{"report_id":"5a560825-52ce-47b6-b1e8-0a40406b7604","version":6,"status":"done","tags":[],"date":"2026-03-28T02:50:28Z","url":{"schema":"http","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"title":"Inicia sesión en tu cuenta de Microsoft","dom":{"size":5765,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (313)","md5":"ded6f161b2554df807da101f9bd29fed","sha1":"2c86e9e2c1e8a7e28d91b5f0cda421403877c43e","sha256":"e0692865981c0aadb9e0a7c54e0e57b6f06ca8acbbe1b16481c7ba6f628c6f1d","sha512":"6f94c43d976ed6f4530f348dbb27571bc59b870e978e0c0f73abf37655dbe7506739de865ecc9b0f6ed972416ddee72f892a249dfe8ec0720435858e6bfbc64a","ssdeep":"96:fcKo6RHFjnDy77kLHszhjBHyY8QfCPWCyN1NIqNIBVXMoU8eQkLWs6Z/+Ms6hKv:fVo6RHFjDgmHszh1QQClMoU2kKPJ+Ehg","tlshash":"24c1a92018e986339273b1dc77abd70570aa9513e909ca5476fc42f51fdeec54d4a38c","dom_hash":"domhash75a01dde5096aa29cc973d7626f76262","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T02:50:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"teieperformance.com","ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-26","domain_rank":0,"first_seen":"2025-12-25T14:32:25.577252Z","last_seen":"2026-03-28T01:02:42.688987Z","alert_count":60,"request_count":20,"received_data":330958,"sent_data":17191,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b2801b65a44c815e76a75d81378a671","sha1":"57ff424409c7e09fa4cec0b2615c346e2a23c2ed","sha256":"03d84e36b69b0ab745a0012b24e71b1a099414ea567f39437086847843788574","sha512":"29715d80d5180ad2f3f2e2057adfabd800501b0080b696803cad140a1a3b4ccbc5f45140f4290fd9b132254051ad00a841115aa7247633349fcda69f36d65c05","ssdeep":"","tlshash":"6bb0120300c890158037754d8760207337fe3d10674050d0601b153024ade802d1f181","size":103,"data":"","first_seen":"2026-03-28T02:50:29.469262Z","last_seen":"2026-03-28T09:08:05.014535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/redirect-checker.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dec9ae6664eeab5ed9656e4bb694167","sha1":"e19f798f5068e25dc5cb0036ab0d980388275def","sha256":"cb1584637524549c6dd7fc8d7f081776161774d578440c1a19fc28cf536592ea","sha512":"cf971f651f8f7e8df7105f0bf6fd7e87f92019b67b5b287934c5855fe4549231b6c266dc0baf8642aa88931e572ecbe5b4a73a9a486188093e55271d35cf3e3c","ssdeep":"","tlshash":"9a11060933fb2164ed2b24284d0b1626a563494f570fcd7cbd9d57984f49a2086a3bd7","size":1057,"data":"","first_seen":"2026-03-28T02:50:29.437776Z","last_seen":"2026-04-01T17:28:15.516255Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fb41d5fb054d3815bbf0913d0237dfa","sha1":"fbf192f1e99aff9e449cd5f92f5633bf4ac1b4ae","sha256":"785deb24a3783c7e29c44938f84d53df7df7a37c7e8e4c43f6b1c0ad5263c130","sha512":"4f4140258edc95eae11e7fef3bde4e894bd32e521418d40823cc72c31f539c97b8fe610629b772e7fae9fa842ed8f79e331f63e642abc88440bbc2659a5bd90e","ssdeep":"","tlshash":"9b31790928fb02b1627bb2b80acfa340353e70677409da963e4c8b541f1cdad1896389","size":1730,"data":"","first_seen":"2025-07-09T16:22:52.845192Z","last_seen":"2026-04-01T17:28:15.54947Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/user-time-tracker.