{"report_id":"1a8fab33-aca7-4a0f-87a3-8064375e5fc8","version":6,"status":"done","tags":[],"date":"2026-02-06T21:33:10Z","url":{"schema":"https","addr":"teaeaagram.one/","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"104.21.12.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"teaeaagram.one/","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"title":"Telegram","dom":{"size":3329,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (445)","md5":"f50e24d657be0696df482319b271959c","sha1":"4cbb5dcffae566f18939960c6b91a450e4253378","sha256":"6dc9aba0a7692f8c98cb0da56f2ccc53879c4dd62d51b20e1edbaa1de98674b1","sha512":"3fcff26f347311ab787469e4ed556ab6708679cb83fb571e79f0c947fd6a1a509986d9fdc219b6db23828c47d3b03d4e07213091ea740c1f7a57f326902282f1","ssdeep":"","tlshash":"26613493db08884a7361832a99e2f08cc216d809dba97c51f8d945af49d5ff1c5f32ad","dom_hash":"domhash0f31abafeaf2029a3dea65104db1780c","first_seen":"2026-02-06T21:05:53.929772Z","last_seen":"2026-02-06T21:39:03.969671Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"teaeaagram.one/","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"104.21.12.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T21:33:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telez.sbs","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-06T21:05:49.77856Z","last_seen":"2026-02-06T21:05:49.778561Z","alert_count":0,"request_count":2,"received_data":4051,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"teaeaagram.one","ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-06T21:05:49.774643Z","last_seen":"2026-02-06T21:05:49.774643Z","alert_count":64,"request_count":30,"received_data":4166679,"sent_data":14765,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_rlottie_RLottie_ts.475a4b6c4efa7f95cec9.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36a689bc70f81286fce141fba316b553","sha1":"3b574e7d0bfbb24d53ed7df86bc506871bac0d79","sha256":"4238f5d92aeeaa9af723ce4a4fc7a869fe45821d165fb50643a77f6f5c5601fa","sha512":"55edcabf50455105fa39eb715ace4dc5cd754f46ad18bd1e296eb6dff0f39931eecfc874255995bdba090590027e4979054282982015a8c501e4aa5bd8ce9a7e","ssdeep":"384:xOWs6d8c8iUTywfkVo8QseyDW4w5djBNsZiZgmbyyPWs6d8XALrUc+Brhhx:xOWs6r8P2U6eoWBdjrsZiuhyPWs6eVn","tlshash":"c4b2554e67f72c299123b0a91f0f86926624c0073819e9997e6c32a46fdd078d2f8f75","size":25259,"data":"","first_seen":"2025-12-20T06:25:37.676238Z","last_seen":"2026-02-06T21:39:03.9797Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/redirect.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad4d9c4c2150044f28af9393101585d2","sha1":"2c39bb9654fc656a0179e6ad53bb47ef95b82c31","sha256":"1a40ff47daa344d5b0886a8f56f15ffc241c1bb04f0e342f3d2035999f4b7a50","sha512":"3c7159ebc28c7714c7ba4f008c02bc8b1e5efdc147200c4c4a96bb0d6d17a80c4d75f6286b46deb160266b6234614c4b3abe88d79ca8dbf53076baf771f102f1","ssdeep":"192:rAuJ0anxfeb+UnI+xpVIDhsWCEnSfYrHemsADN9Y:snxpgsjESxb","tlshash":"a212b70669b71431507b60be2b5766193331e003b40dcd343bbce7946f8db99aad2bc9","size":9413,"data":"","first_seen":"2026-02-06T21:05:53.953044Z","last_seen":"2026-02-06T21:39:03.976923Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/compatTest.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da7800ea928a021f2539ab41e6f2323e","sha1":"0141da1dc85ca8f34212f3dde2fac9bf61f5adb7","sha256":"15c24ec2b4cb94f24e66750f09e7071e5659e20a5ed926f69f565e20a81027cf","sha512":"228ca1c1f1ff8de139ebcfa7b084bc40d467a56ddccd103cf02a3fa26ba8c1b4d1961904511198e2fb6797837414bb3c09fc9f0902c3874f2467f279d526f0a9","ssdeep":"","tlshash":"fa5125190db5726150796167fb1bb2433a294133050cfb64a620cf393eb285bc19fde9","size":2544,"data":"","first_seen":"2024-06-30T22:36:50Z","last_seen":"2026-08-05T23:46:15.17999Z","times_seen":14200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/main.d2ce003bc27e5757e049.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"903ce36c6981bd38527ddbfd67d5a809","sha1":"a3476547879bd41241ecde9b52bb1f588df92b70","sha256":"d38587c5fd6b4e8e2cb4a7c717602b299f560d210d347b063575c44a7fb3790b","sha512":"ec3f1eee28722e59e28bec7268c8b21aef4a8f95a6fde3dcb88f69d3cd3121af0e6fd1b97e1092aee9b8b3cee329f269e2fa8900a25b72bf997f9b1bd4dcf6a7","ssdeep":"6144:q5kB0yKCHOVdcyrtzTlPbNqmw+/0GBC9sWB8bJv7LwB9+hYIlrhNYKEwkI+d+xp5:nxHOsyTNb/at6x1zxpw2JxMFi","tlshash":"4075e79135e52d1b42a7f8fa6a0bd9e732658003385cbc8078fd32241fdc6ac95f6769","size":1598603,"data":"","first_seen":"2026-02-06T21:05:53.957101Z","last_seen":"2026-02-06T21:39:03.980838Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"telez.sbs/api/index/visit/teaeaagram.one","fqdn":"telez.sbs","domain":"telez.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telez.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 07:09:24 GMT","end":"Thu, 16 Apr 2026 08:08:09 GMT"},"fingerprint":{"sha1":"FA:35:31:E2:2B:E1:E5:39:B3:ED:37:B2:F7:BD:97:78:D1:14:A1:3D","sha256":"ED:AD:E6:7D:C8:F7:35:45:71:E6:07:AD:4B:40:28:84:EE:13:63:D1:57:12:58:D5:7C:BE:FC:AE:10:2D:CA:E3"}}},"request":{"raw":"GET /api/index/visit/teaeaagram.one HTTP/1.1\r\nHost: telez.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teaeaagram.one/\r\nOrigin: https://teaeaagram.