872f440ca388bc5d4d8f","ssdeep":"192:5W/AYIgJfN6zRJ7HxExWmQP2Rp62AkQB5Lsy:iIgJfN6z37HBZf","tlshash":"8af18481700ba59dc89ee01261199a30f0b61fa49811d4cfe77dccb8a5d8c64bb5fbb9","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.964807Z","times_seen":279,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-406d875e.3ecf88fe.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-406d875e.3ecf88fe.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-d0a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3338), with no line terminators","md5":"1bc5b8235f9e8d5bf3961279423cf630","sha1":"466627105df20f8e829d3db72a2617802b7b265a","sha256":"cc7c2d00d52891b7af0ae290785d54f087c4f61951893b7c7fd8c869f7a8047f","sha512":"a2c17506a8e46344978b7955c1c162a6fdb844d0ec51fce021c04aee33df5d44cae64f10a7a6bf5ec295a1210540e5b82c1f7e79b9d89aa14dc29e7531cd81ca","ssdeep":"","tlshash":"766110382130361c3b37922a25c8f54e2619a9e5f18995c9ba98c42f4edf769dcb0263","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.508224Z","times_seen":6672,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-63c9da5b.f7ee60f5.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-63c9da5b.f7ee60f5.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-74b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1867), with no line terminators","md5":"d719d7494a1cdfa97ad12fcbee12a5a4","sha1":"e3d9ec9c89351271e36ee27c3ecd8209e338c8f9","sha256":"a4c9d21a3b2f2c689c890e5c2117c148482d7d1570688e67d19d93a6e8d58180","sha512":"5ff548dae06588205c010b8dfba2248a4ace6e4e5eae8ee25bc405a4efecd8f9e395631408aa3b475fc7c3d5d2003ab0d8c4e5592145300e2b547848e74bfa34","ssdeep":"","tlshash":"323164a2ba0e141dfa0fd566b2d3a6faf2158d82d163c396e4977128d7c60e26371308","first_seen":"2025-06-23T10:25:51.990031Z","last_seen":"2026-06-29T05:28:44.204249Z","times_seen":65,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-ab1540ba.1f2ab8f5.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-ab1540ba.1f2ab8f5.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1827\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6183), with no line terminators","md5":"d46ccac8afed41d4fc5c59cdc4df35fe","sha1":"5dd8325163177c847a798e16cc2469681b6ded3a","sha256":"65953a49d49c975458e1b6df9721c7d4487cb8dd24ba0179bf8a0c0803a27bb8","sha512":"02f8980735562cd0cb9f8200963f4c0a614c7d9c2fd1261225add8113efe7bbc968b3c5faccc64418a4a193dfd57eaf18c3134c0895b0ba4362288e0581753ca","ssdeep":"96:V7aBnp0eZAhzD/wFmwxM3Q7BkyJtFoJU6Gfiea2dFyq:VLw+Ifiea2dFR","tlshash":"b6d174132a676520fcbaf01e79647b8e3e5cf643d08606bcf99abe35c4c6873b518141","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.524163Z","times_seen":265,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-56bffb70.a46f4b1d.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-56bffb70.a46f4b1d.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1125\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4389), with no line terminators","md5":"4be75f541b3eae7ee3accab3b8419ad3","sha1":"7d128e3ed6dc403f6b8e10c8531804d5249be51f","sha256":"ffcd040493b8a6e215943888902c4a2e74f70fb1d51b2d2005365e86f9f57609","sha512":"6c111547296a7558a6eae910eedfa7b5e5c1742faaf293deade7d1bfd5bb756db774412f2d1a46ff94e7e88c8bdf541c0298c6c71386e70e0c1d473f312f2ddd","ssdeep":"96:bKBnACr3IIIIIIIIIIIIIIIpGD1j75hZFZQrmmp4q3:u+WIIIIIIIIIIIIIII89HZs6Ru","tlshash":"0d91984aa8a2d3b0fa7b152f654923101e118fec67a8d4487f715ebf32844be4b36395","first_seen":"2024-08-20T04:36:00.716816Z","last_seen":"2026-04-04T20:11:39.934433Z","times_seen":48,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-e1928ac6.746e237e.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-e1928ac6.746e237e.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-7b5a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31578), with no line terminators","md5":"0b1a20a93baeed45d29bb05794b384c5","sha1":"572f44c8e35602d3e273a6d53c2f022eb5b66a87","sha256":"9342282447dc813d4d53e1c82b00b674134d006f3f2ed2a28eb337c91be58462","sha512":"609da771a250f2438caffb0f1752e2fd974300f068dd5c70771e51bd8a1043883d6c412799712a441dc9796fd3622c6b121ddf710d8c3d13ff4197f774ec3236","ssdeep":"768:LQGgjhGo2wMxt0OK4fFcN6L5V/oNUJD0Zy+/:LQGYIRcNXNUwym","tlshash":"9de23a5f50a46da8c98e21623016227934716bd5f00a48c9b7bcdefd518aeb4332fb7d","first_seen":"2025-10-29T00:38:00.072281Z","last_seen":"2026-01-09T07:14:56.158018Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-8086d990.10f19374.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-8086d990.10f19374.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 868\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-364\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (868), with no line terminators","md5":"c39ca13bdc2f4a622d1e12a41a629219","sha1":"09c1a5d40c3bbb3fc3e21b67c7ca886dff17a575","sha256":"9a0298fbd5163a4dbbe4944f7c825bac109b42227f6dc0d4553b69e701472896","sha512":"85feb07fc68ff6bb6d4646a662e9c7856e6f4781af897e9a0fe47e5a0a6b4560eff90bff5a84f694c5f8350edae14a0f794acffce9ab2dd41a6fa8c8ea3cb3ae","ssdeep":"","tlshash":"b0119cb3a176d932f9332c67374494eef19188e2e6528779fee7690cc08eb539620304","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-07-29T16:17:10.905903Z","times_seen":5987,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-e2691b64.190a6d02.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-e2691b64.190a6d02.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-15fd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5629), with no line terminators","md5":"87bcaba95fd3b86a38d6208dbc93b658","sha1":"58d58c63dd9dc96e89cc040839a7c108ab2c04bb","sha256":"e2a324832d33c0bd9e3ec1123e5e8096ba0c745821d60056456f67298d4970a1","sha512":"c125c6410b061f56fa109edf7e7a2a29aefa2aa2f8b6b0a8e89c343f1327faa696301f7e10165b1bf0e78e539f8f1091d21c5b95d24d4bd295897c543bdd1476","ssdeep":"96:GXzpE85mAIJ75iEOOOOOOOOOOOoMSh53zb7DHHnUboUINlSzNDYcIGlwNqftSiYo:IzCQIXiDe53zb/UboRyRD5liqF6+lluQ","tlshash":"d4c15b59e53990297c2114b7b1811cc2bc25c82ae65e45b2b756bb18c8c34e32b3d79d","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T14:40:04.505636Z","times_seen":345,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-0660bbc1.68c2b008.