Report - tga.dev/

Report Overview

Submitted URL
tga.dev/
IP
18.192.231.252
ASN
#16509 AMAZON-02
Submitted
2024-04-18 11:51:23
Access
public
Website Title
Telegram Beta
Final URL
tga.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
84

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zws2.web.telegram.org	144268	2003-12-15	2021-06-24	2024-04-13	1.2 kB	438 B	149.154.167.99
tga.dev	unknown	2023-05-18	2023-06-02	2023-10-13	20 kB	2.2 MB	35.156.224.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed
2024-04-18	medium	tga.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	tga.dev/redirect.js	325 B	2023-07-27	2024-05-01
Pretty URL tga.dev/redirect.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-27 09:32:34 Last Seen2024-05-01 12:36:21 Times Seen200 Hash 17773b57b87a678c98e26a7cac72df6c 7422857aa75ee81cabcec2eed6c4a6168f363ee1 375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f Loading...

	tga.dev/compatTest.js	2.2 kB	2024-02-24	2024-05-01
Pretty URL tga.dev/compatTest.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 23:46:30 Last Seen2024-05-01 12:36:21 Times Seen22 Hash b328e15f89116105372eddac365cb6f2 da1979ab60b891ec53dd318be90a09a83124bd87 22c6b05f0b138dddb5711fdb998be90abf8093e271085bda6448bd6bc72c95d2 Loading...

	tga.dev/main.e894752d47a0d8bbe8b6.js	1.4 MB	2024-04-18	2024-04-18
Pretty URL tga.dev/main.e894752d47a0d8bbe8b6.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:51:25 Last Seen2024-04-18 13:51:25 Times Seen2 Hash cf48e19aadf2f22694b7d25ea83ff896 aeb6b5e419d13344e46af23932239ff30d1b3eb2 039fc7a43cf388f7b8e9af0be5f9aa621de08c6e8d9de0dc1d6d4c9eac91bb9b Loading...

	tga.dev/src_util_fallbackLangPack_ts.af3fb873296db9132979.js	21 kB	2024-04-18	2024-04-18
Pretty URL tga.dev/src_util_fallbackLangPack_ts.af3fb873296db9132979.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:51:25 Last Seen2024-04-18 13:51:25 Times Seen1 Hash 1a48aa90fc743272f610803646854ac3 9fe6a474537acbe615639a1782e9e5cfc0acbb74 2e66d95d910e349ed744942eb30fc01c33336e2ea991d28b84ff21eaae4266b2 Loading...

	tga.dev/vendors-node_modules_qr-code-styling_lib_qr-code-styling_js.756dd536589c8fdb7d94.js	46 kB	2023-07-27	2024-04-18
Pretty URL tga.dev/vendors-node_modules_qr-code-styling_lib_qr-code-styling_js.756dd536589c8fdb7d94.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-27 09:32:35 Last Seen2024-04-18 13:51:25 Times Seen12 Hash 863f75790a817ddefdf33d19cdebf0f9 b0d7a5f22c2a73d90303936607bb24597665dcfe 63b717adcd903698aa00fc8796d33a6c59af79c12bf3833d6198a1ca6e7d5737 Loading...

	tga.dev/src_lib_rlottie_RLottie_ts.993c973fe2c47a2e7f26.js	24 kB	2024-04-18	2024-04-18
Pretty URL tga.dev/src_lib_rlottie_RLottie_ts.993c973fe2c47a2e7f26.js IP 35.156.224.161 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:51:25 Last Seen2024-04-18 13:51:26 Times Seen2 Hash 8ba27885204ba6e216a0e6fce7dad1ba 119fc744066850bcbcc06d60a8e4772a87f94674 4089e327b885d616bbeb0c99730bbe9cac356c500e813a893ddc4aafd357aaf5 Loading...

