{"report_id":"53d0f4e7-68eb-41b1-b6d1-6e372b34da35","version":6,"status":"done","tags":[],"date":"2026-02-06T21:33:58Z","url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":0,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"title":"Telegram","dom":{"size":3138,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3138), with no line terminators","md5":"0ebbed363d4102836767982ea2675888","sha1":"7a60ff9505a48113c7848efd573e05b17cba8350","sha256":"487e329c69e1fdec0ca2f43d1e0b3d3c31df90a2dc659c57676401c5288c7a8d","sha512":"9bee98ce82c042bc9b68e6f3538b3dadd9975d9153c0e1126e6795537168ecbfe43e50307024d9648978a8cd44f30cc2c705cdd745460d24019c2fbb406adcc7","ssdeep":"","tlshash":"a85121938b28c84e2321863ad9b3f0ccc216d44feab47c50f58545ab4ae5ff0c5b3266","dom_hash":"domhash0f31abafeaf2029a3dea65104db1780c","first_seen":"2026-02-06T21:06:53.424216Z","last_seen":"2026-02-06T21:34:00.243578Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":0,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T21:33:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tegegrann.jdjdkdk.one","ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-02-06T21:06:51.11646Z","last_seen":"2026-02-06T21:06:51.11646Z","alert_count":34,"request_count":30,"received_data":1712437,"sent_data":14072,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/redirect.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"17773b57b87a678c98e26a7cac72df6c","sha1":"7422857aa75ee81cabcec2eed6c4a6168f363ee1","sha256":"375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f","sha512":"28d9e1c2af08154e653e2291db46f4110edbf9f5591192f8d695c8852f9c3c755d69dfb5a032a45f51e0a3fc9417f16c20d0772b1225ca9b85e5531e12fa8bfc","ssdeep":"","tlshash":"e8e07dda0279030417e013f36d82b4709137c2fb604c5d028d984321a1b9b4f5b7b84f","size":325,"data":"","first_seen":"2023-07-27T09:32:34Z","last_seen":"2026-08-11T05:55:54.245741Z","times_seen":11540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/compatTest.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e56b7aaea93e41fa5608aab3653ec69e","sha1":"262982aa7dfdb539070d68e220e0673214d86c47","sha256":"996ed63151d0fbc6f0b7fec827e9ad696a16647bd154c38be4b869c22bf1d9f0","sha512":"a87cd35e857d29ca2058647a66ff46e1eabb130c5549d9d63687dc0753bca17ac3ee4ccee491fde966e00fd87f9669a31ff6384b91e480e82c3b93f49a978992","ssdeep":"","tlshash":"4c51162a4cb5327150796167eb0fb14376298577060ce76ca120cf387eb185b825fee9","size":2914,"data":"","first_seen":"2025-04-25T09:53:23.698524Z","last_seen":"2026-06-20T03:07:39.60827Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/main.2447dec8f7f24c00301b.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be309e560ea0303d844f3bc5f814b4f","sha1":"59d6cc76f9f08238ea50fadf7a1fe95cdc390dc3","sha256":"d4020515923cd25260c31dfe94c1d9af6d9e32c2fe9e23a4102d507550add5a4","sha512":"26cd4a5fa3ed90c5366786cd55044020c1d29f314685bc4b0b36cf1b4b9b98ed1c83a6d3ce9adc803f8295cf419ca67dca3bc86d7e7761ba1ef0becafd4b24d1","ssdeep":"12288:tFaPsc54QfgEqxqjDrkAwaUBZza97LzJTYm7MFqrDaobwBYDI4n//:tw024ZJO8qrDVbP","tlshash":"a1b45cc571c6b4eaa3d309e5a4ab0098b63959403809c464f16dfce93e364aeb373f5d","size":500310,"data":"","first_seen":"2026-02-06T21:06:53.432509Z","last_seen":"2026-02-06T21:34:00.259608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/6708.21b7a34aeb75eaf81b0c.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d3bf1913c225d571500b115f903241","sha1":"63342f52f478b227194abab68a7b1d08a3c65490","sha256":"f646263ddc453a87b3abb142ea166ef434409303e1e5060a57d1ec909824696b","sha512":"e07c5638c440ec23fc4c2f37c493163ee8ce9b38eb722bbe4a5e611d73a3df46b17f6cb2e6f08d2f5b3866b6a74a4d9a2d5d723794f3e8e308058ad27456425c","ssdeep":"192:KIC6cWQ5hVT1/pammBj+hpYUTaI+ndqK+/GtsV17t1IYZ11:KIzcWKVTPSZ+TYU27nYK+3fR1IYZ11","tlshash":"7a12da56a131747e62a694d6e2140b027a36d0587c09a2bdf73c7cfb2c9680a35bcf78","size":9237,"data":"","first_seen":"2025-08-21T07:49:39.988976Z","last_seen":"2026-05-03T08:34:56.595961Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:42.