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-0660bbc1.68c2b008.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1e59\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7753), with no line terminators","md5":"1e5a6d63bae39054d0ff035429dd19b6","sha1":"70ac7a9487edff2680218b014017bc270f0f4258","sha256":"62ff2d7c067495203a7a9b4182c636e583050ee7053b0f0814f76d69a53208ed","sha512":"d6cb22efa1baa60e31d21e236aaa88549f0298abe746b32c2d8b179450a96bda85f280194173ce545194997981f5dcd76600bcdbb0b086aa20b234eda9dc44ad","ssdeep":"96:8zZdoIsZ5c9nl0UxLenJbGpiel4jEiq15H6nbWVT6aAlVZsALb7EG4+T2GZGUVMe:8Vje5cFLeJbu5BfHRVOsbGgNRnbE","tlshash":"0cf1da05a4427864cf6e5181601abf74b4a53dd1a806d89ff7b8dcecd0e8a66321e37d","first_seen":"2024-08-20T04:36:00.700153Z","last_seen":"2026-04-04T20:11:40.140032Z","times_seen":49,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-46f30f6c.958a8d01.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-46f30f6c.958a8d01.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 828\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\netag: \"6901be7e-33c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"87d04f3eb50049ae1a83259f441f9e4c","sha1":"7cc35cfd52bb7233180aa050d661b6341b35d928","sha256":"a3907f8c6222b5ce904c9460c1a4a636a00077762c7cb38fa6bd977067093b37","sha512":"8162be0b442cd5072426ceff04fd1d530d86084c8bfbac02177f52dd5db9c8f8910887f77368519c0f580ccba01faa4e33e974283a20f828070c99a76f4323e1","ssdeep":"","tlshash":"ea01af6c75d1f44b4a5634f5801f51c6622728fc19eeb813dbf090d42e308ad112bd8c","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-04-04T20:11:39.953727Z","times_seen":51,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/#/","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-30T00:43:22.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1c24\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5268)","md5":"b81b35f9230a92bca3efbd4e9db29bf9","sha1":"954f46b91ee44f1eb28939d7221e4b912ddf55ec","sha256":"8bf6d1b08424cf65e1f2e88325067bf43707766c367a9d74bbaa53ee536beaca","sha512":"f1f13ef34ed6e882fff8635a93c8fc04a5655cfaeb9085e5c5566b34ac256ebde8742500169832c4114ec2eedd6a1982f0b8ae28ce76b3560e729def0cc66c67","ssdeep":"96:PSJ4ckG7+f82tAHhvDYEp2NVNt6G3pGr/vxZrtaRjDLbZ+G3R7o3:a4cufJt2vDYbNVNt6G3pIZrtaRnZlo3","tlshash":"bee1fbb9da00608fe9f1ce839d2de71beacb8c771430e400e218985ecd68fd4456b947","first_seen":"2025-10-29T00:38:00.079863Z","last_seen":"2026-01-09T07:14:56.205497Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-63c9da5b.e811a748.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-63c9da5b.e811a748.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-7e9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1963), with no line terminators","md5":"b71a55f7d67f653e65028660f0c297fe","sha1":"5a69e7f77330e11b670582f109fabfa81473bc05","sha256":"dccc36b7ac0c81dcc560366f9a9f22abf8f8a95cf03078c37ba6c8601a16354a","sha512":"c3effba638bd315063ce36e608f66ab52458ee8af39b0eef15cea9606e901afaec9bf6b29c02d84f88d054cbae21d52b0379fba4b11baeb07138f7070ad47d64","ssdeep":"","tlshash":"44410202ac46e6ec9d4f9064718e6630a5321def15439083bab88c9456b1de4736f1bc","first_seen":"2025-06-23T10:25:51.957865Z","last_seen":"2026-06-05T08:23:29.942945Z","times_seen":29,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/global/icon.ico","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /global/icon.ico HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 39438\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-9a0e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39438,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 103x92, 32 bits/pixel","md5":"4d936d6195551a6db3487f56898714aa","sha1":"3c5c9e60d480a91fcaadf02d1fbbda5fea26b18e","sha256":"5aa26620bb1feedf0c2115ba883c34e117ba6f6eb2aa11f7680271635fbe8ffd","sha512":"f6e0ebde385330632fae78b3874f43a9c71851b1710636473ff4ddc5b1313f28e65cd93a22544acbe547bac9786b691d59cdb7e5082d61786004778780f53183","ssdeep":"384:CjMbqN5cQ5cgTumtRT6E77WbK9wIWq0kngdtMXq6Jweg6+BXiJ1AG:DqNJL/AbAwIWq06gdtMXq6Rg6+FiJ13","tlshash":"e903bbc25c98827cd94d5e3829323c760f2bee25bd7d6a856c217851eff3ac1142a61f","first_seen":"2025-04-07T11:29:44.981092Z","last_seen":"2026-04-19T00:40:50.933521Z","times_seen":30,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-137768ec.054674a3.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-137768ec.054674a3.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-104d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4173), with no line terminators","md5":"d26838e6fc6c5713d841649b06a47e9c","sha1":"7681e0887d8b3957920c84e07fe95a1f8a22bca7","sha256":"5d0e36aa6715f146ee4979217b130ba8e86c334c02758895220835a2366d5a01","sha512":"d01fe57c48c7685b7f14f29a50d61418040c66ed4c756276c25108e74dde577d4c79841b9d3690f94799cb30a1ea691dba49e71870b97018d2d57291026f90d3","ssdeep":"48:jMxKHcoeYHjMBgquTy/ra6oYkAryBxzYpUfRmua+IzvtTm5rx2/6iYrxXfZsfZyK:CKHco56gNTwm+yNfZsfZyZZK+8p5","tlshash":"cd81ee91712c94266c73e07b309e455e6e54ef63c012a3589c56bf3e8c932e32e707c9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-05T08:23:29.931375Z","times_seen":5300,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-29caa736.c2dcd608.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-29caa736.c2dcd608.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-9b8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2488), with no line terminators","md5":"9ebedcfc17a77b41d085ff02d0952558","sha1":"f39aac6f7d5ffc15f477869d236b83dcc918b246","sha256":"9970c1349a172ee68d88499d6ba1958041287a8c892b4ae22fecdd7ad0dcee44","sha512":"169970d3921a730c2da73e67d31fd65ad46d14cd94097e8bbb255ab67872d5f3ae46a6003faae02f6495ffe1a2105bedd32d4881215e8acc4b1755063d401c4f","ssdeep":"","tlshash":"8d514b7922980a3497feeb2d944377a73003fd57e40250cf7868cb1e8cc9b9251e2768","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T01:22:22.5903Z","times_seen":4742,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-4452a43a.9d4508d1.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-4452a43a.9d4508d1.