{"report_id":"bd9f9ebc-016d-4348-8dbb-365f36c13287","version":0,"status":"done","tags":[],"date":"2026-08-23T12:39:30Z","url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"title":"Верификация","dom":{"size":11978,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11002), with no line terminators","md5":"5e23042495fc36e0def0ae1c514944d5","sha1":"81fa45ef45317ee0489685e2d47068a97e683043","sha256":"97baaaa5cb8338791595565cd605215f71cddfedad5021e68716194aa25dd8c4","sha512":"f7b4608634890c0618cae35d1cac87fe9a3b685ab318c38561888ff6ecd11aa52b0073beceb7b9a431b8840abfc38a15d2d298428557b974f33a5137f24e6382","ssdeep":"192:HORcWd+klL4whOp3JH8sEARAAZupGnhP5MmgnqzcpmumXTOUH8x3ex:H8zlOTri2upyhPGTeXqUH8tex","tlshash":"6d32e821d80add5ad517b88a907fbe2e24ce817f47e48a6495eccf9903d18bce257c80","dom_hash":"domhash2adda3a981092193140804ed30fc2dbf","first_seen":"2026-08-23T12:39:33.65301Z","last_seen":"2026-08-23T12:39:33.65301Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":0,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T12:39:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"maxmsf.net","ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-08-19","domain_rank":0,"first_seen":"2026-08-23T12:39:31.475258Z","last_seen":"2026-08-23T12:39:31.475258Z","alert_count":15,"request_count":15,"received_data":866198,"sent_data":6957,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":7003,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-08-21T04:39:48.057872Z","alert_count":0,"request_count":1,"received_data":46219,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"c951ec195ce0307e4f5957164ea49a66","sha1":"bb9c7ae73637e2b1dd8cd77a607c362c07b07af3","sha256":"f0e4a6838d771a3e76f1e1808bb56ed771ff05293092ac5c03698ee2f393212a","sha512":"f799a89896910681c60a27f6e4b3fc782a4a185352fadbcb8284a3e441755d160ccb03423df3865fd7c99d1c6767a59465cefa523caa03ad5dba8c5f2eb9bc10","ssdeep":"96:haL9Lbs2T6RvrwMBHdBWhklL4dHwJm8O4mIq3mpYBZ7b+t:LRcWd+klL4whOp3JHQ","tlshash":"aa914212c15b2db5e347a047e4cfbb0a3aef42bd69e5435068b0ddda33e10bde026169","size":4371,"data":"","first_seen":"2026-08-23T12:39:33.668024Z","last_seen":"2026-08-23T12:39:33.668024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"deb8de783ab68dcaae93514256d79764","sha1":"48d681af8ed009aa0401c22a31fc49fc94333120","sha256":"91e01db15a703c3055feed1aa77fb1aeab28ba9d9257fcb2e754349aebd1a9ca","sha512":"999c19d88b43b3774c329b5f11a1fe63a679a57d741f0c5c1165e81c0acbffa9a4c162f4d1d311cf2c4ca2fce3874c428b32ce5b443323d5ca4207778723d13a","ssdeep":"","tlshash":"60a002f5a3d37d39a13305a9287218631ba4f11d360c52c25f21c856a752995a790dce","size":67,"data":"","first_seen":"2026-04-19T06:31:24.463232Z","last_seen":"2026-08-24T10:23:40.540232Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-24T10:40:31.089896Z","times_seen":237129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"9258614d3ba9218aa82c2c87ceec22d9","sha1":"bf4b187148400dc3dc46828aa7c8852724ef7764","sha256":"dc48c8d1def2a01b11d8ffd4afc787ac1657c2a2546784450dd9003d864dd103","sha512":"c582421a3a0ff077d8ffcde920255c651f394e7ea1027ca72ed9aff33f8a331c3b935030edf143d7149aaaeffe6ad62f186696ed9becd40a5f0148106a22aaf6","ssdeep":"","tlshash":"b2017b6cf248e9c24835cb1746671d2898dcf97d0260d29eb65dcf1e4226dbc93b9801","size":689,"data":"","first_seen":"2026-08-21T17:59:24.890608Z","last_seen":"2026-08-23T16:28:30.467893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"907a7bd1e0ba07e442b4fbc4a1a8bac8","sha1":"5db215665c1ac9740d71f9c908390a94e43e4e08","sha256":"ffe2c598a77c3cd79fcc88d956b699b3fa8798be5f8c4f47bb2c3e3f1d3f0517","sha512":"8a8803b69c85b25e55876a17d6438e22bfe95b79ef53ff1cc73740923a20c288ff89d83655d1aa0b4eac801fd7fc75a2f7000453ed4abe519632f9ecd71492cd","ssdeep":"","tlshash":"fa61ba3d6009de4bec6e7d69027e9d3b20cd897b43a5deb88688cf140a864792796dc0","size":3211,"data":"","first_seen":"2026-08-21T17:59:24.893212Z","last_seen":"2026-08-23T16:28:30.468816Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"91f879e0c7da0e6e53f5b1cad66d3c5b","sha1":"9dd54a0f4af786b87e214eb621e776f52bc2afc8","sha256":"17772583103950658dd1457b849b75e6c345101ab2aa32413ee921f37cfb74b9","sha512":"d61cc63a3cbe25b110fac9ef055d00878072ba4caa615d36231cb9f2a709aa03601b42e03d82443d8b98b2e57710a1db8e87038c32b443b04fa4768dcdbbb0fa","ssdeep":"","tlshash":"74b01278e011fe9114b620726139f0ca326f544d19642470211361c8120431d2703fc0","size":91,"data":"","first_seen":"2025-07-26T21:55:22.063936Z","last_seen":"2026-08-24T10:23:40.546371Z","times_seen":747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0b18e504289a2f7778f0677e608bb2f","sha1":"21166f4c519a9774aa218c5695f510d707470b7a","sha256":"61516c2f6e3601b59bb3a5a2729b199ada0465960272fe07f2c59866a36e843f","sha512":"76a9f05a4d93a93cfdb0894f33353c553dbd232f4085cf2b4f91901ece6fb64947e4e1a35a680f7f0262eb4bf513f3699f1b0c929bb1b0a990aa83f2ab493d04","ssdeep":"","tlshash":"34e0cd91dc12dc1dc7564f152c3e1d2521cdd5750645524bbc84cd389d95d3409b0dc6","size":294,"data":"","first_seen":"2026-07-14T04:55:42.479586Z","last_seen":"2026-08-24T10:23:40.547317Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a6261c6b355bd5bd0e6eaf4838cc9ef","sha1":"5db32b96157a501ff02b80b566b1ad6346ac4b2d","sha256":"42d41cb1b2f3ed9c859a837cda0d48e6ebfe6d51bf1194a99a9c74aabe58d2e2","sha512":"d9775e0a58c04e67ff1cb26c27f6d93bc782959145cd9f7a943a11c4d55dbaa2f0b060a8f7df4e7cc669cba6d0775333341645a5811354bc05b13f4ea0ee28af","ssdeep":"","tlshash":"b6c02b105400cd03843924b3047c8c2410dc803ec0e0096043c1cf391a0007be973d91","size":134,"data":"","first_seen":"2026-07-14T04:55:42.481006Z","last_seen":"2026-08-24T10:23:40.548159Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"50d79ec1aaad6451be319ee0a696dd33","sha1":"4c191932bce63f31ced964e8d12c43032319eb2f","sha256":"a18ffae3960d9e2233da3d3662a0efe78954111d876c75896980973a34b548e9","sha512":"8ece952c854f234307b3b86c0026adca369e0c729085c91538845d3c06e03b512b772e3b073880656e996347b554eaf5dda532f30517acf93f2fdd585fc88cb1","ssdeep":"","tlshash":"c3900470d0400d574533001314fc7103155cd04c0c011d501f51fc5f5c531d57707dc5","size":46,"data":"","first_seen":"2025-07-25T21:09:25.855802Z","last_seen":"2026-08-24T10:23:40.54897Z","times_seen":3695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/app/layout-93c05598e3a473b0.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc5ef9fc7f68e7b5f06d35fec5cdaf47","sha1":"25135b1fe4ccdea7bfb4deb5b2982db3958b29c4","sha256":"01a3827cc17f00e7931ba0c7174f6fe026f913d3a10227315cc1686d68ec2837","sha512":"054dd9fa5aed95518fa864dd94c4b37203d87333223b66aea68e0db1676758f60a43763ccc08e8c419eb9d3436fa48694f62755f9195be9a5349f1ae05715ebd","ssdeep":"96:b31rvrAbbDLY99n5GUKqN7xFhgDBT7DBTDA9GCfsY89GCHl0B6:b3Fj8DLY9GkxFhgD1Dru39s0B6","tlshash":"9bb1e9f736c5fc3151aa485058378757ba142e37341fa0d0abaacce93268ec9c5e1f5a","size":5335,"data":"","first_seen":"2026-07-01T09:56:23.394831Z","last_seen":"2026-08-23T16:28:30.456083Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/main-app-2ecc3bf42ae2d122.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"06830166c68f5d1b431e4bac38626050","sha1":"e5f53dc4d5d6a682f6ee7ce745a6cca8bb2d9fab","sha256":"4504fb582d925ee424121644f0dc6172463ab556ff421121b49eaa40f67f92ec","sha512":"f2ffbf19d186117b6f14f200459601ba081f7a0e76facf1d04758535ede657dab2ee17427aeeabd57d51a95dbcf3ff98b66ed7ca5f1cec6154f032cb2c23194a","ssdeep":"","tlshash":"59f0f45a8f0cf42f5c26ad64fe97ace6285f4175302b4e647910eea23c23b6cd270409","size":557,"data":"","first_seen":"2025-09-15T10:43:19.87387Z","last_seen":"2026-08-23T16:28:30.464023Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173019,"data":"","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-08-24T08:49:25.054005Z","times_seen":4804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/app/page-62500da928d1a935.