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:32:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Authorization, Sec-Fetch-Mode, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, If-Match, If-None-Match, If-Unmodified-Since, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Accept-Language, Origin, Accept-Encoding, Access-Token, token, version\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, post\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtDUAzidtyjgZC4Jczd1BO11H3PWEK6BiHDbRkbg%2FHDo1IaFAOX8xWL5yTNBKYZDT8aUbW1Wy8Qi2z6IU5IRbt9I5IQdt3o%3D\"}]}\r\ncf-ray: 9c9dc3292ac056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ada16e1a6c0a70a88ae98ae0a1114ac","sha1":"0fd58cd69c70a0293844293770a43bdf0e189729","sha256":"64e15b986bee20361b896663b9de6f12a2ff79fb23044cf792050b275c0111d9","sha512":"6a9e5704e6cd8f88957025ecd41a244f42c96e2207d907008ef4062e7481b83b02d8954d4e4784cc4740400570a43f9f77f172d1dac5fb328064e560820395f1","ssdeep":"","tlshash":"88a002591c2e7823160109ad415b454c10bb55b41d100724ac8d93905e580ba1702521","first_seen":"2025-12-20T06:25:37.664409Z","last_seen":"2026-03-14T22:07:10.425383Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":95,"dns":62,"connect":1,"send":0,"wait":868,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_rlottie_RLottie_ts.475a4b6c4efa7f95cec9.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:52.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_lib_rlottie_RLottie_ts.475a4b6c4efa7f95cec9.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-62ab\"\r\nexpires: Sat, 07 Feb 2026 09:05:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1640\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt1n2JUEl3QY6oavmHbiwQuhTRKkOXax0IQ7NWpvk3m7gAp6MXYkNx8bsg3ViuI9%2B3FdcXQROJEl2678SMcYOCTgrr8FpNj4jFF8ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33c4e4956bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"36a689bc70f81286fce141fba316b553","sha1":"3b574e7d0bfbb24d53ed7df86bc506871bac0d79","sha256":"4238f5d92aeeaa9af723ce4a4fc7a869fe45821d165fb50643a77f6f5c5601fa","sha512":"55edcabf50455105fa39eb715ace4dc5cd754f46ad18bd1e296eb6dff0f39931eecfc874255995bdba090590027e4979054282982015a8c501e4aa5bd8ce9a7e","ssdeep":"384:xOWs6d8c8iUTywfkVo8QseyDW4w5djBNsZiZgmbyyPWs6d8XALrUc+Brhhx:xOWs6r8P2U6eoWBdjrsZiuhyPWs6eVn","tlshash":"c4b2554e67f72c299123b0a91f0f86926624c0073819e9997e6c32a46fdd078d2f8f75","first_seen":"2025-12-20T06:25:37.676238Z","last_seen":"2026-02-06T21:39:03.9797Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1b649\"\r\nexpires: Sat, 07 Feb 2026 09:05:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTCSmg4B42gwH1hJr%2FX5UXP7UYpMjflCKbMy8iM38qaB9uFnsBHCDpFPUA6Gn12aguKPRLGNt968fwa2szo0Utt2a6NQDNSDzvhQ9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cae5756bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112201,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abfd10612afcd4832510fed36e0cb359","sha1":"9efac7841a02c0f42b759cfb1031450ef3f03a1f","sha256":"59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6","sha512":"47bfa40abd96eeaa4eb77df545a791332cf9e13984f1308c91af0c40e4b7aff77f326815e72f6ae583806530d7a39c956ac6953efdf7f5f03ba0972ec67643c9","ssdeep":"1536:mqixWUY94HnezpiFzFLzzov27gIGMVkzqjpn6zk:H+7Y94HekF5z8u7gIGMxj/","tlshash":"05b3b44516f3225b181260b5e78f70b5a2a6a11f5347c8983c9f43847f9173e82febe9","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.975237Z","times_seen":434,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-a9a1\"\r\nexpires: Sat, 07 Feb 2026 09:05:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1636\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23o9rOfFNL188sABvnq3i0ziXeBVbgUrxY25Ve98%2F4PlrgvrRc5DzWL1BFPoPBBYGfcjxZ0Lzpq6VJ17KZEyXQFoNNBpRr1fKmGaMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d0e5f56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (573)","md5":"39cea3339b6d415c70caa47bdaa0aea6","sha1":"f147bc291c160bc5d77d2f4acc7319da2d5abe4b","sha256":"6add3ad1b88e9e9a9b1ed162fcbb3caef0c26b0e3a493050632565b31be54753","sha512":"55936fe8fadb795dfec98c7d2dcc5f2d3ac1fa51ef5593105430df33f50a9f75fc24cd2b7b0f08ba1e0816401b3374f2f6963b487d20b9b996fd0a6fd2a7023d","ssdeep":"768:1HOVdq1vykITtL3TlrTr5AAMb0evEyVPkE0qorw+/mPrh4UGToPYx:1HOVdq1vyfTtL3TlrTr5AAMbVvEyeE0T","tlshash":"191362627a1232374bd5c3ba225dc6c7035b96733f2e58d034ae731483e6e9895f19a3","first_seen":"2026-02-06T21:05:53.934972Z","last_seen":"2026-02-06T21:39:03.970407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1d14c\"\r\nexpires: Sat, 07 Feb 2026 09:05:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1635\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Venj4z2eAFNZudNSO640GArRxUe21%2BzOZI1JXiHXKDoFdXB7s2dOHcG%2FwHWZWW%2BWaGHky4brcqk8snhrnhhVLJJLAkp4AnDAgtL6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d3e6a56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"dee0b5a2f2d8533ccc49b6949d2f942d","sha1":"d71623fb971b85bac16ba1b243d04dfb3ef516db","sha256":"0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f","sha512":"796682e315b9723ec3080639b31782e2590f25765301839fe1054786e9c0f9b71259766f3d201b5068129ebc67641754f7dbcbb0bfdd5013289e192ddcb9f8e7","ssdeep":"3072:RVxTCNZ6iFBsU3Jjh9DagCScYte4iiRaE:RVxxdScYte4ii9","tlshash":"6ac3514c6cf720a69623717d9b5f5109b6b9a803161dce00bd5cc2a0af94d3c9af9fd8","first_seen":"2023-03-13T11:21:32Z","last_seen":"2026-07-02T12:51:56.642294Z","times_seen":457,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/redirect.