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-10037\"\r\nexpires: Sat, 07 Feb 2026 09:33:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-11T05:55:54.142228Z","times_seen":15255,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/main.0f98df2c44734de67a19.css","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:36.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /main.0f98df2c44734de67a19.css HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-1ffad\"\r\nexpires: Sat, 07 Feb 2026 09:33:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130989,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (15445)","md5":"9c3ca412c89bfaae035f6452a532f4a3","sha1":"924e1ddda0f3ee43719027263f941a8838e78ae9","sha256":"bdb2a83f2ea09eba142f6b366994b8da3fec51c72ca2707026d0e7a04cbec512","sha512":"679a2c909c2be7ed034c9ef1a5f49818bdbf1a140e1ed5c883bbef8329b8239be7813d8b53f6b7f29f5b2097d68d3bc3d62b98d674148a5b1a2306010b527846","ssdeep":"768:w10Q9RiIf6m3lPrChnv3drscbWydO9wpXasUgknLLoo9+b6UbdWAkcI5/ydO8Qtk:IPRiSOrscb5SsUgknU7WF5oYfN+","tlshash":"70d3a6a4e98411e9a733c63e97c4e76c8d38f451de610f6bf247a11c4bca7da12d2b18","first_seen":"2025-10-12T15:34:45.602484Z","last_seen":"2026-05-03T08:34:56.587743Z","times_seen":22,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/notification.mp3","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:37.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /notification.mp3 HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:37 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 10880\r\nlast-modified: Thu, 29 Jan 2026 17:26:30 GMT\r\netag: \"697b9846-2a80\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-10879/10880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10880,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"eba09b6a457792c52fc610b5f9f974b3","sha1":"95e6e0f7648e28ea21bc434054ea59aba3a35aea","sha256":"86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6","sha512":"9dfc5ff830c9ed75c9923528c31e1361fa36500d76a209cd475984e5585a644c8aff1600bf02a658ef363436a51988ff1e63aa7606e541dc4a7b3449c5be4852","ssdeep":"192:RuQQeX7rYX/WUUIk8DLh+2BHpZqlXCYP69tuORf6tVQRa/nwNQBv5JC:RRYeUUEDLk2VClyaV0aZ5g","tlshash":"37226b18af11056ef4866bf0b3939b8dc42d26c37a26d4cdd3a5d7e369430e2a7d500d","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-11T05:55:54.328987Z","times_seen":16895,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/7784.2a486dcaaaf47415a095.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-5268\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/7784.2a486dcaaaf47415a095.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-5268\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/7784.2a486dcaaaf47415a095.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-5268\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/5905.04b286b6eff2126d05dc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-25e25\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9357.b3e7dbedc16ec1a328b7.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9357.b3e7dbedc16ec1a328b7.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-a7b\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"409454b8d5b2322ac5add3e856f42920","sha1":"1bd48ead37e3b055bfce770c5d9bc451e460d360","sha256":"8ba854aa31f72267597d055c5a7682761142a4d1316cb7132ddb64fb1277dfaf","sha512":"4b15615286eede0d09d96a13944fc2aed76e6e9f658c7c8103bcb5ea530c4d85052a5797828c5bf047bb624923b8af4048d51ed04cd6ea210e383253a34668bb","ssdeep":"","tlshash":"d351da445a73387a5ce3866bb0973b110c2513b13819e44216099eeb47b728f5b13f49","first_seen":"2026-02-06T21:06:53.426136Z","last_seen":"2026-02-06T21:34:00.254128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:42.