HTTP Transactions (44)

URL IP Response Size

tga.dev/redirect.js

35.156.224.161

200 OK

325 B

URL GET HTTP/2
tga.dev/redirect.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
ASCII text
Size
325 B (325 bytes)
Hash
17773b57b87a678c98e26a7cac72df6c
7422857aa75ee81cabcec2eed6c4a6168f363ee1
375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /redirect.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:56 GMT
etag: "0bab5b68385bfea579502e25363ec4fd-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQ9WDWEN9PYMPKAWT80FJ
content-length: 325
X-Firefox-Spdy: h2

tga.dev/

35.156.224.161

200 OK

1.8 kB

URL User Request GET HTTP/2
tga.dev/
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
HTML document, ASCII text, with very long lines (445)
Size
1.8 kB (1787 bytes)
Hash
f18134c548590f5e3e36cc994c31855a
570ad905ae4fbd04ae1e46ec1745d7c5227e048f
3fcf473a06a9c75656bab102b54da497f925b4130be8d0828ac54290e5f08735

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:56 GMT
etag: "e0ea463415fb0be2c44bb83e2b98fe12-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQ9GXCCDJ5K6CP3CHKNS7
X-Firefox-Spdy: h2

tga.dev/main.e894752d47a0d8bbe8b6.js

35.156.224.161

200 OK

238 kB

URL GET HTTP/2
tga.dev/main.e894752d47a0d8bbe8b6.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (326)
Size
238 kB (237618 bytes)
Hash
cf48e19aadf2f22694b7d25ea83ff896
aeb6b5e419d13344e46af23932239ff30d1b3eb2
039fc7a43cf388f7b8e9af0be5f9aa621de08c6e8d9de0dc1d6d4c9eac91bb9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /main.e894752d47a0d8bbe8b6.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:56 GMT
etag: "393db4f475058e003c636c87b5eb1ada-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQ9WF3HWB46VXG9P1HY43
X-Firefox-Spdy: h2

tga.dev/chat-bg-br.f34cc96fbfb048812820.png

35.156.224.161

200 OK

1.9 kB

URL GET HTTP/2
tga.dev/chat-bg-br.f34cc96fbfb048812820.png
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
Size
1.9 kB (1920 bytes)
Hash
ff2989744d4813c906047582226abd28
41b973276f7a99af05115b89b401aceb02f573c8
3151f7930d821bccf4a76cbbe4a3533e2b56bdff696f260c864ab639ac7526ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /chat-bg-br.f34cc96fbfb048812820.png HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/main.8e22a98dbdf1bbe66f90.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "3083e522870c897ac3648a5a563f5045-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQABAAZ40855DG7RJ8FHP
content-length: 1920
X-Firefox-Spdy: h2

tga.dev/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.324b1e6d0f5ae7c6ab42.woff2

35.156.224.161

200 OK

11 kB

URL GET HTTP/2
tga.dev/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.324b1e6d0f5ae7c6ab42.woff2
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11056, version 1.0
Size
11 kB (11056 bytes)
Hash
07db243db21ed0a6b4ff05ff429686b7
5d62925fdd7ed8e80f206d095ed093994f13d276
ce897833ac6e362df7c91ac8223fe511c6defcf33964928a81004600a2dd4c2e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.324b1e6d0f5ae7c6ab42.woff2 HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/main.8e22a98dbdf1bbe66f90.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: font/woff2
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "6e7083a4065bbd4e28f84371f1a14657-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQABF6VWYMXV5FA9F2H9H
content-length: 11056
X-Firefox-Spdy: h2

tga.dev/notification.mp3

35.156.224.161

206 Partial Content

11 kB

URL GET HTTP/2
tga.dev/notification.mp3
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
Size
11 kB (10880 bytes)
Hash
eba09b6a457792c52fc610b5f9f974b3
95e6e0f7648e28ea21bc434054ea59aba3a35aea
86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /notification.mp3 HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-range: bytes 0-10879/10880
content-type: audio/mpeg
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "7126b690128a82a9d821b115bea711ac-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQABV5TC74KHG0VHX828J
content-length: 10880
X-Firefox-Spdy: h2

tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js

35.156.224.161

200 OK

9.1 kB

URL GET HTTP/2
tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
9.1 kB (9125 bytes)
Hash
cc8e3003514b9a5a520a557c8f842207
55dc7b98443382e7541c0e2a8d76b9bfb309de36
e6a5cca81f7a983cd475c82ba9d72b1ce79d0f8f87ee4d04069979a0e4bd7c78

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "bd0c93815312efdec4758f4f06bf8f08-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAH7XABFTMEGTRXKSAQE
content-length: 9125
X-Firefox-Spdy: h2

tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js

35.156.224.161

200 OK

9.1 kB

URL GET HTTP/2
tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
9.1 kB (9125 bytes)
Hash
cc8e3003514b9a5a520a557c8f842207
55dc7b98443382e7541c0e2a8d76b9bfb309de36
e6a5cca81f7a983cd475c82ba9d72b1ce79d0f8f87ee4d04069979a0e4bd7c78