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a364ecd34ab62fddea97c15486fc3aab","sha1":"1f4907dce60397b0d4f48094895e6ab21284bf72","sha256":"8d632ba0f5fd661b1867ffa187d488fdc706c884caf0f23819270f333667b11c","sha512":"dfd3f6f89ef9ca591953dc7b5b15e526ff40015986c77e064a806261ddbd9585c274c063f5719caad49778f7eb3fe73f1d7f53ea9400c61d2de5b3207929b737","ssdeep":"3072:ul6KUbGa6gQuyqvSPlrUZ5VcUvTAj4JUlCguICckwehe:tJbMgQuyqvOrUZ5vAjSUlCguJwehe","tlshash":"3104e540e155beacf52a449c866fa01c717e2bacde0e4874fabc2c3636544d4b617bce","size":186731,"data":"","first_seen":"2026-08-21T17:59:24.858938Z","last_seen":"2026-08-23T16:28:30.448609Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/telegram-web-app.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d81da7304889cf10b6cfbaa26f39f38","sha1":"8998e98c1d306c7ed132f7eeaec45bf178588dcb","sha256":"a4922a0d95877fe0699dbaf827ac8d50df3137acb0cc372aa8c5402e934a5df9","sha512":"c58ff07da3e52c590bcbf07493a13ef3bb4b4a5aabc81cd7a36b68b4251bd21ce1c50368c5a4b920e8092a3fc0e217e5cd3d30c5aa89c8c5794bf4ca30a570e0","ssdeep":"1536:papTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:YpTpRdfcKFU7Rx1v","tlshash":"4ab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-07-14T04:55:42.451858Z","last_seen":"2026-08-24T10:23:40.507485Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/928-c3e13f7ad5c9c845.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"de0eb52e4b551005bb43ad825f9d547f","sha1":"80d7092abd5d745b6ea007301a54efa820973611","sha256":"43fe283b5c937f3e9fe194892ab479a1f346be043f3c0505d5bb766e457d0d0c","sha512":"418d42c9700bf54de67b9c49ed10875e65ff52ff6b239f93cf89d6a770c9128a1a14710b540c2fcd60f014bf58f9dc4de73d57d40024ba8764ae6b9ac96fb553","ssdeep":"384:D42HvDkSF0MFsLzyHT6WOamcz2f3Ga/RcVVKrXHOWTdy4WQBZuk1U4:8FMuyHRODBua5cPKrXuWFBp","tlshash":"6582f9723789fcee575bc184c82f0009e3b95d71322aa454739e9ced96d1584e0a3f76","size":18462,"data":"","first_seen":"2026-08-04T10:36:41.191248Z","last_seen":"2026-08-24T10:23:40.525421Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/255-eb4aecc3ff015961.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae9c0ec95cdd00ec0d1fa269321a174","sha1":"90bd42546ce8f32dcd4074e559231654473d0156","sha256":"bfd934c48ee7007bb34cb98078ea6ba5dcef5d8a8f4ffc2103dc174409680c7b","sha512":"4b09cbebc1245ee789381b0f8b40b81b201c5fde65d5aac05c775e7850688069dfb6e54543b00ffb14377faff800392fb09fa43b3dff549145246396226f1c02","ssdeep":"1536:rh7TN+Izz+cHr6U3lHm0dS/7ZcyBPo7ecq0MEsiTtSocZXxreXRNwrky/SQhuzQP:9TN+UrFA0YLwF5W4RNsz/SQuLi","tlshash":"8e04dab676d0f8e107a780e5843b400af3295c37146f74a0a3e6dcd975605dea1b3faa","size":173611,"data":"","first_seen":"2026-06-06T02:29:26.375182Z","last_seen":"2026-08-24T10:23:40.514584Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/webpack-6856105d5f9cf26b.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b302735c850cda6d3e620fbbc44047ef","sha1":"6655b4f3ba553e0bc1cc66f15e66e737958477d5","sha256":"cca9b0505cf074625254b5d5c5fc2aff4898e99ee022053b00e59772ff8fa983","sha512":"ab891896de54ca35aeda48fb74b92a527c8d187184b7f26b0017f8cc8d5f2ff85fd71c821bea04a0a7cf126904c79a9bdd798003655ca1c053e6d36c6f370152","ssdeep":"","tlshash":"d861b4a93625fab556f108c5887fc142f619603b052afce0e717dcb9b468ae10562ff3","size":3424,"data":"","first_seen":"2026-08-21T17:59:24.870412Z","last_seen":"2026-08-24T10:23:40.513438Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://maxmsf.net/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/app/layout-93c05598e3a473b0.