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-10037\"\r\nexpires: Sat, 07 Feb 2026 09:33:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-11T05:55:54.142228Z","times_seen":15255,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/favicon.svg","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:37.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 892\r\nlast-modified: Thu, 29 Jan 2026 17:26:30 GMT\r\netag: \"697b9846-37c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9ee2d4b0edd9f8ba2fb7242162c2c47","sha1":"398522893cf2cdefb5176f11bc67eab31c2d7382","sha256":"a462f1c5333e16b48335054493cfd1d0a13a96847b4b9ffe2cf24403e6e86010","sha512":"e404678e96fe6f6d1fe6c1390e4a64d90844a2d8903f84f1a34b23137593da5ba04112d9504b8bf480b392b294830a363344c5767e3bb5b7a3cb6f5df2a3aa45","ssdeep":"","tlshash":"97114493d060e71ad4c9e16bef61fca0116720cee5b745d485d95a34500fcdbfc08668","first_seen":"2023-05-09T00:01:39Z","last_seen":"2026-08-11T05:55:54.238794Z","times_seen":15703,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/6708.21b7a34aeb75eaf81b0c.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:40.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /6708.21b7a34aeb75eaf81b0c.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-2415\"\r\nexpires: Sat, 07 Feb 2026 09:33:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9183)","md5":"29d3bf1913c225d571500b115f903241","sha1":"63342f52f478b227194abab68a7b1d08a3c65490","sha256":"f646263ddc453a87b3abb142ea166ef434409303e1e5060a57d1ec909824696b","sha512":"e07c5638c440ec23fc4c2f37c493163ee8ce9b38eb722bbe4a5e611d73a3df46b17f6cb2e6f08d2f5b3866b6a74a4d9a2d5d723794f3e8e308058ad27456425c","ssdeep":"192:KIC6cWQ5hVT1/pammBj+hpYUTaI+ndqK+/GtsV17t1IYZ11:KIzcWKVTPSZ+TYU27nYK+3fR1IYZ11","tlshash":"7a12da56a131747e62a694d6e2140b027a36d0587c09a2bdf73c7cfb2c9680a35bcf78","first_seen":"2025-08-21T07:49:39.988976Z","last_seen":"2026-05-03T08:34:56.595961Z","times_seen":23,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/5905.04b286b6eff2126d05dc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-25e25\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/main.2447dec8f7f24c00301b.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:36.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /main.2447dec8f7f24c00301b.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-7a25d\"\r\nexpires: Sat, 07 Feb 2026 09:33:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65486), with no line terminators","md5":"0be309e560ea0303d844f3bc5f814b4f","sha1":"59d6cc76f9f08238ea50fadf7a1fe95cdc390dc3","sha256":"d4020515923cd25260c31dfe94c1d9af6d9e32c2fe9e23a4102d507550add5a4","sha512":"26cd4a5fa3ed90c5366786cd55044020c1d29f314685bc4b0b36cf1b4b9b98ed1c83a6d3ce9adc803f8295cf419ca67dca3bc86d7e7761ba1ef0becafd4b24d1","ssdeep":"12288:tFaPsc54QfgEqxqjDrkAwaUBZza97LzJTYm7MFqrDaobwBYDI4n//:tw024ZJO8qrDVbP","tlshash":"a1b45cc571c6b4eaa3d309e5a4ab0098b63959403809c464f16dfce93e364aeb373f5d","first_seen":"2026-02-06T21:06:53.432509Z","last_seen":"2026-02-06T21:34:00.259608Z","times_seen":2,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/5905.04b286b6eff2126d05dc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-25e25\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/redirect.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:36.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /redirect.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 325\r\nlast-modified: Thu, 29 Jan 2026 17:26:30 GMT\r\netag: \"697b9846-145\"\r\nexpires: Sat, 07 Feb 2026 09:33:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"17773b57b87a678c98e26a7cac72df6c","sha1":"7422857aa75ee81cabcec2eed6c4a6168f363ee1","sha256":"375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f","sha512":"28d9e1c2af08154e653e2291db46f4110edbf9f5591192f8d695c8852f9c3c755d69dfb5a032a45f51e0a3fc9417f16c20d0772b1225ca9b85e5531e12fa8bfc","ssdeep":"","tlshash":"e8e07dda0279030417e013f36d82b4709137c2fb604c5d028d984321a1b9b4f5b7b84f","first_seen":"2023-07-27T09:32:34Z","last_seen":"2026-08-11T05:55:54.245741Z","times_seen":11540,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:37.