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1a66\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6758), with no line terminators","md5":"3c772ced1ec002c2a48da9a2fba99456","sha1":"a069a1dec1da645fa178ea4c76042aacd6aa3526","sha256":"07e5e270f492cc24516cb8e904f2111805ab5a460a8f9f5d76ee2789bb013933","sha512":"2f9ffdc014a6cd295229d628b7f31c1694197e19d1f14406c944710172fb46c8b4d0c81c47907571660f42c4d74f8e2ee7db34deaf63cdc77708ccd026b9fe02","ssdeep":"192:cXzCQIXiDe53zb/UboRyRD5liqF6+llu1Jf3:cDCQRDeBzT8lN9lc1J/","tlshash":"54d14ce6e17a8015ab27e1a660f0e8f53825c922ecdb86e973947514ccc35e3172fb4c","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-04-04T20:11:39.986197Z","times_seen":176,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/app.eb3bbd96.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:22.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/app.eb3bbd96.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-150f21\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1380129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64210), with no line terminators","md5":"47a1c24bcda9e588f6867f02c4fe9482","sha1":"9fd5f892bc66add855f3da04d79b9374caa20d41","sha256":"b490c0d8a1adf658ff23ad370d4e1f8cfd6e6bf983828d0b33bcb0b22dcaae08","sha512":"a56597f92c70fd408fa4dc3e4b6fc108d17c3e0a02bbffa74cd8647b3b108f7ff5324b23161a97a532332ed7ef137317554955d95a97bf626a0daf4852224571","ssdeep":"24576:SFILf8ObPNa9yMU9kbBdSPk3TVZtG2xjDy2HCD0YzCtzIXOdswB9LRbWxQ7BAi9W:SiLf8ObPNYyMU9kbqPS/tLxjDywCD0Yn","tlshash":"78654e6b97c2d3e84fe535e1241a33f1226988e5ebfdb9df07b8e19031fae005119961","first_seen":"2025-10-30T00:44:01.280145Z","last_seen":"2025-10-30T00:44:01.280145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-00a17b20.85ee17e2.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-00a17b20.85ee17e2.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 410\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-19a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410), with no line terminators","md5":"fc805b781c89c799b666c4fbc4aeb200","sha1":"fd06224fae1c2c2bde5a18ae89ad003e03d5fef3","sha256":"a69b97003c8dfe86e112829516ab7dd637a12b08508d6cb9049741ea93868576","sha512":"2c06b84040f5df4f5486d754fa36dc5acfd67741c94e929f9c94994c1e7e71898c1fb336dc6be4e8568c2bd0c449b0e34e8f392cee6452d08874382a90856bf6","ssdeep":"","tlshash":"09e0a942010a1e2b2563f42ad0820707b665fb37eb42d2409ee00a080f9b30a38383e6","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.364867Z","times_seen":6986,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-606524e4.45f75ffc.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-606524e4.45f75ffc.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1297\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4759), with no line terminators","md5":"50b67c1e36297b1843f24dadece451cb","sha1":"aab4395d6d74d3e50d7016a544f7709a601343a2","sha256":"6310619d584f66c72ad89a3e491fcd0100f459bbb6c9d49d92843f464fcf51d5","sha512":"4dfc42a95a7a19d045ca233519f6f1c6fbd5446b344a059b1a5f691e916a5191b0121a7ba61619722cb7989a175982917bdf4e6359cfa4920d9f1e4b3ae2f29b","ssdeep":"96:2oxsUQOwXVcjglPJiA8J+eCkGCaCR4CRjpClCucCOCTpCHC9C3C9CtACbCUCtCcJ:2oxsUQOwXVcjQPJiA80eCkGCaCqCTClX","tlshash":"35a11297311f133d68b7e1571981a86d7878efc2c1322211fc27aa18c8db6977a3724d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.336196Z","times_seen":5412,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-dc75a1da.68f1ff08.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-dc75a1da.68f1ff08.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1789\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6025), with no line terminators","md5":"c63efb6377677d87860961ce9b034b8c","sha1":"18f148dd546c72804cebef5b3ac62a2aa5ea2f05","sha256":"eb97254831a8d84234f5fda80743ac2a48808c01be09508b4892f0bff710fdae","sha512":"e077bb35d2a63d1b0d121faf7731109b8ffbcf9eb5ec78c0ae3d7bbf0f2289292f23f0b63265d0c4ab09212424d0ca7ca7c7b89fe8e5cff70e0f49e39074d2ab","ssdeep":"96:VB8g+vUHLL1RLefzpE85mAIJ75iEOOOOOOOOOOOoMSh53zb7DHHnUboUINlSzNDb:VB83M/1UfzCQIXiDe53zb/UboRyRD5lP","tlshash":"0ac119a820681c350afdf866968239937417f836c51e84e93b40771d8cc7f92b4b939e","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-04-04T20:11:40.038537Z","times_seen":113,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-3fe1efab.ef85bc7d.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-3fe1efab.ef85bc7d.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-c543\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50427), with no line terminators","md5":"93c05be971b4ed55648fef6ab73a5de5","sha1":"38f736939d319fb730684344a46a70c542f49031","sha256":"c9c9eaefc483a2c7a14a709b2a6d7733087510bbe3e2f631cafb25894efbc08e","sha512":"49e18ee01f4a6d79b6cf1638b6160f852a27fbf098600675928d26f9a3a6ae8119f69c3b366b7fd65c1332c1470d24fc8727c891e9c72e635cf2fdaf4ddd90f2","ssdeep":"768:OXi9Y3vPDY6eUpbH/7wkDOLLdqBPjHCoQ1nI5a1YfABYRqOQ1:oiyT7TOobM1I5OBrOW","tlshash":"af331a436129b45e5f6752a2301b20a1a2a426e56409989ff27ccdf973dcc243b1ff7e","first_seen":"2025-10-29T00:38:00.060764Z","last_seen":"2026-01-09T07:14:56.165196Z","times_seen":5,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-4452a43a.26ec0db9.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-4452a43a.26ec0db9.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-2d3d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11581), with no line terminators","md5":"4b860e2e8835ed26fb399b5e4c6a4405","sha1":"3af33401534699db17ba713592031feb861658cc","sha256":"f9eeac391bfbcb31043fd095a6f78b529481e5a03a4370096bc6ce45e9b9304d","sha512":"2ad184acfc94a0255f0bff6011989ecaf8147969cf9f27a8ae67364126102e4df2f73dba03ffe95410e77c4c34f72634cb2a9858c88b52bf2e6004bca32b1dae","ssdeep":"192:833sODCMSXc6lJ6gEA95PR90ZAn/fs5d24u8cX+SVzo+4ceN6IrI3i:8nsAKXjlYMOa3EaXjq+4ceNd","tlshash":"ad32f94eb0a6e6f8849b00223106677474727bd5f00855d9b7fccce85949ea8272b37e","first_seen":"2025-10-29T00:38:00.042592Z","last_seen":"2026-01-09T07:14:56.197416Z","times_seen":5,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-5daf7376.83a79e1b.