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.305Z","timestamp":1787488742305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-93c05598e3a473b0.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 5335\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"14d7-1a021d477f6\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5335,"size_decoded":5653,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5335), with no line terminators","md5":"bc5ef9fc7f68e7b5f06d35fec5cdaf47","sha1":"25135b1fe4ccdea7bfb4deb5b2982db3958b29c4","sha256":"01a3827cc17f00e7931ba0c7174f6fe026f913d3a10227315cc1686d68ec2837","sha512":"054dd9fa5aed95518fa864dd94c4b37203d87333223b66aea68e0db1676758f60a43763ccc08e8c419eb9d3436fa48694f62755f9195be9a5349f1ae05715ebd","ssdeep":"96:b31rvrAbbDLY99n5GUKqN7xFhgDBT7DBTDA9GCfsY89GCHl0B6:b3Fj8DLY9GkxFhgD1Dru39s0B6","tlshash":"9bb1e9f736c5fc3151aa485058378757ba142e37341fa0d0abaacce93268ec9c5e1f5a","first_seen":"2026-07-01T09:56:23.394831Z","last_seen":"2026-08-23T16:28:30.456083Z","times_seen":47,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/get?route=ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.858Z","timestamp":1787488742858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /w/get?route=ZCyPTkCIS HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 4388\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nETag: W/\"1124-mE6Rsf+oxFf+aTea36jXKv1wDZA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4388,"size_decoded":4673,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0c9be13af0cc11cae56b1f5ea0ba0e8","sha1":"984e91b1ffa8c457fe69379adfa8d72afd700d90","sha256":"42e1b1a977dd4f5980e28d669b8223605612c60fb7fa47ca611d0d5c106fdd1e","sha512":"ff3e2e58ec640a096693b6c3d7055ff942db16ec525cd06cee1d28b6d8c8cb74ef7a106e3660da8bcc3fe81d3aae14b8eab6032e941bbfb35f154ecf7df3eaa2","ssdeep":"96:ORaL9Lbs2T6RvrwMBHdBWhklL4dHwJm8O4mIq3mpYBZ7b+9S:IRcWd+klL4whOp3JH6S","tlshash":"9c916412815f5db5e243a047e4cfbb0a3aef42bd69e5435058b0ddda33e10ede026169","first_seen":"2026-08-23T12:39:33.655474Z","last_seen":"2026-08-23T12:39:33.655474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/css/7b56e9c2c79fe8c2.css","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.294Z","timestamp":1787488742294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/css/7b56e9c2c79fe8c2.css HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 78553\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"132d9-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78553,"size_decoded":78866,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"273876377f42e1f43206ba1010f43ba3","sha1":"cefa755dad0e4b421f7a54b47acc3dce7c2d6d93","sha256":"c534078448066a76525f8ab513c41625c5423d3eb62b36c7f7274cc11f8501cd","sha512":"715b2f4c1bb5e5a6b69925d67e53c7ccf6d339dd93f83f0faf420d8c100d77db1a19355146115ecd9975d081f9dd8369dbf36eb4b651ecea1523fce88db8f3dc","ssdeep":"1536:aB5qVKLps1j8ZihxCkf+PbkoksjUVz7nurm:IPiAZOj","tlshash":"a273d854a290313ef427d4b2a5e09a9e725de113d6334fd8ddb2b23a8bc72e71672704","first_seen":"2026-08-21T17:59:24.867144Z","last_seen":"2026-08-24T10:23:40.503609Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":86,"receive":23,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.299Z","timestamp":1787488742299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-c023c6e3521b1417.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 173019\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"2a3db-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173019,"size_decoded":173340,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-08-24T08:49:25.054005Z","times_seen":4804,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":66,"receive":57,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/255-eb4aecc3ff015961.