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4acb2ed83b331bb9d620cbcda6509aa3","sha1":"5d9bb869e37e02bc722b153dfc522deaff80bd90","sha256":"2c9765f3953c5a834f34a371958c44b4fe758d58df30892b2b9c5d4fae761ebf","sha512":"55b0f72f39fd7fdc271cac9a2b12b7f1a9af2651ea76ebe47d9bcd3c36997083ee0b78597f298abadcc92d2f496202d274700cbb4aab0dec00370708e5685e16","ssdeep":"","tlshash":"11318b0e99fa00109533b5983fabb1687e61270b2949cea47cef2ac0cf427317654be5","size":1550,"data":"","first_seen":"2025-07-09T16:22:52.840818Z","last_seen":"2026-06-20T17:31:57.156728Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/js/main.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b767db2ce6d3a1212f2fe87fb9ce2aa","sha1":"1c31068c67bc52e9e984761bc873818cee511b21","sha256":"42345fee3cac7f012a8d6a803163d63256e0fb324b11be5979f2454f0547f9a3","sha512":"31d722e9b7c3eb64b87eab1f85b295856cb2de758a34e56846df959889f1ad4dbb3284dc39947d9142cebbe2e8a0a548adc0f793a29519287417f0e1594fba43","ssdeep":"","tlshash":"60316e2a64a30435abfb35e622af0ac875f054439c45d811387cdb991f71d91ccbebd1","size":1521,"data":"","first_seen":"2026-03-28T02:50:29.461176Z","last_seen":"2026-04-01T17:28:15.471085Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/requester.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ed223152c9939ceee60b9a7426ac2f","sha1":"523e661cda4add68288d910bb3bb8157139df1ac","sha256":"7fd2e0dca93bc880dfa1d2b50d1fbd06803d614f3b6d5507f9ef97f689324e9d","sha512":"e751ad832c640cd3698a316bb43a3ecbbcdd3c1b6495beb352c10ca22f47f9a100425c6e2bb0c658e19e06f2d2987eccef6b8637314c9891c31774d75f56f5a3","ssdeep":"","tlshash":"9f1148856bf3255242dbb4aa3a8f0010f027e40b39addf18fa9c43c9af51524ecb1f94","size":980,"data":"","first_seen":"2025-07-09T16:22:52.840061Z","last_seen":"2026-06-20T17:31:57.161401Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/timeme.min.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4449d618fa2f2f350a555c41bc782b63","sha1":"295754756d7517eb8f30d957e0f6a5cdb6c1dba5","sha256":"fcae9a7e0427744ff2199897d14c0d69e8434112f16851f587f7002b3fbe8704","sha512":"54bb82eddff6babe6476fa2b3dc1efab267c30ee2dda9096a83d894dc3038eb2256ef189842a8adf080c1b2c0063f32b6633d9050974b35bce484f53864a8cf2","ssdeep":"96:4rhbvTI/n3o/qfV5cIyxZOzIuAAX3C7UlSUc:4rpvTI/3o/qfV5cxZOzIqX30Q6","tlshash":"bfd1939df59825368cbbf362753f332c207767622c0a51d865bb9bd8bd24b8a411387c","size":6180,"data":"","first_seen":"2023-03-07T13:49:49Z","last_seen":"2026-07-17T18:56:54.351469Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6c4ce20f4df798743ad017e208476bf","sha1":"f845491b6d621400bd5b3c253105cbd3b9db53f7","sha256":"15c027de25c95f5ce5a19041e0eac4d5f6d3f99a68df0fa8cb946b512857d9f9","sha512":"1a5e7b0eaca920263c1c04ddf4156c87ae4ef6f042fd601a4989e7bee1548a8213e0a1514aa27f07cde8a8fd4b0d14ec12711602b75cbab787ddc50d3c46d5b7","ssdeep":"","tlshash":"9ed0123925d565607777f05e420faa1814662102324dc56d7c6cc6664f99d5852a3487","size":214,"data":"","first_seen":"2026-03-28T02:50:29.473808Z","last_seen":"2026-03-28T09:08:05.017814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/redirect-checker.