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "bd0c93815312efdec4758f4f06bf8f08-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAH82CQFCVAQFVM0XZ07
content-length: 9125
X-Firefox-Spdy: h2

tga.dev/chat-bg-pattern-light.ee148af944f6580293ae.png

35.156.224.161

200 OK

273 kB

URL GET HTTP/2
tga.dev/chat-bg-pattern-light.ee148af944f6580293ae.png
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
PNG image data, 1123 x 2307, 4-bit colormap, non-interlaced
Size
273 kB (272875 bytes)
Hash
3d558d8de7082a2b2355076c8988c3fd
d74980e29b0ec2f102b0dcd614503fd42a255b85
00745db819d91c37bf0f59bee00ab2efe9766fddcb726ff1bcb6847748b2bbc7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /chat-bg-pattern-light.ee148af944f6580293ae.png HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/main.8e22a98dbdf1bbe66f90.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "b4577f2e323f32f90a1e6a35fc316b6f-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQABA4NYJBADQHTVVY9YC
content-length: 272875
X-Firefox-Spdy: h2

tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js

35.156.224.161

200 OK

9.1 kB

URL GET HTTP/2
tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
9.1 kB (9125 bytes)
Hash
cc8e3003514b9a5a520a557c8f842207
55dc7b98443382e7541c0e2a8d76b9bfb309de36
e6a5cca81f7a983cd475c82ba9d72b1ce79d0f8f87ee4d04069979a0e4bd7c78

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "bd0c93815312efdec4758f4f06bf8f08-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAHBHP198175PJGGPSM2
content-length: 9125
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js

35.156.224.161

200 OK

24 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
24 kB (24105 bytes)
Hash
abfd10612afcd4832510fed36e0cb359
9efac7841a02c0f42b759cfb1031450ef3f03a1f
59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "e035d5d0faa1df441e5ffea8b717dc0c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAQ31FAVPZGW7VE8Y4VT
content-length: 24105
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js

35.156.224.161

200 OK

24 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
24 kB (24105 bytes)
Hash
abfd10612afcd4832510fed36e0cb359
9efac7841a02c0f42b759cfb1031450ef3f03a1f
59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "e035d5d0faa1df441e5ffea8b717dc0c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQASGN322G8YP55G5HD4S
content-length: 24105
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js

35.156.224.161

200 OK

24 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
24 kB (24105 bytes)
Hash
abfd10612afcd4832510fed36e0cb359
9efac7841a02c0f42b759cfb1031450ef3f03a1f
59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "e035d5d0faa1df441e5ffea8b717dc0c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAQ41M201ZECACDKAWH8
content-length: 24105
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js

35.156.224.161

200 OK

24 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
24 kB (24105 bytes)
Hash
abfd10612afcd4832510fed36e0cb359
9efac7841a02c0f42b759cfb1031450ef3f03a1f
59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "e035d5d0faa1df441e5ffea8b717dc0c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAQ447PCNP79NGW23XHD
content-length: 24105
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js

35.156.224.161

200 OK

48 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
48 kB (47926 bytes)
Hash
c45bd2047e2c8ff555e1b201bc9bf002
ac50d9ee170c2f026ae8822b2b46cac84e239271
58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fc3187a20505f4f3953df1cf581dc492-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB5D0XE8H95E8N8FBFZS
content-length: 47926
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js

35.156.224.161

200 OK

48 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
48 kB (47926 bytes)
Hash
c45bd2047e2c8ff555e1b201bc9bf002
ac50d9ee170c2f026ae8822b2b46cac84e239271
58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fc3187a20505f4f3953df1cf581dc492-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB5BY6FNGVK7EF15BCV1
content-length: 47926
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js