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-5daf7376.83a79e1b.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-e6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3686), with no line terminators","md5":"68bff5a659aa08e9963c336875dcc935","sha1":"d86154e2dc7b611a197eb8e7d87f476d316b2e7a","sha256":"7028eec84c99b632db0f0d5bbb4b37d7697f6a047b1fd00fc65363198244878f","sha512":"8ef33d3d8a249eea3085194eee90b60f09d822281238358d1b3acfc94bf66d3e7b3a5b8ec14b4d326e009a02cdf6439fe8b09b560457b984cb9f9792f0543e8c","ssdeep":"","tlshash":"a9713346412179fd9bb9115231a96020e1f109dc680dac92edbcdcf963e483c3b6e2fd","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.950404Z","times_seen":304,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/conf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:22.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /conf.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-3d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2130af600383d6005b084062511eb3c5","sha1":"6d223ec4a7a58885eb09a93e9d4eb4e50c997bc1","sha256":"223f8f2ed028e1b0c86fe1e20c9053d8984eb4eb9f56300907dda0f869604860","sha512":"0f5c235f0d879dcd0f4e6ff695eaeaded1396dd78e8ca4423b13525ea39f180f6913e4ff8322a6ec0823ec77e754d51d6daad25ad94fb3cb45ce84d89564c540","ssdeep":"","tlshash":"8da00214557c65341c70d54131cbb22e751055c6498e243db34293a33b1a317f5a16d6","first_seen":"2025-08-29T14:27:28.996829Z","last_seen":"2026-06-05T08:23:29.89373Z","times_seen":11,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/TikToklogo.png","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:23.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /TikToklogo.png HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T20:04:44.803327Z","times_seen":17906786,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-0660bbc1.76c2e63a.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-0660bbc1.76c2e63a.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-b60\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2912), with no line terminators","md5":"6ab47385095df2242c44f4bc5e537676","sha1":"cd18351a53d6cc1da603b83493fd5cbc1b9bd4eb","sha256":"19bee7784687ded0a20e58c3ef6dcce9b1dd8d225007b4c4dc93f99ce0679f7a","sha512":"77e4f3ea909341ad0755bd5518a236c4205ccaed7c0b4b70313cd428506f5e837cb5d5efebaf939168b30d9a0e00fe684feb3f1a2b1c9e2f6a612420444092e2","ssdeep":"","tlshash":"fe5124503d2c7c1b94bbf468f5c0dfa83ba0a927d353d22a9a57fc059c879c23129a49","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-05T08:23:29.875231Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-a7e8cec2.0daa9b11.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-a7e8cec2.0daa9b11.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-55e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1374), with no line terminators","md5":"7a0ea81bab09a5e259ac1884d3f72012","sha1":"d87441160241af9deea25169e8fb52a8537929e3","sha256":"b2217a779e1c0810181c9c1cc122bbd3ff1ce69d94164bf7b1e308cceb93e2c6","sha512":"a0d4c2bd68e73bc95ebe419ae4fa1a9210de9ff9e75bb7c3694bffa92fffb77dd7373bc7c3585ba1a9a67b9a3d0207afd87e34d630ba821177a70512c061bb98","ssdeep":"","tlshash":"e3215b00355e673edd37e67e64805abd6900e26bc453e227b9889405cecaa572813ed3","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.393299Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-00a17b20.61835193.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-00a17b20.61835193.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-2c18\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11288,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11258), with no line terminators","md5":"b66d23cecba4f23f85b4dae9bf536566","sha1":"b0985f4e30d44fe99cd9661807d841e4f2f82edd","sha256":"06bb0457f68a6613782ca46b8b1c2e53a895ea1682723772b776bb0747d37915","sha512":"01987480f57534960331e05fbdb9db530a4a4b3b98c665ae0b718d4432ee0ab356077dbbb90dfb9cc9da2458876e4d18bb4095480a5b4638cf4fff97778dbd51","ssdeep":"192:1VthRrXBrOu+sE/Vnwkan9duXEn7HEvPXwgs5qtwyO/3aQ5QQY3tO/sC4V/5RZ0h:1zXUxs8Vwx6EDEv/GD/h5Qf3tO/sC4Va","tlshash":"b132c5883a91bcc90a27b0f1b06b7456b0568e91541d1552eff488fa3dbbc2e571372b","first_seen":"2024-08-20T04:36:00.699486Z","last_seen":"2026-04-04T20:11:40.128858Z","times_seen":50,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-2d216994.e38f9831.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-2d216994.e38f9831.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 255\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\netag: \"6901be7e-ff\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"ce845b135cabce5e540997b31eac9aeb","sha1":"9492be50af2acb3f1e1a2db64f2b002e688464e3","sha256":"6bf9c1ac2bc9fee29c216847812094c2bbaba2fd3e5bc4fee0a2616d7d134eee","sha512":"1e1f1d1bbbe435c05f34c1e00afef26873d0c4fb852d58e692de753f1728e2599d91e31068dbdccfac8af4117811120e7ed3889cd9eaec74c1eca90f33456cc3","ssdeep":"","tlshash":"1fd02baab0527ca5c55b2081026ba363342e249f0e8c10a417f145d83235a1e9111999","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-05T08:23:29.91121Z","times_seen":317,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-606524e4.22a23bf6.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-606524e4.22a23bf6.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-14c7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5317), with no line terminators","md5":"316085564d39c8803748fb95fa00b3da","sha1":"ae4114d31301f7e8925380e067f790d5bee79940","sha256":"e0d1513adba2f545d356db5151e86de6a3a9d0ba55265141f81c5d2eeae182c6","sha512":"3efa28d34af937c5ce9a06320e33306926ac44c50b8cc64b49ceac8538e32faad354b972e994840a98b64f429e73e47be368fefd2f10355cff889d09ec9a84aa","ssdeep":"48:lD58lPgP/j0j+WWWgS70+u4jQAF2GB2N5YDWVET/KtLS1gRSpDzwZSkVxUiFN7YT:T6+WlsSBkLSoLVYIZ3mmJwQPit8F4t","tlshash":"0bb1d88ab043a06cc55bb422710e6a75f4a62fb4f401c8aef33ddce45984d14772ebb9","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.927227Z","times_seen":304,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/vendors~app.674252e2.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:22.