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.302Z","timestamp":1787488742302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/255-eb4aecc3ff015961.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 173611\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"2a62b-1a021d477f6\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173611,"size_decoded":173932,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ae9c0ec95cdd00ec0d1fa269321a174","sha1":"90bd42546ce8f32dcd4074e559231654473d0156","sha256":"bfd934c48ee7007bb34cb98078ea6ba5dcef5d8a8f4ffc2103dc174409680c7b","sha512":"4b09cbebc1245ee789381b0f8b40b81b201c5fde65d5aac05c775e7850688069dfb6e54543b00ffb14377faff800392fb09fa43b3dff549145246396226f1c02","ssdeep":"1536:rh7TN+Izz+cHr6U3lHm0dS/7ZcyBPo7ecq0MEsiTtSocZXxreXRNwrky/SQhuzQP:9TN+UrFA0YLwF5W4RNsz/SQuLi","tlshash":"8e04dab676d0f8e107a780e5843b400af3295c37146f74a0a3e6dcd975605dea1b3faa","first_seen":"2026-06-06T02:29:26.375182Z","last_seen":"2026-08-24T10:23:40.514584Z","times_seen":114,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":36,"receive":9,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/928-c3e13f7ad5c9c845.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.306Z","timestamp":1787488742306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/928-c3e13f7ad5c9c845.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 18462\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"481e-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18462,"size_decoded":18781,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18462), with no line terminators","md5":"de0eb52e4b551005bb43ad825f9d547f","sha1":"80d7092abd5d745b6ea007301a54efa820973611","sha256":"43fe283b5c937f3e9fe194892ab479a1f346be043f3c0505d5bb766e457d0d0c","sha512":"418d42c9700bf54de67b9c49ed10875e65ff52ff6b239f93cf89d6a770c9128a1a14710b540c2fcd60f014bf58f9dc4de73d57d40024ba8764ae6b9ac96fb553","ssdeep":"384:D42HvDkSF0MFsLzyHT6WOamcz2f3Ga/RcVVKrXHOWTdy4WQBZuk1U4:8FMuyHRODBua5cPKrXuWFBp","tlshash":"6582f9723789fcee575bc184c82f0009e3b95d71322aa454739e9ced96d1584e0a3f76","first_seen":"2026-08-04T10:36:41.191248Z","last_seen":"2026-08-24T10:23:40.525421Z","times_seen":19,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/favicon.ico","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.766Z","timestamp":1787488742766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":128,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T10:40:43.189576Z","times_seen":18074003,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/css/c1f8e00efdf0aaa4.css","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.286Z","timestamp":1787488742286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/css/c1f8e00efdf0aaa4.css HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 29424\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"72f0-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29424,"size_decoded":29736,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29424), with no line terminators","md5":"32cca43deba5498f56051809db1adbcb","sha1":"943f5bedef268ef185b82f6340069d365df655b4","sha256":"a5dcf9aa666ef7297dce2a82819966d0ca82e7599b3e4f8d5bdb54502a19105e","sha512":"5c7916b82a90dcbe818849c5c48721e9e82fd7c8981b722f8d8481280d736dac3c26e09af8e1a41e282bc969c82dc8829e4899a08185f6676ae90c05982188f6","ssdeep":"768:xuqIf8GahRRZ6HjjW+WyoKgJWaKe4Wj2KA2:xuq28GahRRZ6Hu9JWaKe41KD","tlshash":"28d296a0b32eddbfec2354b2f7acb80c611975858e21a7e8fe42251256c67f15d06738","first_seen":"2026-08-21T17:59:24.863297Z","last_seen":"2026-08-24T10:23:40.53295Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/css/2083910021e6dbe5.css","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.296Z","timestamp":1787488742296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/css/2083910021e6dbe5.css HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 56866\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"de22-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56866,"size_decoded":57178,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (56866), with no line terminators","md5":"9d5bf76f7eba57ea64c49faced4e6c7a","sha1":"a36641fa54df0a93808423eaac967218dee4c649","sha256":"be7a0c53e70364a115d6d31667bc334af255a5b3c4367e44ebdb9a81db93e071","sha512":"cd5720c9a57b118db7b2df599cfd0ca854440924752e702b2eb76cb2fef9a5d48a71e8e4658fc75fccbb4133440cffe6f0126d5c1f5eef029071a3dbab3164fa","ssdeep":"768:KDTVpPi+39AeCseWrTL3A6Rd8QppINr1pEtkX6Z/Cke3dmZA:KDB9rcCd0r1pE2Pj9","tlshash":"9f43a870a141213df82bc6a175b05bcf7229c013d76346adfaa662b9cfd62eb1730749","first_seen":"2026-08-21T17:59:24.851914Z","last_seen":"2026-08-24T10:23:40.533955Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":57,"receive":16,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/main-app-2ecc3bf42ae2d122.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.303Z","timestamp":1787488742303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2ecc3bf42ae2d122.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 557\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"22d-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557,"size_decoded":873,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (557), with no line terminators","md5":"06830166c68f5d1b431e4bac38626050","sha1":"e5f53dc4d5d6a682f6ee7ce745a6cca8bb2d9fab","sha256":"4504fb582d925ee424121644f0dc6172463ab556ff421121b49eaa40f67f92ec","sha512":"f2ffbf19d186117b6f14f200459601ba081f7a0e76facf1d04758535ede657dab2ee17427aeeabd57d51a95dbcf3ff98b66ed7ca5f1cec6154f032cb2c23194a","ssdeep":"","tlshash":"59f0f45a8f0cf42f5c26ad64fe97ace6285f4175302b4e647910eea23c23b6cd270409","first_seen":"2025-09-15T10:43:19.87387Z","last_seen":"2026-08-23T16:28:30.464023Z","times_seen":406,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T12:39:01.984Z","timestamp":1787488741984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /w/ZCyPTkCIS HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 10700\r\nConnection: keep-alive\r\nETag: W/\"29cc-L9mfxoMOqkmjeRWoJSW8xnBVvMU\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10700,"size_decoded":10909,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9802), with no line terminators","md5":"495156ffd4d8d9ee0d5f8a01bca1bd4a","sha1":"2fd99fc6830eaa49a37915a82525bcc67055bcc5","sha256":"066a10e50cceeb5adc1c0c4cbbe1d2efeee632c6ef7d1e8deb4a5d23efe62bbd","sha512":"63b15dcc2393aeefbb27fd1714424def6ba99723e7cffdc0883c56547c9544784aa8dd76d8c53d73a590c8dca9ba1b231a729582e72f10677ddb7a21fb72873f","ssdeep":"192:8RcWd+klL4whOp3JHPEBRBAUO+mnvPa5MmgnqzcpmumX6:+zlOv8ThO+SvyGTeX6","tlshash":"cf22e725d80ace5bd517b84a80bfbe3e24ce817f46e4c7a495e8cf9913914bdd356c80","first_seen":"2026-08-23T12:39:33.661544Z","last_seen":"2026-08-23T12:39:33.661544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":8,"connect":19,"send":0,"wait":50,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/webpack-6856105d5f9cf26b.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.297Z","timestamp":1787488742297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/webpack-6856105d5f9cf26b.