35.156.224.161

200 OK

48 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
48 kB (47926 bytes)
Hash
c45bd2047e2c8ff555e1b201bc9bf002
ac50d9ee170c2f026ae8822b2b46cac84e239271
58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fc3187a20505f4f3953df1cf581dc492-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB5GVFZWP2QM0B1CCDSA
content-length: 47926
X-Firefox-Spdy: h2

tga.dev/src_config_ts.a1ab4c2583632aae4417.js

35.156.224.161

200 OK

7.1 kB

URL GET HTTP/2
tga.dev/src_config_ts.a1ab4c2583632aae4417.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (573)
Size
7.1 kB (7125 bytes)
Hash
68b5abb71759e1dbe170bbabd2cbb802
c830c248d0e08e6ffa52ec4910f71bc449f6ba24
c632b5985d53c208cd71253a046aad114b2eeaee63790d0ad28a99b1ca615a66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_config_ts.a1ab4c2583632aae4417.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "3dca0c1036b91e1bf1b9601416962c9f-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBDVGCWBCG5JV4XG55M7
content-length: 7125
X-Firefox-Spdy: h2

tga.dev/src_config_ts.a1ab4c2583632aae4417.js

35.156.224.161

200 OK

7.1 kB

URL GET HTTP/2
tga.dev/src_config_ts.a1ab4c2583632aae4417.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (573)
Size
7.1 kB (7125 bytes)
Hash
68b5abb71759e1dbe170bbabd2cbb802
c830c248d0e08e6ffa52ec4910f71bc449f6ba24
c632b5985d53c208cd71253a046aad114b2eeaee63790d0ad28a99b1ca615a66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_config_ts.a1ab4c2583632aae4417.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "3dca0c1036b91e1bf1b9601416962c9f-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBFAAWAMXXGYFKBJWQ37
content-length: 7125
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_buffer_index_js.45268dee2535cd31950d.js

35.156.224.161

200 OK

22 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_buffer_index_js.45268dee2535cd31950d.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
22 kB (21709 bytes)
Hash
bf23a610cbcc7f74bd4137b3f412149e
5213ad9007ceafd9be4d1eca5cd951ba82744e83
2bba376204d1210639b72fe935f90b77cfc2af97aff39de1dac04ebf68303b30

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_buffer_index_js.45268dee2535cd31950d.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 2
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "f7f203a34de90652c842c88ca8e9a73b-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB2S0F3NW05R24X13VHT
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js

35.156.224.161

200 OK

62 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text
Size
62 kB (62176 bytes)
Hash
c45bd2047e2c8ff555e1b201bc9bf002
ac50d9ee170c2f026ae8822b2b46cac84e239271
58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fc3187a20505f4f3953df1cf581dc492-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB4MH7A9060BM5CF5QWX
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.51d175377b5332e82d64.js

35.156.224.161

200 OK

26 kB

URL GET HTTP/2
tga.dev/rlottie-wasm.51d175377b5332e82d64.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
26 kB (25766 bytes)
Hash
dee0b5a2f2d8533ccc49b6949d2f942d
d71623fb971b85bac16ba1b243d04dfb3ef516db
0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "a5d2260c43f70d7a85b87aa1b8cf9b5a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBGC12A1WK17P9R26EWF
content-length: 25766
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.51d175377b5332e82d64.js

35.156.224.161

200 OK

26 kB

URL GET HTTP/2
tga.dev/rlottie-wasm.51d175377b5332e82d64.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
26 kB (25766 bytes)
Hash
dee0b5a2f2d8533ccc49b6949d2f942d
d71623fb971b85bac16ba1b243d04dfb3ef516db
0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "a5d2260c43f70d7a85b87aa1b8cf9b5a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBHYBSFNK3M0SBNH0DNY
content-length: 25766
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.51d175377b5332e82d64.js

35.156.224.161

200 OK

26 kB

URL GET HTTP/2
tga.dev/rlottie-wasm.51d175377b5332e82d64.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
26 kB (25766 bytes)
Hash
dee0b5a2f2d8533ccc49b6949d2f942d
d71623fb971b85bac16ba1b243d04dfb3ef516db
0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "a5d2260c43f70d7a85b87aa1b8cf9b5a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBFSNMVF4Z0WHA6WAHE7
content-length: 25766
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.wasm

35.156.224.161

0 B

URL
tga.dev/rlottie-wasm.wasm
IP
35.156.224.161:0
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.wasm HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
If-None-Match: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
TE: trailers

HTTP/2 304 Not Modified
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBSN9RKZ08H5MD6Y84HM
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.wasm