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/main.0f98df2c44734de67a19.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11016\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\netag: \"68aeae38-2b08\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11016, version 1.0","md5":"15fa3062f8929bd3b05fdca5259db412","sha1":"6ff06a34f68ad0324ddec1bbe4d453c959178b36","sha256":"5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479","sha512":"07e96d7520b4ede158e77bef10a01a33cd8be7d263fe6900f89c023e65e4a63570e8a442dec2e96030fb563b25610005a748d48f9330fd31eb91b37d1003d376","ssdeep":"192:Tysuo7z1NVoTUYAKVOO7YVxRwHQUXFI5xoBwH9f4d9QFmOfiS:TvdvVoTSjOYR4QUVIgBwpFLaS","tlshash":"6e32af8071ff1c50ff85c2f69be68efa2c2b1895c619016f5240b476397525e9c294bb","first_seen":"2023-04-05T09:25:54Z","last_seen":"2026-08-13T14:07:18.895634Z","times_seen":34553,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:40.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9443.ba9f022714b7571294bc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-2cf8\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"23cf2c6db2f6b8013a326da142fdd765","sha1":"f16b161a30948d4cd752dbfbbc2808d86f298b0c","sha256":"755db875545ca3c15c29fe3c2373a79d167a768b9a34730c9580a5a801d1f8e3","sha512":"c05d24711dc005aef3c82ab03909d73c94b73113aa469c49845a3ff1b975de8ef94532e6109b96c896eea4ac204775717e25bc99bc4b5ddaf75e5fcc11df61f9","ssdeep":"192:s5MdJOqU8gP5HilXzTI5dW1RdjgUEqd9qoEhyKNRERAu2EmYqeaIgtBuHu6EjBET:oivU8gP5HilXzTRd0UxwoEhZzAX2Em8x","tlshash":"f532f7c12351a53ee38b98d9d87a04436130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2026-02-06T21:06:53.425249Z","last_seen":"2026-02-06T21:34:00.265172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9357.b3e7dbedc16ec1a328b7.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9357.b3e7dbedc16ec1a328b7.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-a7b\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"409454b8d5b2322ac5add3e856f42920","sha1":"1bd48ead37e3b055bfce770c5d9bc451e460d360","sha256":"8ba854aa31f72267597d055c5a7682761142a4d1316cb7132ddb64fb1277dfaf","sha512":"4b15615286eede0d09d96a13944fc2aed76e6e9f658c7c8103bcb5ea530c4d85052a5797828c5bf047bb624923b8af4048d51ed04cd6ea210e383253a34668bb","ssdeep":"","tlshash":"d351da445a73387a5ce3866bb0973b110c2513b13819e44216099eeb47b728f5b13f49","first_seen":"2026-02-06T21:06:53.426136Z","last_seen":"2026-02-06T21:34:00.254128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9357.b3e7dbedc16ec1a328b7.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9357.b3e7dbedc16ec1a328b7.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-a7b\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"409454b8d5b2322ac5add3e856f42920","sha1":"1bd48ead37e3b055bfce770c5d9bc451e460d360","sha256":"8ba854aa31f72267597d055c5a7682761142a4d1316cb7132ddb64fb1277dfaf","sha512":"4b15615286eede0d09d96a13944fc2aed76e6e9f658c7c8103bcb5ea530c4d85052a5797828c5bf047bb624923b8af4048d51ed04cd6ea210e383253a34668bb","ssdeep":"","tlshash":"d351da445a73387a5ce3866bb0973b110c2513b13819e44216099eeb47b728f5b13f49","first_seen":"2026-02-06T21:06:53.426136Z","last_seen":"2026-02-06T21:34:00.254128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:40.