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/assets/js/redirect-checker.js HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/javascript ; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IlJzQ3ZybkZtaUhSU2xCS0VOTHQrZGc9PSIsInZhbHVlIjoiVC9FWHF1YUg0WTN2SnJUS3dFYTlTSDdvaDFreTR0dzVIT1BDa2V1ekVCNWNmTVJZQ04xbFNPSW5tSWVoR0t1Q2k3Wi9tNGQ4N3VJUS9aam9yaytzaVBQaHdDKzBwM1BXWElWR3UzMVdMZENXWXFyQWptRmhpeHNGYkNYeHVyM3AiLCJtYWMiOiJkODZkYTc3OGNhNDE2NDlhZGFkY2IxZmQ2NDcxODQ4YzgyMjk2ZTBmNzFhM2NiYjVhOTVhMDU5NmNlNzkyMzY0IiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"C++ source, ASCII text","md5":"0dec9ae6664eeab5ed9656e4bb694167","sha1":"e19f798f5068e25dc5cb0036ab0d980388275def","sha256":"cb1584637524549c6dd7fc8d7f081776161774d578440c1a19fc28cf536592ea","sha512":"cf971f651f8f7e8df7105f0bf6fd7e87f92019b67b5b287934c5855fe4549231b6c266dc0baf8642aa88931e572ecbe5b4a73a9a486188093e55271d35cf3e3c","ssdeep":"","tlshash":"9a11060933fb2164ed2b24284d0b1626a563494f570fcd7cbd9d57984f49a2086a3bd7","first_seen":"2026-03-28T02:50:29.437776Z","last_seen":"2026-04-01T17:28:15.516255Z","times_seen":36,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":97,"dns":1,"connect":39,"send":0,"wait":230,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:08.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6IkdhVVZNd1RvdDhJZUlqdW1oN0NLOGc9PSIsInZhbHVlIjoiMHNEMktlRkZSTm1EMzA3UGpzYTBTR25KbEVSdExMUEJydGNJOEtNd1RET0kzU3pHWTJBclQ1Y2VaZEZPTXcvNitITm9GakwycWVkYmlaUEZoQTgvMzk2T1lwdGJDalZVNzYzdXhMbVVsMFAyb0Z3UmdBRk1WSHM2S200VE9RMTAiLCJtYWMiOiIyOGZlZDM2NTI5NWI1MDNhYmE3ZWMwMGEzNmRlY2ZiOGI3MDg4MDE1NjYwYWEzZjE5ZjJhNWU3NThjOGRjZWZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjR0aExiKy9LYXZhcVpPYWc4em9UMmc9PSIsInZhbHVlIjoiWFpxdTN1cTJITGoyTnlFeHREaGszZFo0MjRVekZwWjFRM084OU1FZ3A4a0krZUZmMW9VbVRrcTFIUTVMZE43c0w5cnBRMDlhaUREYk8veStqTytFQlhZTUNFWDN4RTVBdTMzTzRYcS96NzhVQmdYR2RCWGxGblppVlFhUXhVTnMiLCJtYWMiOiJjZDQ1MWE1ZWUzNDJjYTBjNDc0Y2RiMTFiZjBlNjc1ZjU5OWZiZjYyMGZhZWE5NGQ2YWM3ZjVjNmNjN2FhM2YzIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75513c989fbab342a9f355c9c2aecd19","sha1":"b83cca4e18f4831f9e995d5c0cb9f85ed2ed9748","sha256":"9ea7a2d0191300eded82b809ac2db94823f850b7ac0f9a19bd0e5e31057ca0fb","sha512":"b289519473b1196f09b2138936912dbf3e5a5ebefb9d4e0a7c69125790a7eb92f540f722e5b3d1c1d9bda2eb7482302bfb208ff7d395cddb92423a5519ce4e2b","ssdeep":"","tlshash":"5e600000c33c00cc0c0c30c0000cc3c0000f0ccc00030c000c00300c03003000c0c0c0","first_seen":"2026-03-28T02:50:29.440462Z","last_seen":"2026-03-30T21:29:17.217059Z","times_seen":10,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:13.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6InVVSndZOW1hZkNrcVRqZEFBSm1oaWc9PSIsInZhbHVlIjoiZ1JudFdMWm43VExYd2wza1JSWGtNRmhKVWhvZDZNcnd0SHNXT1hiaVRKRml1V1BGdTRta0lDK3pJcDdSTHVtU0l4TlVZbjBSR2dlQUNWT280QjNsOGV5SmJPd21ZNkRrci8xVUlCdGMxd2hYcm5DRGwwTU83ZVRjak1xbk9nUEwiLCJtYWMiOiJjNzY2ODgzM2IxNDdlZTljZTI2MjhmMTZmYmE3YzlhZjZhYmQ2N2I3ZTQ0NWMzMzc5YzVhYTVjMTU3NTMwMWI3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IkhnWE5qR3BXYlJWaXlhK0lLVTRZcVE9PSIsInZhbHVlIjoiY29lVUZ5N2JWYjNjZmFNdmZyZzJMVW0zNTVyZDA1S3Q4UjBiTEdpYkVPaVJaOXNsZk95emtaSjVycUF2ZTgwN2F5ZnZ5TkJUZUJCTi92NzhTcUpQL3NTNjdBOXZCcmxXWWdINjM5TjdpVVpaR3ByS0xpbkt1Q2NXeUM4aGpFZTYiLCJtYWMiOiIxM2ViZThhOGRjMjAyNmZhYjM2NWQyZGM0Mzc5ZWYxZjRhNjU4Mzk1NjU2OGYyNzFiYzcxNjBhNDk3MmQ3M2YwIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:13 