35.156.224.161

0 B

URL
tga.dev/rlottie-wasm.wasm
IP
35.156.224.161:0
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.wasm HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
If-None-Match: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
TE: trailers

HTTP/2 304 Not Modified
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBSN9W77K15EV60JFJA3
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.wasm

35.156.224.161

0 B

URL
tga.dev/rlottie-wasm.wasm
IP
35.156.224.161:0
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.wasm HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
If-None-Match: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
TE: trailers

HTTP/2 304 Not Modified
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBTDAZZ06NFMPMM6JHQQ
X-Firefox-Spdy: h2

tga.dev/rlottie-wasm.wasm

35.156.224.161

126 kB

URL
tga.dev/rlottie-wasm.wasm
IP
35.156.224.161:0
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
WebAssembly (wasm) binary module version 0x1 (MVP)
Size
126 kB (126477 bytes)
Hash
ade36c82f1c7643da3ef1244ec008da5
19654576f8d08fee41f8dce3e8f21e61084b9589
f186efb3d724331c5d36813d3bbbe512630f9e199f4667f3c4aa43f3fec6cf14

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rlottie-wasm.wasm HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/wasm
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "fe7fff5092fc7774bd7585280c8b758c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBMJ0MRC48G6YNA4V2MQ
X-Firefox-Spdy: h2

tga.dev/QrPlane.a921709f266564f65b7e.tgs

35.156.224.161

2.1 kB

URL
tga.dev/QrPlane.a921709f266564f65b7e.tgs
IP
35.156.224.161:0
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
gzip compressed data, was "PlaneLogoPlain.json", last modified: Fri Dec 17 11:58:31 2021, from Unix
Size
2.1 kB (2105 bytes)
Hash
9fe5425a55be5cfd60c1ee5f2ca2c733
6055dbe3afe9575b921a9863534e91428a847021
486cbe566d05f023f3c72ec00b55f921deb1f7aed2efb630fe717425e2d98d0a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /QrPlane.a921709f266564f65b7e.tgs HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/src_lib_mediaWorker_index_worker_ts.75efb0ddb01eddad8d91.js
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/octet-stream
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "3a69099a8681ff9da0baf412012c462f-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBVANDK1KKP4X0EGV7JW
content-length: 2105
X-Firefox-Spdy: h2

tga.dev/icon-dev-192x192.png

35.156.224.161

200 OK

15 kB

URL GET HTTP/2
tga.dev/icon-dev-192x192.png
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Size
15 kB (14885 bytes)
Hash
6fcacf1bd211d97c4cc9df69c2f8f2bc
91ecc2a1a3010f362f51185e7360b8f37d78df49
b462b8d86cd5de8280822344e2ab69270848e0d2c9590ec00ad2dd9ee1641097

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icon-dev-192x192.png HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "4d09f4fa80ec809311712b19dd2bb781-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQBSR1F73S7PSDJK3ZVZJ
content-length: 14885
X-Firefox-Spdy: h2

zws2.web.telegram.org/apiws

149.154.167.99

0 B

URL
zws2.web.telegram.org/apiws
IP
149.154.167.99:0
ASN
#62041 Telegram Messenger Inc

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /apiws HTTP/1.1
Host: zws2.web.telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://tga.dev
Sec-WebSocket-Protocol: binary
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UudgJ1aDK4IzU6yQ1hlnJA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Server: nginx/1.18.0
Date: Thu, 18 Apr 2024 11:50:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: prPOkBtdAqeMPfnFZhQ3pW0JxQI=
Sec-WebSocket-Protocol: binary

tga.dev/src_api_gramjs_apiBuilders_messages_ts.8d31c453381045550790.js

35.156.224.161

200 OK

142 kB

URL GET HTTP/2
tga.dev/src_api_gramjs_apiBuilders_messages_ts.8d31c453381045550790.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (325)
Size
142 kB (142522 bytes)
Hash
7ce6c1ea9107acce50709bd7254235bd
0dd5b9faec009c084dcc224a9e6a9f35db7431fa
aa94bfc83906b7b9abd40ff423ca0145e7ab98237f93f801b39d31ec9112145f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_api_gramjs_apiBuilders_messages_ts.8d31c453381045550790.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "0971bb84daa23580c9d7a0f9d1969773-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQBJ2RPF2VW09T9DE54AD
X-Firefox-Spdy: h2