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9443.ba9f022714b7571294bc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-2cf8\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"23cf2c6db2f6b8013a326da142fdd765","sha1":"f16b161a30948d4cd752dbfbbc2808d86f298b0c","sha256":"755db875545ca3c15c29fe3c2373a79d167a768b9a34730c9580a5a801d1f8e3","sha512":"c05d24711dc005aef3c82ab03909d73c94b73113aa469c49845a3ff1b975de8ef94532e6109b96c896eea4ac204775717e25bc99bc4b5ddaf75e5fcc11df61f9","ssdeep":"192:s5MdJOqU8gP5HilXzTI5dW1RdjgUEqd9qoEhyKNRERAu2EmYqeaIgtBuHu6EjBET:oivU8gP5HilXzTRd0UxwoEhZzAX2Em8x","tlshash":"f532f7c12351a53ee38b98d9d87a04436130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2026-02-06T21:06:53.425249Z","last_seen":"2026-02-06T21:34:00.265172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:40.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9443.ba9f022714b7571294bc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-2cf8\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"23cf2c6db2f6b8013a326da142fdd765","sha1":"f16b161a30948d4cd752dbfbbc2808d86f298b0c","sha256":"755db875545ca3c15c29fe3c2373a79d167a768b9a34730c9580a5a801d1f8e3","sha512":"c05d24711dc005aef3c82ab03909d73c94b73113aa469c49845a3ff1b975de8ef94532e6109b96c896eea4ac204775717e25bc99bc4b5ddaf75e5fcc11df61f9","ssdeep":"192:s5MdJOqU8gP5HilXzTI5dW1RdjgUEqd9qoEhyKNRERAu2EmYqeaIgtBuHu6EjBET:oivU8gP5HilXzTRd0UxwoEhZzAX2Em8x","tlshash":"f532f7c12351a53ee38b98d9d87a04436130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2026-02-06T21:06:53.425249Z","last_seen":"2026-02-06T21:34:00.265172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/5905.04b286b6eff2126d05dc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-25e25\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:42.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-10037\"\r\nexpires: Sat, 07 Feb 2026 09:33:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-11T05:55:54.142228Z","times_seen":15255,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/icon-192x192.png","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:37.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /icon-192x192.png HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Jan 2026 17:26:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9846-bf3\"\r\nexpires: Sun, 08 Mar 2026 21:33:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1a1650d2c76bfc1ac484646c19e495b9","sha1":"fe58d66042ce9241226f5da9370230285ff604fc","sha256":"6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8","sha512":"79c5c9278959bc94f66434779bebc1b46c055655f0bc58aa375f179c227e7ac0e52dea196764719d42aadcf98e4fd3b5a4488f2db977edde430aa3df733c03bc","ssdeep":"","tlshash":"bd514cd3253318e8e2dbfd7ace62041f656691ce5638ec120568de720c8985dc070caa","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-11T05:55:54.190987Z","times_seen":16536,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/7784.2a486dcaaaf47415a095.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:41.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-5268\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9357.b3e7dbedc16ec1a328b7.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:42.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9357.b3e7dbedc16ec1a328b7.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-a7b\"\r\nexpires: Sat, 07 Feb 2026 09:33:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"409454b8d5b2322ac5add3e856f42920","sha1":"1bd48ead37e3b055bfce770c5d9bc451e460d360","sha256":"8ba854aa31f72267597d055c5a7682761142a4d1316cb7132ddb64fb1277dfaf","sha512":"4b15615286eede0d09d96a13944fc2aed76e6e9f658c7c8103bcb5ea530c4d85052a5797828c5bf047bb624923b8af4048d51ed04cd6ea210e383253a34668bb","ssdeep":"","tlshash":"d351da445a73387a5ce3866bb0973b110c2513b13819e44216099eeb47b728f5b13f49","first_seen":"2026-02-06T21:06:53.426136Z","last_seen":"2026-02-06T21:34:00.254128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:40.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /9443.ba9f022714b7571294bc.