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/vendors~app.674252e2.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3645f7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3556855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25916), with LF, NEL line terminators","md5":"e8bd1e9374ae4c272c46c64ee8f51ebe","sha1":"02b03ce7510c06257b338f93d0e4dd6a1dc60116","sha256":"9ec286199506a8ce23cd8eb9d5cbb5fd518de9af93031e238619f189638d12bd","sha512":"8ce664eabc18c14cb9497b870153ffa903608bbfc90a5f3f97f54e38fd9c7239a04dbb14386a9099b7388f320c93f86649fdf424e152f8f60ef40ecc5ee1cdca","ssdeep":"6144:In+1iA7Nub9OAXwf5KNHc6EIHhtXhMpHUY:4Yx4b9JXwfmHc6EatWp0Y","tlshash":"da254d5c2a4ef3409919d0e7e93b2c49826de189b40b44a16f3187b31bb1397f7edd26","first_seen":"2025-08-01T09:05:20.468344Z","last_seen":"2026-06-05T08:23:29.900886Z","times_seen":26,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-23cdec97.5c29cb56.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-23cdec97.5c29cb56.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-36fc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14076), with no line terminators","md5":"3aeac534bec35859cf0b5e8d4aa3bde1","sha1":"2e244d8868a8a5ca74a47d45c736dc454aa8bde7","sha256":"f75229c3278e8725a879839391f99c20c9b94d29eb6e10fbd3c3795ddd46acc6","sha512":"d6d779f604502416924dc9ed28854688b7f5a981a303e630ed5688818c3b2d156b345009558e0d7bb10676cf9b8777b07392a1a29fa9f1fe57950f486dc0554d","ssdeep":"384:iCQRDeBzT8lN9lc1J41+qFkV0vD5rw/CVFcjPipWW59U:iTe2lAJ4EFaDm0FcM8","tlshash":"09521bb3b0286535b6b7966db094e5ca7056dc13c52782bebb5ab22dc4c72e3163034e","first_seen":"2025-10-29T00:38:00.050233Z","last_seen":"2026-01-09T07:14:56.126173Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-46f30f6c.b2e5197a.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-46f30f6c.b2e5197a.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 447\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-1bf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"921bce4f483b1f08e93b4216d27b47de","sha1":"b4a29f334d7440c5b2f40841216224b72c6fcde9","sha256":"66b6628c502e0ea0445dc0ae31e229f358bd8a58aaf06e4eb525757fea64d439","sha512":"44e70871a7b43d640237f9f6f070c10a7bed3b3256e548f42488214ac6cd1421ae2209822abbb46e4940081e816f71e92ba2e6a658d1118cf5e3a9f8e7537240","ssdeep":"","tlshash":"f6f0ec012cbd95a15837c53df1c233b42e20369f0206c7a2ac44ac54c68ba613a14201","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.334237Z","times_seen":7244,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-501a28b2.7da50378.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-501a28b2.7da50378.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 971\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-3cb\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (971), with no line terminators","md5":"364b94b45eaf72b8e38bf5dc4b2348f9","sha1":"869691808bc786803fba4730ffaecb8c2c95a975","sha256":"2da93f714bc866a0e4f302d78c7e5d14d291c27551b29d27969cb57089a191d4","sha512":"a33a5504a3284c5c20c32c7385f61833fada6b1d13e575231c0153a9fdf87d61b7a62caf829e6a22187ec6c8699b87ed13dec945c814e12be7034015716509a0","ssdeep":"","tlshash":"ca119bf151081435b867f26475d055fe316ef343a233446daea4b3a6ce93a9b12212ce","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.434707Z","times_seen":7560,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-630c37b6.1c27967a.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-630c37b6.1c27967a.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-2de3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11747,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11717), with no line terminators","md5":"f08ed390f9a8c7770bdf5697ab1471d8","sha1":"e79043f003b7be24cc63a9d7af7663d842ee1e29","sha256":"793c893f5d79e60503387e995cb5fb8d0af58cf6504cba10c1a403cae5441547","sha512":"7e0a75c5b2fdc5cc71c9a61ab6ba8b6729f218f57fc9b87d6a09af36390f2c64f96125f59004b9c053c274b8bb77486f1c90e1e6c8477627cf51992d633c0cfe","ssdeep":"192:KVthRrXBrOu+sE/Vnwkk3i2gv419I715QtwyO/3a3O56QY3tO/sC4X/5Rn1waXE4:KzXUxs8VwPgvg9ITt/156f3tO/sC4X/h","tlshash":"8932f78c3591bcd90a23b0f1b0ab7496b0968e96540d0552ebf488fa3dbbc2f5713727","first_seen":"2024-08-20T04:36:00.719073Z","last_seen":"2026-04-04T20:11:40.104506Z","times_seen":48,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-69b1507a.d53c653b.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-69b1507a.d53c653b.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-7d94\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32139), with no line terminators","md5":"c5f7bcfb6c0a555fd20d351df8f2526a","sha1":"e4d2a1df754d44cf7db993d8df7ce1ca1dc6a53b","sha256":"997854778d41608d260111b58bf094aa802f9e018fef86a00211d59cb185e515","sha512":"9f96e44447c3380855080f70b060c6025eb0cdb40d6430ef524dc3ce56ddd2acad8526ec8156aa29ae08423e2cba22704c8158642ba28d6117a5d55b55e5c094","ssdeep":"384:r7kyrYykyZhQoAI0Gb8pIYSirBcrZIxTJ46RiuXVr/u511:r/8nYw5rBcyAJqK1","tlshash":"b6e22b17a125f41a5ebb6153316a1496a26429e858089c47f2fccdf533ecc382b1fb7d","first_seen":"2024-08-20T04:36:00.720607Z","last_seen":"2026-04-04T20:11:40.133518Z","times_seen":47,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-70683ad6.ef340a5b.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-70683ad6.ef340a5b.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-444f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17487,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17479), with no line terminators","md5":"991da6ddde5a8cb70dedf3f599a3ca55","sha1":"8f116e98f5280b06b75d6917124d15d3357eeaef","sha256":"43a69506fdc1b77aa08217ac86b278e78c06286dfeaf44bf6c37d1ec6f81a0ea","sha512":"69812b6ee2f97fd0aa4ded0df212714782e0c0904bafc962e8fec99363a5f3dd209725c4f67e6de7901901a9264e711af70298d3a7a470cb3782ed325c10934b","ssdeep":"192:Fl8rBclzhJgFEz9Y7zcqv0Q5zd0z4uzUhHYk8GZdPt3eQ+kOdrNC5l:FirBcthJg2CcqvPo4uLMFT+jE","tlshash":"23725c53b60df45d4e379591363e39a6a2832564b00865dbf77e8cfa13c8c24390ab7d","first_seen":"2024-08-20T04:36:00.722162Z","last_seen":"2026-04-04T20:11:40.039232Z","times_seen":47,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/vendors~app.38d4edbf.