tga.dev/blank.8dd283bceccca95a48d8.png

35.156.224.161

200 OK

68 B

URL GET HTTP/2
tga.dev/blank.8dd283bceccca95a48d8.png
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Size
68 B (68 bytes)
Hash
91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /blank.8dd283bceccca95a48d8.png HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/png
date: Thu, 18 Apr 2024 11:51:01 GMT
etag: "2fdf5e0d6578684d3f63b4bf1ddb6b02-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQE4TY1V7GZCS1H33JYD4
content-length: 68
X-Firefox-Spdy: h2

tga.dev/blank.8dd283bceccca95a48d8.png

35.156.224.161

200 OK

68 B

URL GET HTTP/2
tga.dev/blank.8dd283bceccca95a48d8.png
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Size
68 B (68 bytes)
Hash
91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /blank.8dd283bceccca95a48d8.png HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tga.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/png
date: Thu, 18 Apr 2024 11:51:01 GMT
etag: "2fdf5e0d6578684d3f63b4bf1ddb6b02-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQE69R5MWTFTDT5NSMYVS
content-length: 68
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_cryptography_aes_dist_es_aes_js-node_modules_async-mutex_lib_index_js-no-294d8e.c976c535cb36bda8f302.js

35.156.224.161

200 OK

51 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_cryptography_aes_dist_es_aes_js-node_modules_async-mutex_lib_index_js-no-294d8e.c976c535cb36bda8f302.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with CRLF, LF line terminators
Size
51 kB (51237 bytes)
Hash
ca197bbc7fd6fe8d41230e01e89aeb90
3589732229735a8d3800695a48d00e83c3ff36e4
abef68d973ce6522f04a81fbae269c8565688a1550baf4c082be2bb34f11a45e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_cryptography_aes_dist_es_aes_js-node_modules_async-mutex_lib_index_js-no-294d8e.c976c535cb36bda8f302.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "1ef58ad1bc5ab2972394d16fdfb0c75c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQB87N3YMX5BQSHV3HWSY
X-Firefox-Spdy: h2

zws2.web.telegram.org/apiws

149.154.167.99

101 Switching Protocols

0 B

URL GET HTTP/1.1
zws2.web.telegram.org/apiws
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://tga.dev/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.web.telegram.org
Fingerprint74:51:4A:F8:C5:D2:E1:36:68:30:25:98:05:27:E8:6F:57:FC:E0:3B
ValidityWed, 30 Aug 2023 00:40:43 GMT - Mon, 30 Sep 2024 00:40:43 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /apiws HTTP/1.1
Host: zws2.web.telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://tga.dev
Sec-WebSocket-Protocol: binary
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UudgJ1aDK4IzU6yQ1hlnJA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Server: nginx/1.18.0
Date: Thu, 18 Apr 2024 11:50:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: prPOkBtdAqeMPfnFZhQ3pW0JxQI=
Sec-WebSocket-Protocol: binary

tga.dev/compatTest.js

35.156.224.161

200 OK

2.2 kB

URL GET HTTP/2
tga.dev/compatTest.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (2307), with no line terminators
Size
2.2 kB (2245 bytes)
Hash
b792e6991f514bc5008dcd7f2e42963b
81c34ba1b4d273df45b0a5980c8d7c677e63ba31
7ba328c8eb841cc060c30835a2c4bc2cbd08a35c8377df7bae6722d12d1f3307

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /compatTest.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:56 GMT
etag: "534582053b13020665c5942f119aa06a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQ9WG143D2CH6E3B9ETZE
content-length: 739
X-Firefox-Spdy: h2

tga.dev/src_lib_rlottie_RLottie_ts.993c973fe2c47a2e7f26.js

35.156.224.161

200 OK

24 kB

URL GET HTTP/2
tga.dev/src_lib_rlottie_RLottie_ts.993c973fe2c47a2e7f26.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
JavaScript source, ASCII text, with very long lines (312)
Size
24 kB (23999 bytes)
Hash
8ba27885204ba6e216a0e6fce7dad1ba
119fc744066850bcbcc06d60a8e4772a87f94674
4089e327b885d616bbeb0c99730bbe9cac356c500e813a893ddc4aafd357aaf5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_lib_rlottie_RLottie_ts.993c973fe2c47a2e7f26.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "adcb740550d5de5085ade4de0c3a71ce-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQABMVX1F8905T3Z2M2FR
X-Firefox-Spdy: h2