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 3424\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"d60-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3424,"size_decoded":3741,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3424), with no line terminators","md5":"b302735c850cda6d3e620fbbc44047ef","sha1":"6655b4f3ba553e0bc1cc66f15e66e737958477d5","sha256":"cca9b0505cf074625254b5d5c5fc2aff4898e99ee022053b00e59772ff8fa983","sha512":"ab891896de54ca35aeda48fb74b92a527c8d187184b7f26b0017f8cc8d5f2ff85fd71c821bea04a0a7cf126904c79a9bdd798003655ca1c053e6d36c6f370152","ssdeep":"","tlshash":"d861b4a93625fab556f108c5887fc142f619603b052afce0e717dcb9b468ae10562ff3","first_seen":"2026-08-21T17:59:24.870412Z","last_seen":"2026-08-24T10:23:40.513438Z","times_seen":6,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":45,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/_next/static/chunks/app/page-62500da928d1a935.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.308Z","timestamp":1787488742308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /_next/static/chunks/app/page-62500da928d1a935.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 186744\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"2d978-1a021d477f7\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186744,"size_decoded":187065,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64094), with no line terminators","md5":"a364ecd34ab62fddea97c15486fc3aab","sha1":"1f4907dce60397b0d4f48094895e6ab21284bf72","sha256":"8d632ba0f5fd661b1867ffa187d488fdc706c884caf0f23819270f333667b11c","sha512":"dfd3f6f89ef9ca591953dc7b5b15e526ff40015986c77e064a806261ddbd9585c274c063f5719caad49778f7eb3fe73f1d7f53ea9400c61d2de5b3207929b737","ssdeep":"3072:ul6KUbGa6gQuyqvSPlrUZ5VcUvTAj4JUlCguICckwehe:tJbMgQuyqvOrUZ5vAjSUlCguJwehe","tlshash":"3104e540e155beacf52a449c866fa01c717e2bacde0e4874fabc2c3636544d4b617bce","first_seen":"2026-08-21T17:59:24.858938Z","last_seen":"2026-08-23T16:28:30.448609Z","times_seen":5,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":77,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/telegram-web-app.js","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.309Z","timestamp":1787488742309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /telegram-web-app.js HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 116341\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2592000\r\nLast-Modified: Fri, 21 Aug 2026 00:59:27 GMT\r\nETag: W/\"1c675-1a021d477fa\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":116650,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"0d81da7304889cf10b6cfbaa26f39f38","sha1":"8998e98c1d306c7ed132f7eeaec45bf178588dcb","sha256":"a4922a0d95877fe0699dbaf827ac8d50df3137acb0cc372aa8c5402e934a5df9","sha512":"c58ff07da3e52c590bcbf07493a13ef3bb4b4a5aabc81cd7a36b68b4251bd21ce1c50368c5a4b920e8092a3fc0e217e5cd3d30c5aa89c8c5794bf4ca30a570e0","ssdeep":"1536:papTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:YpTpRdfcKFU7Rx1v","tlshash":"4ab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T04:55:42.451858Z","last_seen":"2026-08-24T10:23:40.507485Z","times_seen":44,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lilita+One\u0026family=Nunito:wght@700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.645Z","timestamp":1787488742645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Lilita+One\u0026family=Nunito:wght@700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 12:39:02 GMT\r\ndate: Sun, 23 Aug 2026 