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-2cf8\"\r\nexpires: Sat, 07 Feb 2026 09:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"23cf2c6db2f6b8013a326da142fdd765","sha1":"f16b161a30948d4cd752dbfbbc2808d86f298b0c","sha256":"755db875545ca3c15c29fe3c2373a79d167a768b9a34730c9580a5a801d1f8e3","sha512":"c05d24711dc005aef3c82ab03909d73c94b73113aa469c49845a3ff1b975de8ef94532e6109b96c896eea4ac204775717e25bc99bc4b5ddaf75e5fcc11df61f9","ssdeep":"192:s5MdJOqU8gP5HilXzTI5dW1RdjgUEqd9qoEhyKNRERAu2EmYqeaIgtBuHu6EjBET:oivU8gP5HilXzTRd0UxwoEhZzAX2Em8x","tlshash":"f532f7c12351a53ee38b98d9d87a04436130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2026-02-06T21:06:53.425249Z","last_seen":"2026-02-06T21:34:00.265172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T21:33:35.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:36 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 29 Jan 2026 17:26:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9842-c13\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3091), with no line terminators","md5":"eb23c3135693d299e8e4b0b6bc8dfb1f","sha1":"13e7c39d6a226e9573024ff8cd00cc937f5dd41e","sha256":"e4984d7fd00a9255679fd03ccb3d7424a568fcfa14b957169f3b5bc08df1cc0f","sha512":"74edbbebb784d22e2a5df6011d3ce5e60771273f537cedf407215acd1e499cd4ed99cbb578de51d369a0457ff1f0811644466c1185e4097f4f3a0ded90802681","ssdeep":"","tlshash":"2f5110938b28c84e2321863adab3f0c8c616d40ee9b47c50f58516eb49e5ff0c5b3265","first_seen":"2026-02-06T21:06:53.42752Z","last_seen":"2026-02-06T21:34:00.267864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":503,"dns":68,"connect":214,"send":0,"wait":214,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/compatTest.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/","date":"2026-02-06T21:33:36.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /compatTest.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:26:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b9846-b62\"\r\nexpires: Sat, 07 Feb 2026 09:33:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (413)","md5":"e56b7aaea93e41fa5608aab3653ec69e","sha1":"262982aa7dfdb539070d68e220e0673214d86c47","sha256":"996ed63151d0fbc6f0b7fec827e9ad696a16647bd154c38be4b869c22bf1d9f0","sha512":"a87cd35e857d29ca2058647a66ff46e1eabb130c5549d9d63687dc0753bca17ac3ee4ccee491fde966e00fd87f9669a31ff6384b91e480e82c3b93f49a978992","ssdeep":"","tlshash":"4c51162a4cb5327150796167eb0fb14376298577060ce76ca120cf387eb185b825fee9","first_seen":"2025-04-25T09:53:23.698524Z","last_seen":"2026-06-20T03:07:39.60827Z","times_seen":309,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"tegegrann.jdjdkdk.one","domain":"jdjdkdk.one","tld":"one"},"ip":{"addr":"107.148.55.183","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js","date":"2026-02-06T21:33:42.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jdjdkdk.one","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:33:57 GMT","end":"Wed, 29 Apr 2026 16:33:56 GMT"},"fingerprint":{"sha1":"D3:49:04:96:0B:2D:13:DD:B7:3B:BE:DE:2B:5D:64:D6:A7:E0:A7:1A","sha256":"F0:5E:90:15:D8:74:75:41:B2:B1:C4:DF:60:BB:9A:A7:A3:D6:43:D3:7A:6E:C6:5D:7A:77:FD:47:9B:30:CD:44"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: tegegrann.jdjdkdk.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tegegrann.jdjdkdk.one/9443.ba9f022714b7571294bc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:33:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 07:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68aeae38-10037\"\r\nexpires: Sat, 07 Feb 2026 09:33:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-11T05:55:54.142228Z","times_seen":15255,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"tegegrann.jdjdkdk.one/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"tegegrann.jdjdkdk.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}