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maiifjq.top/","date":"2025-10-30T00:43:19.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/vendors~app.38d4edbf.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-3c96d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e2c553a0ebf6e3a82ae07ec78c9a275","sha1":"579d69c6381a05da2c87a55d88301788536820dc","sha256":"28d5dd7be3b9ecdecae26c5c84811a181f5eb03df646096eca8171b5ab6f9f5b","sha512":"b82a19b7b473a320b1a3f99db0badecef4ad997d367d1138bd2adfa6b97268f906a688be68b6455a0b48c1c724907e7489bc30c1a48ceeb180174abe973de7f1","ssdeep":"1536:O28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:TtKw/27eDLL6ob6v7f65WCXkb","tlshash":"ae34b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-04-14T17:36:31Z","last_seen":"2026-08-02T11:36:27.425139Z","times_seen":219,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/conf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maiifjq.top/","date":"2025-10-30T00:43:19.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /conf.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-3d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2130af600383d6005b084062511eb3c5","sha1":"6d223ec4a7a58885eb09a93e9d4eb4e50c997bc1","sha256":"223f8f2ed028e1b0c86fe1e20c9053d8984eb4eb9f56300907dda0f869604860","sha512":"0f5c235f0d879dcd0f4e6ff695eaeaded1396dd78e8ca4423b13525ea39f180f6913e4ff8322a6ec0823ec77e754d51d6daad25ad94fb3cb45ce84d89564c540","ssdeep":"","tlshash":"8da00214557c65341c70d54131cbb22e751055c6498e243db34293a33b1a317f5a16d6","first_seen":"2025-08-29T14:27:28.996829Z","last_seen":"2026-06-05T08:23:29.89373Z","times_seen":11,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-63c9da5b.f7ee60f5.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:23.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-63c9da5b.f7ee60f5.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-74b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1867), with no line terminators","md5":"d719d7494a1cdfa97ad12fcbee12a5a4","sha1":"e3d9ec9c89351271e36ee27c3ecd8209e338c8f9","sha256":"a4c9d21a3b2f2c689c890e5c2117c148482d7d1570688e67d19d93a6e8d58180","sha512":"5ff548dae06588205c010b8dfba2248a4ace6e4e5eae8ee25bc405a4efecd8f9e395631408aa3b475fc7c3d5d2003ab0d8c4e5592145300e2b547848e74bfa34","ssdeep":"","tlshash":"323164a2ba0e141dfa0fd566b2d3a6faf2158d82d163c396e4977128d7c60e26371308","first_seen":"2025-06-23T10:25:51.990031Z","last_seen":"2026-06-29T05:28:44.204249Z","times_seen":65,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-24f248d7.58da3ebc.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-24f248d7.58da3ebc.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-37d8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14296,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14296), with no line terminators","md5":"de5250888a802cf083bbaa0785f95c5e","sha1":"bba62868a357c604d8bb790c3a6e43ce827d336f","sha256":"c902f8d90975a0b35dcab5153df02102fbf9648df63f33dac3690e3fc7a2e0bf","sha512":"cc18a778db30c241992f159f81103b5b011594b5aae4c6dae12026366b194662eaba76bbc1cadbe339b1d5b8eb9aad69ec8237d361b133ea3018ec34f54335ae","ssdeep":"192:pgCjSgwrDOR/LfNFaTfNFjv/sODCMSXc67qgEI9pn5VsUPeyVzo+4cet6IrI3x:3jpLfNcTfNRXsAKXjK8LPDq+4ceti","tlshash":"f452f75e70beedf8859a61127016227871712bd0f1094cd8b7bccdf84589ea8a32f67d","first_seen":"2025-10-29T00:38:00.0532Z","last_seen":"2026-01-09T07:14:56.139759Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-406d875e.39d1b610.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-406d875e.39d1b610.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-4705\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18149), with no line terminators","md5":"e9116355d4d54fa9a09b135e6b6dff5b","sha1":"390fe8e39413e5febcfebf9710e1906765973bf6","sha256":"5271012a72092d1f8737f612202c1fa03539ee883145ade12494c37e2e6c39a5","sha512":"bd3af9f9186c579960ee28dee6a76594ac65391774f57ec30c320d5251d7dd0c289ca423767da25797c39cfbe7e30a5023f11fc7a0d745a7d87493ccec84d135","ssdeep":"192:rowDwYwBvpc/sXfGUlD0Xmj+Ytcy7E3Y7nHvPJh5lriZi+3I5qTRiA63Jgzz3Jn1:UU3wFqUemipGWg5JhoIYRiA63Jgz11","tlshash":"6f82a65ba651f45f0e6772a2309b2403b15862a4380c9956e27dc9f637bcc382b17b7e","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-05T08:23:29.963401Z","times_seen":312,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-84ed8e78.f5ac4d48.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-84ed8e78.f5ac4d48.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-2d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11614), with no line terminators","md5":"f9d9aba380235f1ad3d206609e2ed020","sha1":"6b26d5dd7e442bc64923cee7e1db44eb772cebd7","sha256":"b748f3cbcd19dedbc0f61c9a6200ab5de4964fc077601667ac47061a3d69cf6b","sha512":"8064e41cae59df9b74db0885e60e7bb359aba502f0b1e88c295e10a1ccd249980ebe21ff3d7b6de90d2af6e80ea76558074405bf814d5167d9dc64fe614d71ec","ssdeep":"192:8Bs+3gmPyB73Gm3tXj6zwSoA4WhyE7BaSLajHcsZ:y3o72cxWgWlVu","tlshash":"8532c74c7283f89d196391b0600fb907f1a96a5534099696f7b4caf539bcc0e6326f39","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.937148Z","times_seen":301,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-b0550030.f4b46c6a.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-b0550030.f4b46c6a.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-4254\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16976), with no line terminators","md5":"715907da703601f988d1cc6860441d53","sha1":"5b6070fc16642dfb46ad68f4eba4f3d97517d376","sha256":"71f46bff1db1858afce35ea5c4fcfa0a9e1e1005fb002cbc7509489e30229c69","sha512":"8b55f5c3237803d213148afc8ace30451c99a10156b3290d442d5f6260b02f1ecff5b59ec02f9e43757fc8fff3f4fe222f0d3f697b24155fabfa3a69efda0ed4","ssdeep":"384:XGcBieJ03vKgXOGBvsFbCQ0ReCw6IJGzg0E5EQBqUUhDBusDJB7WmjX:X7BXG3JXOw20ReCwPJGzg0wEQBqUUhDP","tlshash":"92721b47d098bc4d9b2b92a2344f30e1b111652d381659ebf6bd8dfb634cd203a2b779","first_seen":"2025-10-29T00:38:00.029653Z","last_seen":"2026-01-09T07:14:56.221644Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-3fe1efab.53c871e2.