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /redirect.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 08:36:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969f8a3-24c5\"\r\nexpires: Sat, 07 Feb 2026 09:05:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1641\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yBZnviclCXYkxiJon1CwQcSei1S4LdM74mVntSwF%2Bbv9Whj%2B46kIo9SwxyloLKClrZSdtmVIhNgU1RcBoHU6WsbzZRTeZiJ68HY%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc3282d8f56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ad4d9c4c2150044f28af9393101585d2","sha1":"2c39bb9654fc656a0179e6ad53bb47ef95b82c31","sha256":"1a40ff47daa344d5b0886a8f56f15ffc241c1bb04f0e342f3d2035999f4b7a50","sha512":"3c7159ebc28c7714c7ba4f008c02bc8b1e5efdc147200c4c4a96bb0d6d17a80c4d75f6286b46deb160266b6234614c4b3abe88d79ca8dbf53076baf771f102f1","ssdeep":"192:rAuJ0anxfeb+UnI+xpVIDhsWCEnSfYrHemsADN9Y:snxpgsjESxb","tlshash":"a212b70669b71431507b60be2b5766193331e003b40dcd343bbce7946f8db99aad2bc9","first_seen":"2026-02-06T21:05:53.953044Z","last_seen":"2026-02-06T21:39:03.976923Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/main.1b6dcd3f4e53c5acfd25.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11016\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\netag: \"68f60d9a-2b08\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1639\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKpjAs7WiSgPN%2BfCIBEocNpV0ZHsvdRYt0qqvee4uEfu5lJL1p1%2FaViFLOxavNdZ5ROdzuxSmuMSUv21Af6kRzp%2BDpHcG3W678l8yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9dc3299da056bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11016, version 1.0","md5":"15fa3062f8929bd3b05fdca5259db412","sha1":"6ff06a34f68ad0324ddec1bbe4d453c959178b36","sha256":"5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479","sha512":"07e96d7520b4ede158e77bef10a01a33cd8be7d263fe6900f89c023e65e4a63570e8a442dec2e96030fb563b25610005a748d48f9330fd31eb91b37d1003d376","ssdeep":"192:Tysuo7z1NVoTUYAKVOO7YVxRwHQUXFI5xoBwH9f4d9QFmOfiS:TvdvVoTSjOYR4QUVIgBwpFLaS","tlshash":"6e32af8071ff1c50ff85c2f69be68efa2c2b1895c619016f5240b476397525e9c294bb","first_seen":"2023-04-05T09:25:54Z","last_seen":"2026-08-07T08:17:20.09509Z","times_seen":34518,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/icon-192x192.png","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /icon-192x192.png HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Sep 2024 11:14:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66fa8828-bf3\"\r\nexpires: Sun, 08 Mar 2026 21:05:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1639\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R95Sqi%2B%2BQhOUqAmDBl5CuF0YaSfrq9TaXTHdCvqKNy5zlB%2B859qEixWEgEbHluvyzVt444NzEWuVNVuDiJ4%2FYaM50vIigPa6ZQn4FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc32b0db256bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1a1650d2c76bfc1ac484646c19e495b9","sha1":"fe58d66042ce9241226f5da9370230285ff604fc","sha256":"6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8","sha512":"79c5c9278959bc94f66434779bebc1b46c055655f0bc58aa375f179c227e7ac0e52dea196764719d42aadcf98e4fd3b5a4488f2db977edde430aa3df733c03bc","ssdeep":"","tlshash":"bd514cd3253318e8e2dbfd7ace62041f656691ce5638ec120568de720c8985dc070caa","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-05T23:46:15.157816Z","times_seen":16533,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/favicon.svg","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 30 Sep 2024 11:14:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 1639\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"66fa8828-37c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tl%2Bp906Z4hATzF46tH2UuUXVrWLiEy3pScgRvXe62Bm3ZRFRnxdQN7KAh2lvMrmHeLhXqt0dFryzAg1XsPAoB5P7YiQGJnRZhx5oSQ%3D%3D\"}]}\r\ncf-ray: 9c9dc32b0db356bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9ee2d4b0edd9f8ba2fb7242162c2c47","sha1":"398522893cf2cdefb5176f11bc67eab31c2d7382","sha256":"a462f1c5333e16b48335054493cfd1d0a13a96847b4b9ffe2cf24403e6e86010","sha512":"e404678e96fe6f6d1fe6c1390e4a64d90844a2d8903f84f1a34b23137593da5ba04112d9504b8bf480b392b294830a363344c5767e3bb5b7a3cb6f5df2a3aa45","ssdeep":"","tlshash":"97114493d060e71ad4c9e16bef61fca0116720cee5b745d485d95a34500fcdbfc08668","first_seen":"2023-05-09T00:01:39Z","last_seen":"2026-08-06T02:36:40.64466Z","times_seen":15696,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:52.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-b146\"\r\nexpires: Sat, 07 Feb 2026 09:05:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1639\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6g1SwyHpAcxVVtlqoHx0y3cHdqtCsB%2BHFyeubuLNsGq3INK7ZES%2FB9zCkME%2BWJSbQ9xNbYOtyb%2FmH5fOydx4crqBXYZw0%2BwcG1INA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33c7e4e56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"e059660b1f376fd03f7741b0a7be21dc","sha1":"1e45fe3df6264f3b5ba06ff997eeb27088e6e5b2","sha256":"56050615aaf9af647c0888245f83357f4ce8288eb2e3947745bd40b38a61e915","sha512":"9f6353b8dbbc6ccfb9309b28fe2f0d5270b4e6efad5eae68b12efb5b0d31d98c4e3ffbaadb15c2ed2dfc55ff9054bf6565a8b006da248db68fe3f0c86fddefec","ssdeep":"768:/wxVeciROMmuoyDGzoWs6/zRoP8DwpF00DiTCV/RsoKCdoEM+ERE/:/keNRG/zoWlzRo9F00u2V/RsoFnMLU","tlshash":"c21385c837f62d161173f89756cb9dd26218c0033569e84cba6c37b85f8e52c92f97a1","first_seen":"2026-02-06T21:05:53.940315Z","last_seen":"2026-02-06T21:39:03.972727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telez.sbs/api/index/config","fqdn":"telez.sbs","domain":"telez.