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75513c989fbab342a9f355c9c2aecd19","sha1":"b83cca4e18f4831f9e995d5c0cb9f85ed2ed9748","sha256":"9ea7a2d0191300eded82b809ac2db94823f850b7ac0f9a19bd0e5e31057ca0fb","sha512":"b289519473b1196f09b2138936912dbf3e5a5ebefb9d4e0a7c69125790a7eb92f540f722e5b3d1c1d9bda2eb7482302bfb208ff7d395cddb92423a5519ce4e2b","ssdeep":"","tlshash":"5e600000c33c00cc0c0c30c0000cc3c0000f0ccc00030c000c00300c03003000c0c0c0","first_seen":"2026-03-28T02:50:29.440462Z","last_seen":"2026-03-30T21:29:17.217059Z","times_seen":10,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-key.png","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-key.png HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IlplbnozMGVWTXZxc1R4Sk93SEMwZkE9PSIsInZhbHVlIjoib2tiQnhyV3paUGRqc2RzTVY5d3VIeTJueTF5S1BEdVdMbEJRY0lualJKME5sc1Qzc3F1RFQ4VGNjaVpnKzhRK2NVVGdVdHBSYkdVZzBsUTg4dGF3S1BaSDdKMVBDci9jYlprdnJTSGJ4Q2U3aTcyM2pLclAyYlEzTURXdlpLaWEiLCJtYWMiOiI3Y2U1Mzc2MjRiODkzMWE3ODQyYjQ1MTBlNmYzYTNjMjU1NTRhODI1OTcyMDM3Yzk2ZWI3NjRkMjBkNDgwODY3IiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"ca483272e2a51b2450e2c655c0a23c63","sha1":"78dd905c737a7756e13c23798a720e6151c66a89","sha256":"3006ddea80f0e2eb282e2292cd51da32b0b1502db9d667e0d15098b886e6bb5d","sha512":"03aed96b22f922095a3ae7ab9308724bea93d4f5f6a8c222f97f3b89d5e522e63dcb19e29d47c624c4c68c616852e4f747c789d62d12b2cb595700781785d708","ssdeep":"","tlshash":"c3610a154dd36ad34f894877a177de447e0ae03309326e9557b93860ffe0170859bad1","first_seen":"2026-03-28T02:50:29.44305Z","last_seen":"2026-04-01T17:28:15.515464Z","times_seen":33,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":418,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/favicon.png","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:08.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/favicon.png HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6IjR0aExiKy9LYXZhcVpPYWc4em9UMmc9PSIsInZhbHVlIjoiWFpxdTN1cTJITGoyTnlFeHREaGszZFo0MjRVekZwWjFRM084OU1FZ3A4a0krZUZmMW9VbVRrcTFIUTVMZE43c0w5cnBRMDlhaUREYk8veStqTytFQlhZTUNFWDN4RTVBdTMzTzRYcS96NzhVQmdYR2RCWGxGblppVlFhUXhVTnMiLCJtYWMiOiJjZDQ1MWE1ZWUzNDJjYTBjNDc0Y2RiMTFiZjBlNjc1ZjU5OWZiZjYyMGZhZWE5NGQ2YWM3ZjVjNmNjN2FhM2YzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IitsWjJpeVBoRFhvemxmMHFQb0dmdEE9PSIsInZhbHVlIjoiU3orT1liMTFjWEhLTWVMUzRlTVFBNGhMdjFBeldyTXptdjdJSjQ2YWd4SWRsMkVxYWlueVlnb3o3Ym5uTEl2akk4MXBoc0EwbDh2Wkl0YTBsM2lxNUZ0alNJUk9WU0xNeVplL2ZMOUtqTHRFWDFaYU1UeWlyZEtOSEI0MEdmQ2YiLCJtYWMiOiJiYmZiOGJiOTNjMWE2YWJkNWZjZjI2ZDQzODlmZWQzYmI1NmZmY2E3ZWZhMmYwOWM5MzZmN2M4MmQ5NzE3YzczIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"24e981c956d35d831a66da8eccb395c9","sha1":"538373e3fb899aedea64f2729c7dff55b0ddd8b5","sha256":"8e708d12b46c338fd5b0c79748674ceb3d27834774c213bb399f71d495700d8c","sha512":"07c245995488fde14636015cb4753ecaaa84c9f2a5b3cc622bd889183dc7b9444201979f4ab2e381df1f6cefd078974eb52911537915ec12ebe9a0589ff51697","ssdeep":"","tlshash":"8bf00cb34702ec1f90f5225342b8d70872820be90effd707624a74de26e09441c8212c","first_seen":"2026-03-28T02:50:29.44565Z","last_seen":"2026-03-30T21:29:17.221826Z","times_seen":10,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/save-time","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"POST /app/4QEVKPGMkTgb9hTrU6viR/save-time HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nContent-Length: 30\r\nOrigin: https://teieperformance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6IkhnWE5qR3BXYlJWaXlhK0lLVTRZcVE9PSIsInZhbHVlIjoiY29lVUZ5N2JWYjNjZmFNdmZyZzJMVW0zNTVyZDA1S3Q4UjBiTEdpYkVPaVJaOXNsZk95emtaSjVycUF2ZTgwN2F5ZnZ5TkJUZUJCTi92NzhTcUpQL3NTNjdBOXZCcmxXWWdINjM5TjdpVVpaR3ByS0xpbkt1Q2NXeUM4aGpFZTYiLCJtYWMiOiIxM2ViZThhOGRjMjAyNmZhYjM2NWQyZGM0Mzc5ZWYxZjRhNjU4Mzk1NjU2OGYyNzFiYzcxNjBhNDk3MmQ3M2YwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":30,"data":"{\"page\":\"index.html\",\"time\":5}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6Im1zYTJCcFd3b1VKcWZRcXNxQnVXaHc9PSIsInZhbHVlIjoieWRqMDk2WVNnbGc0M09TKyt0ZEVkNW83Y3hhSjA1c1FVSWxaYkVFb3RNbng1dk1TamZiYnlNU1c0SmNlVjY1NWNvTlZ0d054VTU3b2g4T0JUTW8rUS9IWGEzQ1dPRzNGQW94SXJOemQrYVhJekdTR1JEL2U4NDN3MTRVRWNmTloiLCJtYWMiOiIzZmY5MmQ3ODgwZGIyMmYxYTU2YmQ1MzU1YTlhZTI5Y2ZmNjk5YzJiNmRjNWM4YzVkYmZjYWQzNDNmZDc4M2UxIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:14 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9f3f8a85a80554b1b701f17ef8a6578","sha1":"694749a049dabdaeed03a24da111ac21d256861e","sha256":"ff304e47c45ef76dc04ccdd2afcd992ea4bffc9124631e256adf0de530d34108","sha512":"5735efdf911b38b1256fc9cdaa9534ab719998454319ac443eca974f86442caa0e2a172adc94f1d312191a1ab45d19fe9cc94fd5ae394cf447750a5f8da95870","ssdeep":"","tlshash":"f6700003000030c300003c00003c0f0030c000f0c30000ccc03c000ccf0c00cf0c300c","first_seen":"2023-08-12T21:01:29Z","last_seen":"2026-07-31T12:46:29.955388Z","times_seen":75,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:18.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6Im1zYTJCcFd3b1VKcWZRcXNxQnVXaHc9PSIsInZhbHVlIjoieWRqMDk2WVNnbGc0M09TKyt0ZEVkNW83Y3hhSjA1c1FVSWxaYkVFb3RNbng1dk1TamZiYnlNU1c0SmNlVjY1NWNvTlZ0d054VTU3b2g4T0JUTW8rUS9IWGEzQ1dPRzNGQW94SXJOemQrYVhJekdTR1JEL2U4NDN3MTRVRWNmTloiLCJtYWMiOiIzZmY5MmQ3ODgwZGIyMmYxYTU2YmQ1MzU1YTlhZTI5Y2ZmNjk5YzJiNmRjNWM4YzVkYmZjYWQzNDNmZDc4M2UxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6Iis2Ujd5b3hScDBOSlhVUU0xRGtVVGc9PSIsInZhbHVlIjoieVVVa1o5TmVKa1UxVkVROFJaQTlJSDBGN0dZTEE5aXdybkF1MG5jN0ZPQ21jaW9hVlkrS0RvWFhwS1pWNDJPc3BGRnFVLzRINlRMYXpIcFlHWTJFNy9RZlI1WVJtMXpPOHI4VUREM3NiVFE4eHRoS2tBZGw3STJGNnZSUDdlaDQiLCJtYWMiOiJiMTQxMzVjOTk3YjJlYjYzMjJiYmFmYTYyOTAxMzA5MTFiNzI3M2VlNWJjZmM1MWRmZDdiY2U1M2E0OTIyMDdiIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:18 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75513c989fbab342a9f355c9c2aecd19","sha1":"b83cca4e18f4831f9e995d5c0cb9f85ed2ed9748","sha256":"9ea7a2d0191300eded82b809ac2db94823f850b7ac0f9a19bd0e5e31057ca0fb","sha512":"b289519473b1196f09b2138936912dbf3e5a5ebefb9d4e0a7c69125790a7eb92f540f722e5b3d1c1d9bda2eb7482302bfb208ff7d395cddb92423a5519ce4e2b","ssdeep":"","tlshash":"5e600000c33c00cc0c0c30c0000cc3c0000f0ccc00030c000c00300c03003000c0c0c0","first_seen":"2026-03-28T02:50:29.440462Z","last_seen":"2026-03-30T21:29:17.217059Z","times_seen":10,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/save-time","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:19.