Sysadmins have spoiled more systems than the bad guys, so it is said :)
yea... sysadmins and state-crackers (the ones forking for the "safety of all of us"). Was looking if i could identify some bad guy - but then it turned out like i am the bad guy.
By creating some "traps"... And you wont believe i did catch a MITM. At least to me it seams a man in the middle attack:
https://i.postimg.cc/zX91Zdjy/wawlookatthis.png
i used the classifieds tool of midnight.city. I made a screen-shot of the catch - the posted text in the terminal was not equal to the text displayed on the classifieds service...
Was my reasoning right?