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telez.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 07:09:24 GMT","end":"Thu, 16 Apr 2026 08:08:09 GMT"},"fingerprint":{"sha1":"FA:35:31:E2:2B:E1:E5:39:B3:ED:37:B2:F7:BD:97:78:D1:14:A1:3D","sha256":"ED:AD:E6:7D:C8:F7:35:45:71:E6:07:AD:4B:40:28:84:EE:13:63:D1:57:12:58:D5:7C:BE:FC:AE:10:2D:CA:E3"}}},"request":{"raw":"GET /api/index/config HTTP/1.1\r\nHost: telez.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teaeaagram.one/\r\nOrigin: https://teaeaagram.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:32:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Authorization, Sec-Fetch-Mode, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, If-Match, If-None-Match, If-Unmodified-Since, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Accept-Language, Origin, Accept-Encoding, Access-Token, token, version\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, post\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IU%2BMS7mIOnSKKqJmN1xbK%2B9w%2BVA1%2FTUs4KjxWGNLbXo2t989zw4pzHA0WK0LgX%2FO4w%2F0TLiAXCOSS8fSHMA1F5ZiOU0MZg%3D\"}]}\r\ncf-ray: 9c9dc3292ab756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"763648035f983e78c1fa37cd8d0e9e16","sha1":"0a0f12a868e445cf894c85f5b1b6301bd132dcb4","sha256":"e1886751a8f2eddd41ebe5720ce53143c78628e7f548ff2ae2cd535ac837893b","sha512":"5e998d23dda600c24610efc5d319d4ef6ebe81f0633d68867a34ae72973de30113e7410fd1bf263ad94663d9be32a3694668454057d2f0d9813af094112456d8","ssdeep":"","tlshash":"9d318247c60a223257c743b6311e194bb271805ea3127a0d1dec622e03ea92de3f388a","first_seen":"2026-02-06T21:05:53.946812Z","last_seen":"2026-02-06T21:39:03.971038Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":90,"dns":62,"connect":3,"send":0,"wait":897,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:52.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-b146\"\r\nexpires: Sat, 07 Feb 2026 09:05:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1639\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FNdlYel%2B%2FMwbJO6bm%2B5gThEOXOhH0dnxJH0Hor3%2BiSeeEmsrI9slwqJYgfXRRiv5JDzUw0ZWVSrFhIOPTEgjoHG5Dc3c4u55yyypA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33c8e5156bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"e059660b1f376fd03f7741b0a7be21dc","sha1":"1e45fe3df6264f3b5ba06ff997eeb27088e6e5b2","sha256":"56050615aaf9af647c0888245f83357f4ce8288eb2e3947745bd40b38a61e915","sha512":"9f6353b8dbbc6ccfb9309b28fe2f0d5270b4e6efad5eae68b12efb5b0d31d98c4e3ffbaadb15c2ed2dfc55ff9054bf6565a8b006da248db68fe3f0c86fddefec","ssdeep":"768:/wxVeciROMmuoyDGzoWs6/zRoP8DwpF00DiTCV/RsoKCdoEM+ERE/:/keNRG/zoWlzRo9F00u2V/RsoFnMLU","tlshash":"c21385c837f62d161173f89756cb9dd26218c0033569e84cba6c37b85f8e52c92f97a1","first_seen":"2026-02-06T21:05:53.940315Z","last_seen":"2026-02-06T21:39:03.972727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1b649\"\r\nexpires: Sat, 07 Feb 2026 09:05:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVdyyoE5RRCH%2BoF1oSxWKnjXSHs4ysLuJdCoe6H1jxPK0n8gX6%2BB9Wb3nIE9a6TIdcJEmjzWyOqes67QERENpIzOasetF86S7ZQwPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cae5556bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112201,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abfd10612afcd4832510fed36e0cb359","sha1":"9efac7841a02c0f42b759cfb1031450ef3f03a1f","sha256":"59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6","sha512":"47bfa40abd96eeaa4eb77df545a791332cf9e13984f1308c91af0c40e4b7aff77f326815e72f6ae583806530d7a39c956ac6953efdf7f5f03ba0972ec67643c9","ssdeep":"1536:mqixWUY94HnezpiFzFLzzov27gIGMVkzqjpn6zk:H+7Y94HekF5z8u7gIGMxj/","tlshash":"05b3b44516f3225b181260b5e78f70b5a2a6a11f5347c8983c9f43847f9173e82febe9","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.975237Z","times_seen":434,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:52.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-b146\"\r\nexpires: Sat, 07 Feb 2026 09:05:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1639\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iq%2FAx8Tcfslb9VnJhwofWzadK5%2FS7r3xTs2FJOKnnc9NjF9Xlrsksnc87n3fIv8qaFnjcUm5Mdw%2FNZj8sOmlPN2OR0IhdjPTLL%2Br5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33c7e5056bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"e059660b1f376fd03f7741b0a7be21dc","sha1":"1e45fe3df6264f3b5ba06ff997eeb27088e6e5b2","sha256":"56050615aaf9af647c0888245f83357f4ce8288eb2e3947745bd40b38a61e915","sha512":"9f6353b8dbbc6ccfb9309b28fe2f0d5270b4e6efad5eae68b12efb5b0d31d98c4e3ffbaadb15c2ed2dfc55ff9054bf6565a8b006da248db68fe3f0c86fddefec","ssdeep":"768:/wxVeciROMmuoyDGzoWs6/zRoP8DwpF00DiTCV/RsoKCdoEM+ERE/:/keNRG/zoWlzRo9F00u2V/RsoFnMLU","tlshash":"c21385c837f62d161173f89756cb9dd26218c0033569e84cba6c37b85f8e52c92f97a1","first_seen":"2026-02-06T21:05:53.940315Z","last_seen":"2026-02-06T21:39:03.972727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-40305\"\r\nexpires: Sat, 07 Feb 2026 09:05:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfmbaqpXfTvBL10PfjXljpyFQnNLl2fOk9V9bTicPEOmLUdyRHDGo1F6KHtjolTYLdRNbqJS39Y19RS%2Byf0N0MLUIeBR%2F4I3GWATsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cce5a56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262917,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c45bd2047e2c8ff555e1b201bc9bf002","sha1":"ac50d9ee170c2f026ae8822b2b46cac84e239271","sha256":"58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3","sha512":"727619c82b8b5fef6772c6b400435c0a5e8f8f4654ef9c13c21a85dee316708a86a8212f5fdb8e62c7e67c75f358aab9cdccc9b721197371dfd6b75a82b7bee1","ssdeep":"6144:GQzezxKzOzzMz4z3T6vR3miT9mRYW6Tymw+g6sE7ROxZ9pI8w+EkHJVNzt7I:rsE7ROxZ9pI8w+ECJVc","tlshash":"5a44a580efad1502422130698c5d47cc5a7ca03b54d9896e7e9ce6e83fac83db5b6f74","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.973969Z","times_seen":430,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-40305\"\r\nexpires: Sat, 07 Feb 2026 09:05:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJCgcm14U%2BBVtfSKx8T%2B%2BKGYEMItwEBSAmnSaI9lCRereLZdWkGBnDBIMGvoQzt9eVIuwI0%2BrHuOvqKzbseHsvp%2FMZ7WtdBE7Qp2Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cde5b56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262917,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c45bd2047e2c8ff555e1b201bc9bf002","sha1":"ac50d9ee170c2f026ae8822b2b46cac84e239271","sha256":"58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3","sha512":"727619c82b8b5fef6772c6b400435c0a5e8f8f4654ef9c13c21a85dee316708a86a8212f5fdb8e62c7e67c75f358aab9cdccc9b721197371dfd6b75a82b7bee1","ssdeep":"6144:GQzezxKzOzzMz4z3T6vR3miT9mRYW6Tymw+g6sE7ROxZ9pI8w+EkHJVNzt7I:rsE7ROxZ9pI8w+ECJVc","tlshash":"5a44a580efad1502422130698c5d47cc5a7ca03b54d9896e7e9ce6e83fac83db5b6f74","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.973969Z","times_seen":430,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/main.1b6dcd3f4e53c5acfd25.css","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /main.1b6dcd3f4e53c5acfd25.css HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Oct 2025 12:33:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f62c04-23c1f\"\r\nexpires: Sat, 07 Feb 2026 09:05:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1641\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5KNj%2FDuTWaS04hpEBFUWPRqelNXqqzEnq1lY5k5XoeAUk0K30b30Pr5vxr8bKIEpfUg0STHYWXDBz7oFwyVu0BxKVzrWkYE0273bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc3282d9156bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (792)","md5":"2c3e0d7807d04d5bf481a7668bae6eac","sha1":"ad7d40062d0a1d43df0aea4b69d3c21631dda87d","sha256":"cd7676c9ba5e32d72d44b7083ebb8f8e9ac81d44ca64371daea2a130b8e10f16","sha512":"471a6effbf02dba9cb95da53147316f6d299f50a7905fd49d1b02432bffcc0ac300ba16b9ca359fe7b7cd0a91dc961bc0c862667f25e484dd564d79b9609ac77","ssdeep":"1536:I+pizCGs0Gaf4EgYDbNlDAehOp5lnDDNJTI8bYMjSsOtIuCtO4RH7Z:+s0Gaf4EgYDbNlDAehQlnDrpF","tlshash":"30e3a650e9f40d60762bc1bd72c6d6d8ab7c90819d0ace6ebad6309c4fcd3e911d2789","first_seen":"2025-12-20T06:25:37.660979Z","last_seen":"2026-02-06T21:39:03.978075Z","times_seen":10,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:52.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-b146\"\r\nexpires: Sat, 07 Feb 2026 09:05:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1639\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LN6%2Bl6WVKl81472vvY2MtbkOghpido9AQuspZPEhpKci77dRld0kR8XuKAK9M7aUTtUYp%2FippxjFgv6rPt%2F9dRYiw%2FwA29sHJEoMVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33c8e5256bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"e059660b1f376fd03f7741b0a7be21dc","sha1":"1e45fe3df6264f3b5ba06ff997eeb27088e6e5b2","sha256":"56050615aaf9af647c0888245f83357f4ce8288eb2e3947745bd40b38a61e915","sha512":"9f6353b8dbbc6ccfb9309b28fe2f0d5270b4e6efad5eae68b12efb5b0d31d98c4e3ffbaadb15c2ed2dfc55ff9054bf6565a8b006da248db68fe3f0c86fddefec","ssdeep":"768:/wxVeciROMmuoyDGzoWs6/zRoP8DwpF00DiTCV/RsoKCdoEM+ERE/:/keNRG/zoWlzRo9F00u2V/RsoFnMLU","tlshash":"c21385c837f62d161173f89756cb9dd26218c0033569e84cba6c37b85f8e52c92f97a1","first_seen":"2026-02-06T21:05:53.940315Z","last_seen":"2026-02-06T21:39:03.972727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-40305\"\r\nexpires: Sat, 07 Feb 2026 09:05:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z294Uhxw8HBJqjrECEZ8zld2z4FbMj3QsBM9t7QxuTuZj3PZQUkCiz%2BTx5T7Xlfcqbr9IsjnVKGSlATU0mHdiYWqRmx4XstKYA3uFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cce5856bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262917,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c45bd2047e2c8ff555e1b201bc9bf002","sha1":"ac50d9ee170c2f026ae8822b2b46cac84e239271","sha256":"58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3","sha512":"727619c82b8b5fef6772c6b400435c0a5e8f8f4654ef9c13c21a85dee316708a86a8212f5fdb8e62c7e67c75f358aab9cdccc9b721197371dfd6b75a82b7bee1","ssdeep":"6144:GQzezxKzOzzMz4z3T6vR3miT9mRYW6Tymw+g6sE7ROxZ9pI8w+EkHJVNzt7I:rsE7ROxZ9pI8w+ECJVc","tlshash":"5a44a580efad1502422130698c5d47cc5a7ca03b54d9896e7e9ce6e83fac83db5b6f74","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.973969Z","times_seen":430,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1d14c\"\r\nexpires: Sat, 07 Feb 2026 09:05:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1635\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZU3HaePHohmHO1Hjl26wnYZOZmr%2BelCgmmgE5LM29DV8sEZLOj%2Fqt8PQ5hE8S%2B2dYSUsEQIKumaNrGvf7tb4TWvIEv%2BbDBY3V0q8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d3e6656bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"dee0b5a2f2d8533ccc49b6949d2f942d","sha1":"d71623fb971b85bac16ba1b243d04dfb3ef516db","sha256":"0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f","sha512":"796682e315b9723ec3080639b31782e2590f25765301839fe1054786e9c0f9b71259766f3d201b5068129ebc67641754f7dbcbb0bfdd5013289e192ddcb9f8e7","ssdeep":"3072:RVxTCNZ6iFBsU3Jjh9DagCScYte4iiRaE:RVxxdScYte4ii9","tlshash":"6ac3514c6cf720a69623717d9b5f5109b6b9a803161dce00bd5cc2a0af94d3c9af9fd8","first_seen":"2023-03-13T11:21:32Z","last_seen":"2026-07-02T12:51:56.642294Z","times_seen":457,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1d14c\"\r\nexpires: Sat, 07 Feb 2026 09:05:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1635\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MdEeEalHfQHz46XRcps5HtDke01%2FCbArv8JqJ6Ltr5seth7kL0i%2FYutbk0QsA9KpzquYwPAV6N6%2FGS4f8OnxJvGFTRhKmeMLjYqAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d3e6756bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"dee0b5a2f2d8533ccc49b6949d2f942d","sha1":"d71623fb971b85bac16ba1b243d04dfb3ef516db","sha256":"0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f","sha512":"796682e315b9723ec3080639b31782e2590f25765301839fe1054786e9c0f9b71259766f3d201b5068129ebc67641754f7dbcbb0bfdd5013289e192ddcb9f8e7","ssdeep":"3072:RVxTCNZ6iFBsU3Jjh9DagCScYte4iiRaE:RVxxdScYte4ii9","tlshash":"6ac3514c6cf720a69623717d9b5f5109b6b9a803161dce00bd5cc2a0af94d3c9af9fd8","first_seen":"2023-03-13T11:21:32Z","last_seen":"2026-07-02T12:51:56.642294Z","times_seen":457,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/main.d2ce003bc27e5757e049.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /main.d2ce003bc27e5757e049.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 08:36:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969f8a3-18648b\"\r\nexpires: Sat, 07 Feb 2026 09:05:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1641\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qrElcKb3UW3RkaXTkHVmh6d1GeOtCngNzibeSea1XDyg%2FYWyJZYlSxx5fWN5gEARM4ECHGIy1bzIgUV4etCLlLU96cAJsU3Ou8LmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc3282d9056bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598603,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (321)","md5":"3f54c56bf2ed3eae620bb430d343cd88","sha1":"e5753e1e529b6e7d2b59b02569f3906483fdaa0d","sha256":"b6dc390123007dff10eb3e892b7a614e4d7236961b2cd48bde71f33d3e51e8dc","sha512":"f510326a5d5dbe0d4246c823e7971c4067a1ca56a96f30965a2720457454e2acf60ccd87e2ebee04f1b2325bda0a29eddb534a134fed672e1996ce6edd95237b","ssdeep":"6144:q5kB0yKCHOVdcyrtzTlPbNqmw+/0GBC9sWB8bJv7LwB9+hYIlrhNYKEwkIC:nxHOsyTNb/at6x16","tlshash":"b225b59135e52d1f42a6e8fa7a0bd8e732654113384cbc8078fd32241fdc69c99fa769","first_seen":"2026-02-06T21:05:53.949528Z","last_seen":"2026-02-06T21:39:03.974553Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /rlottie-wasm.51d175377b5332e82d64.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1d14c\"\r\nexpires: Sat, 07 Feb 2026 09:05:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1635\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6rTYlyXA%2FqIUU0Ht1AR2xzDzyXO0qUbv6jmqdwdK6fHrXYefbE7UpvyhvM5FR23TJul0t0PCyHytc4tGgYJQupqsHWb%2BtWxTs2IVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d3e6556bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"dee0b5a2f2d8533ccc49b6949d2f942d","sha1":"d71623fb971b85bac16ba1b243d04dfb3ef516db","sha256":"0ef3fc6b7fe94349a8ebb2eeae0b8464d5250931bd70e96fa9b6e182d8a1bd9f","sha512":"796682e315b9723ec3080639b31782e2590f25765301839fe1054786e9c0f9b71259766f3d201b5068129ebc67641754f7dbcbb0bfdd5013289e192ddcb9f8e7","ssdeep":"3072:RVxTCNZ6iFBsU3Jjh9DagCScYte4iiRaE:RVxxdScYte4ii9","tlshash":"6ac3514c6cf720a69623717d9b5f5109b6b9a803161dce00bd5cc2a0af94d3c9af9fd8","first_seen":"2023-03-13T11:21:32Z","last_seen":"2026-07-02T12:51:56.642294Z","times_seen":457,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"teaeaagram.one/rlottie-wasm.51d175377b5332e82d64.