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"POST /app/4QEVKPGMkTgb9hTrU6viR/save-time HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nContent-Length: 30\r\nOrigin: https://teieperformance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6Iis2Ujd5b3hScDBOSlhVUU0xRGtVVGc9PSIsInZhbHVlIjoieVVVa1o5TmVKa1UxVkVROFJaQTlJSDBGN0dZTEE5aXdybkF1MG5jN0ZPQ21jaW9hVlkrS0RvWFhwS1pWNDJPc3BGRnFVLzRINlRMYXpIcFlHWTJFNy9RZlI1WVJtMXpPOHI4VUREM3NiVFE4eHRoS2tBZGw3STJGNnZSUDdlaDQiLCJtYWMiOiJiMTQxMzVjOTk3YjJlYjYzMjJiYmFmYTYyOTAxMzA5MTFiNzI3M2VlNWJjZmM1MWRmZDdiY2U1M2E0OTIyMDdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":30,"data":"{\"page\":\"index.html\",\"time\":5}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:19 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6ImppcUtYYXJvQ1pYN2JvdjVPTExkanc9PSIsInZhbHVlIjoiamZCZ204UVBpU1BwYnpIYjk4SzdsSkt1NnJ0STk2a3NzTmxIT2oyUFRkWnVNMWIweUxQWWVXQWpoa2JBcGRlVVVFSWl4cmlOR0draS9YVjVqYWJqaElWS2syZnVhdzRFQm5Gb3lpVXYxZWNSQ2E3VXR2SzR3TElSSUhFL3hEdzEiLCJtYWMiOiJhMDcxMGVjMDc3MWQxZTU4YjAzNjA3NzFkY2RlNTMwZmI2MTg1YjU2MmJkNzVjOGYzNDRmMjllZmQ1OGYzMmRiIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:19 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9f3f8a85a80554b1b701f17ef8a6578","sha1":"694749a049dabdaeed03a24da111ac21d256861e","sha256":"ff304e47c45ef76dc04ccdd2afcd992ea4bffc9124631e256adf0de530d34108","sha512":"5735efdf911b38b1256fc9cdaa9534ab719998454319ac443eca974f86442caa0e2a172adc94f1d312191a1ab45d19fe9cc94fd5ae394cf447750a5f8da95870","ssdeep":"","tlshash":"f6700003000030c300003c00003c0f0030c000f0c30000ccc03c000ccf0c00cf0c300c","first_seen":"2023-08-12T21:01:29Z","last_seen":"2026-07-31T12:46:29.955388Z","times_seen":75,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:23.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/check-redirect-status HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6ImppcUtYYXJvQ1pYN2JvdjVPTExkanc9PSIsInZhbHVlIjoiamZCZ204UVBpU1BwYnpIYjk4SzdsSkt1NnJ0STk2a3NzTmxIT2oyUFRkWnVNMWIweUxQWWVXQWpoa2JBcGRlVVVFSWl4cmlOR0draS9YVjVqYWJqaElWS2syZnVhdzRFQm5Gb3lpVXYxZWNSQ2E3VXR2SzR3TElSSUhFL3hEdzEiLCJtYWMiOiJhMDcxMGVjMDc3MWQxZTU4YjAzNjA3NzFkY2RlNTMwZmI2MTg1YjU2MmJkNzVjOGYzNDRmMjllZmQ1OGYzMmRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:23 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjNXWjYxcEdNV0hQWFkwYWo4aWxDYlE9PSIsInZhbHVlIjoib3lCcDBNMnJQbGduYXFYZm9lY2x4MGFGbU1KMW9wRkRxWHJSOU9pZ0xjdk5YNjBmeW14MDhZVlJUSmh3ek5kK2wyYTRrWUVmM3ArS1BpLzZJQ3lGLzIzeFlHSGE4ZEZmMkF0QWhQcmMwd3hWTUxvREZ4NUtCNEd4a3BIT3pxbHMiLCJtYWMiOiI4YWFlZGRhNzY4NTM4ODYyMjFjMzc3NThiMzJlOGEzYzIxZjYxNTM4NWQ0MzNhYmRmNDQxMTY2MWU3NGMwYmJkIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:23 