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-3fe1efab.53c871e2.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-527e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21118), with no line terminators","md5":"c7afacb4c138eac88ddff4bacfe2e0fb","sha1":"f4260520a40e6a915ce554f1aaec13e4d1da4d82","sha256":"69ae4906bc09a30c37a33a81f133bd2c752f4800830a4dca37cd92480c66ba9e","sha512":"9c75bff03e1be2d04c3d3c7e6a489dcfba85f83ad01c8028370bf5a0ead29e7f571890910d25c3c44244c0c33da5006bfe2718d7c420bc40948038bdbfa4b88f","ssdeep":"384:3ZTMfdfzNb6mapzeX/pIFYJ7SMEB3bCQRDeBzT8lN9lc1gefnpi4iYM5hfZGVRvO:6fJNbT2zeX/pKTe2lATPLr+P5/eVy","tlshash":"b7922c70b22d22387837f269168195c9b490f3a3d52687d6bfdc72168dc36e3b838656","first_seen":"2024-09-26T15:18:23Z","last_seen":"2026-01-09T07:14:56.139114Z","times_seen":76,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-56bffb70.f2bd8913.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-56bffb70.f2bd8913.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 731\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\netag: \"6901be7d-2db\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (731), with no line terminators","md5":"04fddaebcf220f89065a61a8972e9ff6","sha1":"a72aaad63f69552c1bfc2ce529d0934877a151a5","sha256":"fde628e3bf1d28a032a27b15fb82ee652f593c2de925664d244ef73294ca3002","sha512":"91283184ba4be03fc8613a4cb7476f38560ea9ce179e380e14c783b1dbd2a7b001596670057aca7a28aa80f63ff390a69ddada5e8730d7ec4ab353382952985b","ssdeep":"","tlshash":"b30128f3d1100422c1f7e617e1826898ff95ccb2e753c0afad92551d82caad70ba7b15","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.35256Z","times_seen":8466,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-57796eef.654b668e.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-57796eef.654b668e.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-25ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9675), with no line terminators","md5":"47fe76e74ef49fff1d0b86f9ed91efb7","sha1":"cfe6bee7d7bd0cbaefe53e3272047a9064fe1455","sha256":"5da8a67cb9e70ad3b25e9b50ca6e35a65cfc62f5ded23b709ef492ac2b6763b5","sha512":"880bb6fdea0673de4ee5e7e7f03b1dce0d66e06d7b68cef35491de93a6cb240df62aa2b03f287319e2cd33ac1c1bf07681efe9717128748562cd43c6edbc7bc2","ssdeep":"192:IE6pgpvwCLacMPchHJ6VHPqSZMMdT8PD5DCHy:IbpgpvBJsHyLhV","tlshash":"0212d889bb52f89e9b6721d4706fb417f1962620780d12e2e2788cf63a68c1d6353736","first_seen":"2024-04-14T17:36:33Z","last_seen":"2026-06-05T08:23:29.941606Z","times_seen":306,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-75cf3bb2.1aedb203.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-75cf3bb2.1aedb203.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-3459\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13401,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13393), with no line terminators","md5":"1ed89dcfa730ea86be58a97a41febc52","sha1":"82a35a23821b2777a6c0b05b1041cce9e6da151d","sha256":"9635f82b5ad81316aae1bb3f4a62837256fadb2363f49a9ed4f39ccb6096eb29","sha512":"6f7bae8ccbe560790708baf149bc52523801d0141404d971a79a57bc469c73e1e9db9e93074cdc17ef94a74c893125d1adb85493de6bd5367c77e66dcd09d9fb","ssdeep":"192:gZCje9tFJsHRpVuXmWKD1LtOgXdZSpFMOOrixq/jctjAfNeNF/BPsGC8:fe7FJsHRpCQJ9XdEpD+WvPb","tlshash":"a75294e6c470a4bd495a81726045e1e0bb693a6cd102514efb7cec9a72ed428333e77e","first_seen":"2025-10-29T00:38:00.08883Z","last_seen":"2026-01-09T07:14:56.204516Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-ab1540ba.274f7bcf.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:27.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-ab1540ba.274f7bcf.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-e9d7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59863), with no line terminators","md5":"8af35e03444813ae831619a48dd93ae3","sha1":"2f4ff24496250a0121d3a542c87caa0a1f55450a","sha256":"ecefa9c98aa35eb99f06b508602f60ad2470c820202bc4369d922b3d535fd811","sha512":"1a40a94d86e2efe63118b40cdaf26024ba47b3fcb9d56aeeb8d4177373932758d4993081214ba9aabf143e1747fb1b2b34a735a7578fd18d028e18bee392b660","ssdeep":"1536:fiLFJc8jJyPnJWwOOYvpRyrAe3+afqtls6rpDZPUSRQWaM:WdUPnJWSMw+rlJNDZPFyM","tlshash":"8243d126a0e394969f678091930b7c5c8c124befd1dbc586bb78b951cc58ef92a2707c","first_seen":"2024-08-19T16:05:36.245461Z","last_seen":"2026-01-09T07:14:56.25579Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-30T00:43:18.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-1c24\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5268)","md5":"b81b35f9230a92bca3efbd4e9db29bf9","sha1":"954f46b91ee44f1eb28939d7221e4b912ddf55ec","sha256":"8bf6d1b08424cf65e1f2e88325067bf43707766c367a9d74bbaa53ee536beaca","sha512":"f1f13ef34ed6e882fff8635a93c8fc04a5655cfaeb9085e5c5566b34ac256ebde8742500169832c4114ec2eedd6a1982f0b8ae28ce76b3560e729def0cc66c67","ssdeep":"96:PSJ4ckG7+f82tAHhvDYEp2NVNt6G3pGr/vxZrtaRjDLbZ+G3R7o3:a4cufJt2vDYbNVNt6G3pIZrtaRnZlo3","tlshash":"bee1fbb9da00608fe9f1ce839d2de71beacb8c771430e400e218985ecd68fd4456b947","first_seen":"2025-10-29T00:38:00.079863Z","last_seen":"2026-01-09T07:14:56.205497Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1665,"timings":{"blocked":711,"dns":225,"connect":238,"send":0,"wait":238,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-3ec0b7f8.618434dd.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:24.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-3ec0b7f8.618434dd.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-edf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3807), with no line terminators","md5":"51afaa559e63a1f2a4c8cabc8f8efeb2","sha1":"e7b99b5ba602192b60b62844a9eac85d7f30238c","sha256":"05d19a889d63b65c3639a669fca5bf46c220645d9009f998793edf732d9b3715","sha512":"9178ca63f7995b06a69918bad86348fbd00de608a6ed2d62912ce97979a36c8f94099a7d7f08cc1b564fc78c9479336c1dbeb75ddabeecfda099b254e8e8fd7c","ssdeep":"","tlshash":"157131607a22631f6a72f7eb55c061ec370d522ae19380dfe849980ec7df3b65130b61","first_seen":"2024-12-11T14:26:07.925799Z","last_seen":"2026-06-05T08:23:29.925218Z","times_seen":314,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-69b1507a.badabe5f.