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-a9a1\"\r\nexpires: Sat, 07 Feb 2026 09:05:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1636\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZH4eQg8v02KZivu%2F0Xm7JhxVBq%2FOdtl7yZFi2q2x9oxpxobtDyKkNNGauetGZNm5rmxiH8ntV0v7M%2FrjlnnQ4qPHcwMbZ3XVa2%2BQNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d0e6056bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (573)","md5":"39cea3339b6d415c70caa47bdaa0aea6","sha1":"f147bc291c160bc5d77d2f4acc7319da2d5abe4b","sha256":"6add3ad1b88e9e9a9b1ed162fcbb3caef0c26b0e3a493050632565b31be54753","sha512":"55936fe8fadb795dfec98c7d2dcc5f2d3ac1fa51ef5593105430df33f50a9f75fc24cd2b7b0f08ba1e0816401b3374f2f6963b487d20b9b996fd0a6fd2a7023d","ssdeep":"768:1HOVdq1vykITtL3TlrTr5AAMb0evEyVPkE0qorw+/mPrh4UGToPYx:1HOVdq1vyfTtL3TlrTr5AAMbVvEyeE0T","tlshash":"191362627a1232374bd5c3ba225dc6c7035b96733f2e58d034ae731483e6e9895f19a3","first_seen":"2026-02-06T21:05:53.934972Z","last_seen":"2026-02-06T21:39:03.970407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-a9a1\"\r\nexpires: Sat, 07 Feb 2026 09:05:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1636\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xfx3ddIDcRRGH8pWEWIKvjIOBYk6RR%2BPNn3pbcGyRTZs0cC5o03CkJUkBM0sdj8Tv218u8ev96moge%2FTSJb0L0ZBRcpqiztqP1J01A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d1e6156bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (573)","md5":"39cea3339b6d415c70caa47bdaa0aea6","sha1":"f147bc291c160bc5d77d2f4acc7319da2d5abe4b","sha256":"6add3ad1b88e9e9a9b1ed162fcbb3caef0c26b0e3a493050632565b31be54753","sha512":"55936fe8fadb795dfec98c7d2dcc5f2d3ac1fa51ef5593105430df33f50a9f75fc24cd2b7b0f08ba1e0816401b3374f2f6963b487d20b9b996fd0a6fd2a7023d","ssdeep":"768:1HOVdq1vykITtL3TlrTr5AAMb0evEyVPkE0qorw+/mPrh4UGToPYx:1HOVdq1vyfTtL3TlrTr5AAMbVvEyeE0T","tlshash":"191362627a1232374bd5c3ba225dc6c7035b96733f2e58d034ae731483e6e9895f19a3","first_seen":"2026-02-06T21:05:53.934972Z","last_seen":"2026-02-06T21:39:03.970407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T21:32:48.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Nov 2025 04:17:14 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mROBRYvrAQqOQZM4ClpiXM58rHKomXqzmVPAdYCfpdsIcx6iKx8DcJq84NBh%2Bty5%2FZPlZvJuzuj7D%2BOg0Kso7JWzT4jH3kb%2FCdkC0A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c9dc3222e9ab500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (445)","md5":"2b47d3a016c1a3aeea9906cba868e75e","sha1":"7171d31c10e1fd7dd53855fe351de54da34619b6","sha256":"3fcdc7522e6492e5e3b77166c5a8a80b514a44d16b8293fb9703e9ecaf52d3b7","sha512":"a0df5598573f2745f40cff3622508c098eacbbe1269376e54867d6f8112fec7bf770ba3d8512752208a67000f5f2261260bfa032928547bd862cfd7dc805b254","ssdeep":"","tlshash":"5f613293cb08884a6361832a99e3f0c8c216d809dae57c51f5cd55ab4dd1ff1c5f326c","first_seen":"2026-02-06T21:05:53.938192Z","last_seen":"2026-02-06T21:39:03.975699Z","times_seen":8,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":808,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/compatTest.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /compatTest.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Sep 2024 11:14:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66fa8828-9f0\"\r\nexpires: Sat, 07 Feb 2026 09:05:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1641\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Fkm4Bdvj%2B50AU1%2By9Djkio%2BYXYbAHp%2BGJYanCWwKzE%2BBM%2FnATrVsQQ1rk6DNATr57m6YSc09soM0gDTi%2FIZdQDIF%2FHMfYyNEwYLtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc3282d9256bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2544,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (413)","md5":"da7800ea928a021f2539ab41e6f2323e","sha1":"0141da1dc85ca8f34212f3dde2fac9bf61f5adb7","sha256":"15c24ec2b4cb94f24e66750f09e7071e5659e20a5ed926f69f565e20a81027cf","sha512":"228ca1c1f1ff8de139ebcfa7b084bc40d467a56ddccd103cf02a3fa26ba8c1b4d1961904511198e2fb6797837414bb3c09fc9f0902c3874f2467f279d526f0a9","ssdeep":"","tlshash":"fa5125190db5726150796167fb1bb2433a294133050cfb64a620cf393eb285bc19fde9","first_seen":"2024-06-30T22:36:50Z","last_seen":"2026-08-05T23:46:15.17999Z","times_seen":14200,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/notification.mp3","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://teaeaagram.one/","date":"2026-02-06T21:32:49.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /notification.mp3 HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 10880\r\nlast-modified: Mon, 30 Sep 2024 11:14:48 GMT\r\netag: \"66fa8828-2a80\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1639\r\ncontent-range: bytes 0-10879/10880\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbvfT6lnTcDFQQUERqpNK2un9LC%2BErThNrMVpugH%2FDnpAksGZ3w65LMHRz048XseHSrQZj1VOmEdtSVKCQR%2B8%2F4KpCRH2QlXxlmuPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9dc329bda456bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10880,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"eba09b6a457792c52fc610b5f9f974b3","sha1":"95e6e0f7648e28ea21bc434054ea59aba3a35aea","sha256":"86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6","sha512":"9dfc5ff830c9ed75c9923528c31e1361fa36500d76a209cd475984e5585a644c8aff1600bf02a658ef363436a51988ff1e63aa7606e541dc4a7b3449c5be4852","ssdeep":"192:RuQQeX7rYX/WUUIk8DLh+2BHpZqlXCYP69tuORf6tVQRa/nwNQBv5JC:RRYeUUEDLk2VClyaV0aZ5g","tlshash":"37226b18af11056ef4866bf0b3939b8dc42d26c37a26d4cdd3a5d7e369430e2a7d500d","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-05T23:46:15.09774Z","times_seen":16892,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1b649\"\r\nexpires: Sat, 07 Feb 2026 09:05:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Arbzb09QiPw9GUWdzj8UO%2Fc1OA0KD%2FwtGrIHYZh1jRIfCq7mz1M2h0DyxRA9vjsXZ1nBjMJtWgvk1n97dINs8CqPNOwzlS0TYsnrvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cae5456bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112201,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abfd10612afcd4832510fed36e0cb359","sha1":"9efac7841a02c0f42b759cfb1031450ef3f03a1f","sha256":"59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6","sha512":"47bfa40abd96eeaa4eb77df545a791332cf9e13984f1308c91af0c40e4b7aff77f326815e72f6ae583806530d7a39c956ac6953efdf7f5f03ba0972ec67643c9","ssdeep":"1536:mqixWUY94HnezpiFzFLzzov27gIGMVkzqjpn6zk:H+7Y94HekF5z8u7gIGMxj/","tlshash":"05b3b44516f3225b181260b5e78f70b5a2a6a11f5347c8983c9f43847f9173e82febe9","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.975237Z","times_seen":434,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /src_config_ts-src_util_schedulers_ts.1f15112ae7a0fe407b07.