tga.dev/favicon.svg

35.156.224.161

200 OK

892 B

URL GET HTTP/2
tga.dev/favicon.svg
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
SVG Scalable Vector Graphics image
Size
892 B (892 bytes)
Hash
fbfd454715d8180275b32bd48770a483
0716abb57416f83cfad3e17ff830039c0607b313
788c238be3597ef42c549caff599bb84e584790f43f7d6013d6a1987264bdbe1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.svg HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/svg+xml
date: Thu, 18 Apr 2024 11:50:58 GMT
etag: "0a0061a0720ba97c59a92873d6e8f257-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQBSSBF6G34H6JX6FCS86
content-length: 892
X-Firefox-Spdy: h2

tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js

35.156.224.161

200 OK

648 kB

URL GET HTTP/2
tga.dev/src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
648 kB (648038 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_api_gramjs_worker_worker_ts-src_util_Deferred_ts-src_util_emoji_parseEmojiOnlyString_ts.e29d409979b919924574.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "74875e500b138b2158a7be57768fc9e8-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAE908CRH632Q9PWHX0Z
X-Firefox-Spdy: h2

tga.dev/main.8e22a98dbdf1bbe66f90.css

35.156.224.161

200 OK

143 kB

URL GET HTTP/2
tga.dev/main.8e22a98dbdf1bbe66f90.css
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
ASCII text, with very long lines (792)
Size
143 kB (142681 bytes)
Hash
dbf476dd489221e51de70db13742082e
ef41c61b8e1b195d7f6a38fcae80fefe0c583fcc
89d96a1344b6cad8a29160d4f3202eb6c264aad3d86400d57a9cd4144dc49ad2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /main.8e22a98dbdf1bbe66f90.css HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:56 GMT
etag: "c812655bb29c3d9cc0d9ea36bf5fd1e7-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQ9WGSEC10H30QW1EWZ07
X-Firefox-Spdy: h2

tga.dev/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2

35.156.224.161

200 OK

11 kB

URL GET HTTP/2
tga.dev/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11016, version 1.0
Size
11 kB (11016 bytes)
Hash
15fa3062f8929bd3b05fdca5259db412
6ff06a34f68ad0324ddec1bbe4d453c959178b36
5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/main.8e22a98dbdf1bbe66f90.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: font/woff2
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "c1d5c49e14280d61e6d9e95b3baaf8d1-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01HVRGQAA45XZNFKPXDCV3V2EB
content-length: 11016
X-Firefox-Spdy: h2

tga.dev/src_util_fallbackLangPack_ts.af3fb873296db9132979.js

35.156.224.161

200 OK

21 kB

URL GET HTTP/2
tga.dev/src_util_fallbackLangPack_ts.af3fb873296db9132979.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
21 kB (20834 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /src_util_fallbackLangPack_ts.af3fb873296db9132979.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "6abcd3f96025c39144d41bf041f2e305-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQAAYYN3NFX0RWB0NTCTJ
X-Firefox-Spdy: h2

tga.dev/vendors-node_modules_qr-code-styling_lib_qr-code-styling_js.756dd536589c8fdb7d94.js

35.156.224.161

200 OK

46 kB

URL GET HTTP/2
tga.dev/vendors-node_modules_qr-code-styling_lib_qr-code-styling_js.756dd536589c8fdb7d94.js
IP
35.156.224.161:443
ASN
#16509 AMAZON-02

Requested by
https://tga.dev/
Certificate
IssuerLet's Encrypt
Subject*.webz.dev
Fingerprint5C:6E:C2:F5:40:FD:AB:C7:68:58:F0:B2:99:0F:5E:17:BB:5B:8B:65
ValidityWed, 10 Apr 2024 20:21:12 GMT - Tue, 09 Jul 2024 20:21:11 GMT

File type

Size
46 kB (46270 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vendors-node_modules_qr-code-styling_lib_qr-code-styling_js.756dd536589c8fdb7d94.js HTTP/1.1
Host: tga.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tga.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Thu, 18 Apr 2024 11:50:57 GMT
etag: "1f5bc025824d41b1f69e31af0c4da1f3-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HVRGQABK7FXYBX6ETPGJNQJA
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (44)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2