12:39:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6319,"size_decoded":1357,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e7597120f4c4687720c4f3224df063b","sha1":"a060227f90388e3a2fe138177868db7f36ae32a8","sha256":"e724d99a3bb82d733b189130b41dd984e02c5cfa5ea8a1a007321b599bf79383","sha512":"d3f1dee1032cd9d6f7627e7cf9f2e18aa7471bcdb1d1144e1ec973353d76410a668d9f6fdf6a6c4e91e09f08639d296d3005b322b88246b69d404cad7a92b45c","ssdeep":"96:j0OEaYJc+uv0OEaslNqOpabTxOpa7FZOOOpaKOpaQJc+uaOpaENqOwhabTxOwham:fc+s0HbywkkdiHyy1RkoRHhyWikvH","tlshash":"a9d19991045bd400aa472cc227cf7e37ed4e62113854c57aebfd9898ecabc272364b0e","first_seen":"2026-07-07T05:37:35.286623Z","last_seen":"2026-08-24T10:23:40.510789Z","times_seen":22,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":37,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxmsf.net/w/get?route=ZCyPTkCIS","fqdn":"maxmsf.net","domain":"maxmsf.net","tld":"net"},"ip":{"addr":"87.120.104.174","port":443,"asn":34224,"as":"Neterra Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.854Z","timestamp":1787488742854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxmsf.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:00:37 GMT","end":"Wed, 18 Nov 2026 12:00:36 GMT"},"fingerprint":{"sha1":"6D:39:28:A8:3E:AE:43:AF:6E:AF:51:9E:57:1C:82:D3:54:CD:D4:A0","sha256":"2F:A6:35:06:D6:35:70:AF:A0:83:89:3D:18:F9:AE:B6:3B:40:53:30:31:78:A1:ED:02:95:E0:CE:27:12:F8:A9"}}},"request":{"raw":"GET /w/get?route=ZCyPTkCIS HTTP/1.1\r\nHost: maxmsf.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://maxmsf.net/w/ZCyPTkCIS\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.5\r\nDate: Sun, 23 Aug 2026 12:39:02 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 4388\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nETag: W/\"1124-mE6Rsf+oxFf+aTea36jXKv1wDZA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4388,"size_decoded":4673,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0c9be13af0cc11cae56b1f5ea0ba0e8","sha1":"984e91b1ffa8c457fe69379adfa8d72afd700d90","sha256":"42e1b1a977dd4f5980e28d669b8223605612c60fb7fa47ca611d0d5c106fdd1e","sha512":"ff3e2e58ec640a096693b6c3d7055ff942db16ec525cd06cee1d28b6d8c8cb74ef7a106e3660da8bcc3fe81d3aae14b8eab6032e941bbfb35f154ecf7df3eaa2","ssdeep":"96:ORaL9Lbs2T6RvrwMBHdBWhklL4dHwJm8O4mIq3mpYBZ7b+9S:IRcWd+klL4whOp3JH6S","tlshash":"9c916412815f5db5e243a047e4cfbb0a3aef42bd69e5435058b0ddda33e10ede026169","first_seen":"2026-08-23T12:39:33.655474Z","last_seen":"2026-08-23T12:39:33.655474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"maxmsf.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/1G9ygSdz/2e0df402ad4a.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://maxmsf.net/w/ZCyPTkCIS","date":"2026-08-23T12:39:02.878Z","timestamp":1787488742878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /1G9ygSdz/2e0df402ad4a.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxmsf.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 23 Aug 2026 12:39:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45853\r\nlast-modified: Sat, 22 Aug 2026 15:33:45 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45853,"size_decoded":46219,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x698, components 3","md5":"95638e506ca4da9d391cf0f8b6cbc0be","sha1":"66951fd8d654fdf4bacde9c0cb765e9a52d8cffb","sha256":"7a66089f090bb1fb0c46faa9d6cd47ea36a0cff59b964821b162f29396085d6b","sha512":"ddd6d242bccce8f23d61f08fe61e0cdd9336bb8837d150d67754a5e19612b1bbd222a23cffad835baf44035dbc49a807e0ff65fd410d208e2cf9a8879a894045","ssdeep":"768:x5yuOUW3U1Tjj8ARmNH/IvfRKW1u+N9Qp4eC67Ju06CtCY5O2d4IKAZay+fu:TyPU/1bRGGfRKWook4d67Jh6g/Z/fWfu","tlshash":"0823f18be1cc37c7d91d02b9d4f45783fb08a7e386a27033816a9bb855263c21359acc","first_seen":"2026-08-23T12:39:33.666127Z","last_seen":"2026-08-23T12:39:33.666127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":6,"connect":1035,"send":0,"wait":21,"receive":49,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}