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Nov 2025 04:17:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690acfc8-a9a1\"\r\nexpires: Sat, 07 Feb 2026 09:05:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1636\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xP0CwnifWQ6Mefn4auXe3be3Ja9tHRjWmvcNbVwG2RZf5%2FjolFG7acLV0A%2FMrrxAMnELUuvyEJdGo2oBh10URZkpJ1amB8pCn21mwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33d0e5e56bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (573)","md5":"39cea3339b6d415c70caa47bdaa0aea6","sha1":"f147bc291c160bc5d77d2f4acc7319da2d5abe4b","sha256":"6add3ad1b88e9e9a9b1ed162fcbb3caef0c26b0e3a493050632565b31be54753","sha512":"55936fe8fadb795dfec98c7d2dcc5f2d3ac1fa51ef5593105430df33f50a9f75fc24cd2b7b0f08ba1e0816401b3374f2f6963b487d20b9b996fd0a6fd2a7023d","ssdeep":"768:1HOVdq1vykITtL3TlrTr5AAMb0evEyVPkE0qorw+/mPrh4UGToPYx:1HOVdq1vyfTtL3TlrTr5AAMbVvEyeE0T","tlshash":"191362627a1232374bd5c3ba225dc6c7035b96733f2e58d034ae731483e6e9895f19a3","first_seen":"2026-02-06T21:05:53.934972Z","last_seen":"2026-02-06T21:39:03.970407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_pako_dist_pako_inflate_js.5f75bdcaf063c6c088d2.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-1b649\"\r\nexpires: Sat, 07 Feb 2026 09:05:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tptT7lgDEN2gECI92OKM8HTv7TuxW2i9I%2FZSA%2Fmr30bPczHlvfS4ibpdSXFTAcvUDVUUdlRgxijobjUSKJA%2BMJxHDZkRHgwTaSxfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cae5656bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112201,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abfd10612afcd4832510fed36e0cb359","sha1":"9efac7841a02c0f42b759cfb1031450ef3f03a1f","sha256":"59aadb6a5951b1b0873cf4d18aa71b1e73328f2cfa445c1752eb80566d6aeca6","sha512":"47bfa40abd96eeaa4eb77df545a791332cf9e13984f1308c91af0c40e4b7aff77f326815e72f6ae583806530d7a39c956ac6953efdf7f5f03ba0972ec67643c9","ssdeep":"1536:mqixWUY94HnezpiFzFLzzov27gIGMVkzqjpn6zk:H+7Y94HekF5z8u7gIGMxj/","tlshash":"05b3b44516f3225b181260b5e78f70b5a2a6a11f5347c8983c9f43847f9173e82febe9","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.975237Z","times_seen":434,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teaeaagram.one/vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js","fqdn":"teaeaagram.one","domain":"teaeaagram.one","tld":"one"},"ip":{"addr":"172.67.194.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js","date":"2026-02-06T21:32:52.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teaeaagram.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 10:06:33 GMT","end":"Wed, 06 May 2026 11:05:04 GMT"},"fingerprint":{"sha1":"E4:B5:FD:C2:AE:A9:29:0E:43:00:C1:EA:F2:E6:CA:DC:20:30:54:1B","sha256":"11:A1:37:06:F3:51:4D:70:4F:97:51:4D:29:E4:A9:8D:4E:5F:5A:19:D5:CC:4F:34:A7:FB:10:3B:43:80:7D:F8"}}},"request":{"raw":"GET /vendors-node_modules_mp4box_dist_mp4box_all_js.ae4c1ac754ab954b0df3.js HTTP/1.1\r\nHost: teaeaagram.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teaeaagram.one/src_lib_mediaWorker_index_worker_ts.a59801639a83a1085083.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 21:32:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Oct 2025 10:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f60d9a-40305\"\r\nexpires: Sat, 07 Feb 2026 09:05:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1638\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6Soacc85pjBcV7p34vU69ATLOV1h3KBM5hM0gta895Vo5IjIdJfkgPn3l2%2BW0eaDJu5KHiGlaaCXQz5qWWn0X787EIm2Cs2sY8TNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9dc33cce5956bb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262917,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c45bd2047e2c8ff555e1b201bc9bf002","sha1":"ac50d9ee170c2f026ae8822b2b46cac84e239271","sha256":"58f4991b5416c845769562384e27842d7e9170970c6200aba5b10f6fe82a29d3","sha512":"727619c82b8b5fef6772c6b400435c0a5e8f8f4654ef9c13c21a85dee316708a86a8212f5fdb8e62c7e67c75f358aab9cdccc9b721197371dfd6b75a82b7bee1","ssdeep":"6144:GQzezxKzOzzMz4z3T6vR3miT9mRYW6Tymw+g6sE7ROxZ9pI8w+EkHJVNzt7I:rsE7ROxZ9pI8w+ECJVc","tlshash":"5a44a580efad1502422130698c5d47cc5a7ca03b54d9896e7e9ce6e83fac83db5b6f74","first_seen":"2023-07-27T09:32:35Z","last_seen":"2026-02-06T21:39:03.973969Z","times_seen":430,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"teaeaagram.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"teaeaagram.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}