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75513c989fbab342a9f355c9c2aecd19","sha1":"b83cca4e18f4831f9e995d5c0cb9f85ed2ed9748","sha256":"9ea7a2d0191300eded82b809ac2db94823f850b7ac0f9a19bd0e5e31057ca0fb","sha512":"b289519473b1196f09b2138936912dbf3e5a5ebefb9d4e0a7c69125790a7eb92f540f722e5b3d1c1d9bda2eb7482302bfb208ff7d395cddb92423a5519ce4e2b","ssdeep":"","tlshash":"5e600000c33c00cc0c0c30c0000cc3c0000f0ccc00030c000c00300c03003000c0c0c0","first_seen":"2026-03-28T02:50:29.440462Z","last_seen":"2026-03-30T21:29:17.217059Z","times_seen":10,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/save-time","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:24.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"POST /app/4QEVKPGMkTgb9hTrU6viR/save-time HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nContent-Length: 30\r\nOrigin: https://teieperformance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6IjNXWjYxcEdNV0hQWFkwYWo4aWxDYlE9PSIsInZhbHVlIjoib3lCcDBNMnJQbGduYXFYZm9lY2x4MGFGbU1KMW9wRkRxWHJSOU9pZ0xjdk5YNjBmeW14MDhZVlJUSmh3ek5kK2wyYTRrWUVmM3ArS1BpLzZJQ3lGLzIzeFlHSGE4ZEZmMkF0QWhQcmMwd3hWTUxvREZ4NUtCNEd4a3BIT3pxbHMiLCJtYWMiOiI4YWFlZGRhNzY4NTM4ODYyMjFjMzc3NThiMzJlOGEzYzIxZjYxNTM4NWQ0MzNhYmRmNDQxMTY2MWU3NGMwYmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":30,"data":"{\"page\":\"index.html\",\"time\":5}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6ImxMckNIRU9Qcjh0TVRZQ0IvV25BV3c9PSIsInZhbHVlIjoiYk9nYVJDcXhnbXRJN1hwNjM1bk4wMExnajdmZnJLSlNMejMvWldzV0hrbnJqbFJkZXFXUkI4anNNdGZjSzEyaDNHbzhLY2MwNGkzRU5Ra21qYW1BVGpNSWJBMXJURTRyT0tXS1FSNkpsTm9QVWR6SHhNT3B3NWZMRWhQRzV4QzQiLCJtYWMiOiI5YWI0N2YzZTBlNTg3ZThhODgxNmM0ODliM2Y3YjIxZGRiM2JhZmM0YjgyYjIzYmMxOWY4MzFhZmUyZTFhZDQxIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:24 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9f3f8a85a80554b1b701f17ef8a6578","sha1":"694749a049dabdaeed03a24da111ac21d256861e","sha256":"ff304e47c45ef76dc04ccdd2afcd992ea4bffc9124631e256adf0de530d34108","sha512":"5735efdf911b38b1256fc9cdaa9534ab719998454319ac443eca974f86442caa0e2a172adc94f1d312191a1ab45d19fe9cc94fd5ae394cf447750a5f8da95870","ssdeep":"","tlshash":"f6700003000030c300003c00003c0f0030c000f0c30000ccc03c000ccf0c00cf0c300c","first_seen":"2023-08-12T21:01:29Z","last_seen":"2026-07-31T12:46:29.955388Z","times_seen":75,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/requester.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/assets/js/requester.js HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/javascript ; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IlQ5MldLV00xN2ozRFE3b202NjNrRnc9PSIsInZhbHVlIjoiRTFiN3c4R0NtZmh6dVZvWDdYYVA0eFpDZVBIWGh2czhiREl2aFAzVUNwVHFIaGVRSFhPOGtXTDdxanVyanQ2N3dFUzZTcFg4U0VDUGVrMzQ4azVYV3owZWNxMmtFYm9wNlFCUlZOa3hhYjV6ako2Z1I3SGtWV3RhYUdWalJhZE4iLCJtYWMiOiJhNDQyNTk0NTg2MTFmZWJmNjBhMTI4ZjcxNWRlYjkyYmRhMGEwZjYzZmQ2NWMzYWM0N2Y3ZDdjYzk0NTdkNDQxIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"C++ source, ASCII