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-69b1507a.badabe5f.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-190c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6412), with no line terminators","md5":"0633ee4661855b6bbe621c11916c84cc","sha1":"4c0a2a81e69522697b1cbaa7338158639c4aa12c","sha256":"fac6b26cf761221c13291fbb469530d8d6caecfc22f09faa1a9e562bf15ad127","sha512":"b2441da78e3cf4a5c847805eac6921d852bd2f17db15b012485357a438eb0d41d84c853e8ca0784803fefd8a7315d0426b19bc78f310cb23ca2a9818fa232830","ssdeep":"96:+jWBPlmQKmYqqxrnY1vfqQrFvniDypkpNhD93JlyIqdUPY8:+jGPlmQKd1b8vfqQZiepkpNhh+IqdUg8","tlshash":"90d161b2b5b5426a7d3fe3b822d4e4ac75049551e8629be6fed4d028cbc2ff35410b08","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.50503Z","times_seen":5236,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-70683ad6.27a370f9.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-70683ad6.27a370f9.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-1257\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4695), with no line terminators","md5":"2abfc31d2a6752d6d66f5fa21c7fa262","sha1":"63116607f3b72d74be9d1bdd5050ac15859f7243","sha256":"9159959031e6a701bd2e9e5baaa03c4f14d6c2530977a9e013c8af24c4838a37","sha512":"ec6bd33bd4a69b9e93485dfa272e08170ac3c17b0aec5f291b716c1e370435f6bf26fd7b2139aa75790defcf2223f4deeec07818a549334ba069f8a307201127","ssdeep":"96:VQrF215xix1yXSl6nS65EaOYIj8MRSLRsR7S6m0Z8u/j/20RO5sR5WFs5E:VQKM8F9","tlshash":"77a1b050b15e162b687bfad9187cdd4cb0d6fe2ac1324b76ed9f24148882e733622235","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.500613Z","times_seen":5224,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-84ed8e78.8fe95911.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-84ed8e78.8fe95911.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-45e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1118), with no line terminators","md5":"51469bb71eb3ad53d091813383d59f9f","sha1":"2dc9da09668fefdab35ccfe6c6a3ec5485ceea3d","sha256":"d9daa1e1faf153cb40d02fe3294adfbf28aeb622797e00cf94c101ccfcf0e073","sha512":"aba105e77a63de395ba92e7d7557d7b7ae209f72dfd735132a2b4d234f8ac75e09d4acbeee7b2cd6e25307285d4d3a4988e9b8b8758761b595c96d20994bfffa","ssdeep":"","tlshash":"d221cef1906510385aabe6b430f0a9b9705df145ea63199c5d6533ad49d378f02e02ce","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.435641Z","times_seen":5604,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/chunk-eea86ba4.f9bcf067.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:25.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/chunk-eea86ba4.f9bcf067.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-570\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1392), with no line terminators","md5":"41c67fa3f160511f0b6420ea29fcbdb4","sha1":"9b8d98551a5dcec008c09d87826c916b09e224ae","sha256":"a03ab3c0316b4322a65858548a8de7ea17321faa4c6b6d1ffc0b92e4a04c7acd","sha512":"282d17a7d4aaa4867dfefe616039a44980bbc65d674f2f5b7284c697f659ae7ed7f39aaa0ad8645096ffd6bf970827fd385bd902e561872cffc19deadd5f7d31","ssdeep":"","tlshash":"9621f7f66536926920bb702778a040e1b8acfffb54b2e2856e8f644dc476f412f33044","first_seen":"2024-02-11T18:17:20Z","last_seen":"2026-06-05T08:23:29.966788Z","times_seen":5361,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/js/chunk-3ec0b7f8.aa264256.js","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://maiifjq.top/#/","date":"2025-10-30T00:43:26.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /js/chunk-3ec0b7f8.aa264256.js HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7e-556b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21867,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21811), with no line terminators","md5":"9ce0cbee166db0055395244ec3740f19","sha1":"99ceebce5817518dd34bcfb25b4acc4a7f037880","sha256":"ae6e4daa05b673d12f32d3791d5e1903800f54c1e63d1d4d0d2149b21ec5a6ab","sha512":"143997019d9ec8f3191c6a0a2344c972a064f5f8fa079c6060e12a390c4f529fbd900f76f480ebe7903cf35b96d17c1f120a7c585ce6e60d9850a577a91b7755","ssdeep":"192:zthRrXBrgihUxZB73GKd8QBNgtTkBsdQ4y1wTYDLihWL9keuuyWwQmcuG/qihitu:hXB8D72/AlUCkH9yPAV69rBGOONZmx","tlshash":"22a2b40ea146fc9b0fa272e5701f301160568454680a9e56fb78cdf9b6ffc29662373b","first_seen":"2025-10-29T00:38:00.071351Z","last_seen":"2026-01-09T07:14:56.241717Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"maiifjq.top/css/app.fa3a7fa4.css","fqdn":"maiifjq.top","domain":"maiifjq.top","tld":"top"},"ip":{"addr":"23.146.156.47","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maiifjq.top/","date":"2025-10-30T00:43:19.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mczrdvxknq.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 09:47:32 GMT","end":"Tue, 27 Jan 2026 09:47:31 GMT"},"fingerprint":{"sha1":"10:6E:E0:39:A4:F3:54:C7:DC:24:AA:34:33:55:C3:0A:54:35:D9:A8","sha256":"7F:86:51:CF:9E:40:3E:D1:BA:E4:BC:1E:74:5D:78:64:A4:0E:D5:B2:64:F4:16:86:13:BF:9E:91:54:F3:BB:26"}}},"request":{"raw":"GET /css/app.fa3a7fa4.css HTTP/1.1\r\nHost: maiifjq.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:43:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:13:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901be7d-39b0f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"05c96d534383f6b73cc94a5462041458","sha1":"81e1590baf3d6ed80f3823271bbab28455709a34","sha256":"72e8c8c68626d62df7869243e1550ede1a285e8fe568d82d75a8656d641fee03","sha512":"f2cad6a778c662b57943d7ee8202841a300ecdf0d82ec94e4943e8bf53fc01ee333330f53039317192aaa3509c2cef982a5004ffc0c9c7d73df1784af8a2afa4","ssdeep":"1536:FgqId3828Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOd:KFFJWTPL4Q+05q2pe","tlshash":"4e34b510db1b217b222be66d75c0ba896f18c323d8725b7bfd95741ccae64891163e0f","first_seen":"2025-10-29T00:38:00.022285Z","last_seen":"2026-01-09T07:14:56.186109Z","times_seen":5,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"maiifjq.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"maiifjq.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}