text","md5":"84ed223152c9939ceee60b9a7426ac2f","sha1":"523e661cda4add68288d910bb3bb8157139df1ac","sha256":"7fd2e0dca93bc880dfa1d2b50d1fbd06803d614f3b6d5507f9ef97f689324e9d","sha512":"e751ad832c640cd3698a316bb43a3ecbbcdd3c1b6495beb352c10ca22f47f9a100425c6e2bb0c658e19e06f2d2987eccef6b8637314c9891c31774d75f56f5a3","ssdeep":"","tlshash":"9f1148856bf3255242dbb4aa3a8f0010f027e40b39addf18fa9c43c9af51524ecb1f94","first_seen":"2025-07-09T16:22:52.840061Z","last_seen":"2026-06-20T17:31:57.161401Z","times_seen":53,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":90,"dns":0,"connect":35,"send":0,"wait":111,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/timeme.min.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/assets/js/timeme.min.js HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/javascript ; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjBHK01uL1FNK2MzSzloaFlSNnBjYXc9PSIsInZhbHVlIjoiZFNkVVZSbnFlR2RmaDh6N1dlTWdEc0Y5UWtISkJlV2VzUWNpalRFVm5XeGFlUXAxSEovdTFrZEorMFZ6cjhzeEJQejZUNDhTeUdwNFdPRFhjRUNSaktPT2MydG8rQ2plVTErc2tOVWtrY1hzYlJrU21GeGhTcEk1b3FFRTdHaFQiLCJtYWMiOiI4M2EwMjVkZmRkYzFhZTExNmE4YWNmMjhmODI2N2Y1YTgwZDE3MGZkMDAwY2YzYjBlNzZiNGZjNzNhM2FjNWQ3IiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6180,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6180), with no line terminators","md5":"4449d618fa2f2f350a555c41bc782b63","sha1":"295754756d7517eb8f30d957e0f6a5cdb6c1dba5","sha256":"fcae9a7e0427744ff2199897d14c0d69e8434112f16851f587f7002b3fbe8704","sha512":"54bb82eddff6babe6476fa2b3dc1efab267c30ee2dda9096a83d894dc3038eb2256ef189842a8adf080c1b2c0063f32b6633d9050974b35bce484f53864a8cf2","ssdeep":"96:4rhbvTI/n3o/qfV5cIyxZOzIuAAX3C7UlSUc:4rpvTI/3o/qfV5cxZOzIqX30Q6","tlshash":"bfd1939df59825368cbbf362753f332c207767622c0a51d865bb9bd8bd24b8a411387c","first_seen":"2023-03-07T13:49:49Z","last_seen":"2026-07-17T18:56:54.351469Z","times_seen":263,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":94,"dns":1,"connect":33,"send":0,"wait":157,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T02:50:06.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5891,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (313)","md5":"962a8c94c199a48fdc6686b7203a6c77","sha1":"40ec08aae3209b4fb34a2bca2e99cac8bc770a35","sha256":"784ab682a10cd671a752c3a20b64a3081c19fe27749d23ee0dea0bdd42af6073","sha512":"8a8d649513cf245a77738591c816880a368724c5f7310adf1c18c736798be6dc5f3e13d2d29b21384d8fa7004d96394c806d24450bb27551c42a37807cd04b30","ssdeep":"96:UKPxQjnDyg7RfHsz/jAHy18QfCI6my01NIqNIBVXMoU8eQkLWs6Z/+Ms65K:dPxQjD/VHsz/6TQhyMoU2kKPJ+E5K","tlshash":"aac1d62124e98633926371dc72a7d70570abe113ea09ca8472fc96f51fdfec4494a38c","first_seen":"2026-03-28T02:50:29.456318Z","last_seen":"2026-03-28T09:08:05.002482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":115,"dns":3,"connect":38,"send":0,"wait":337,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/css/Bootstrap/bootstrap.css","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/css/Bootstrap/bootstrap.css HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjFUQTMzVFBnWFg5RFdtd3JtSjd3NHc9PSIsInZhbHVlIjoiK2UxbnlPampxZU82d3plMzNkcDVhYlVoWXh2UThKSmhnbCtJU1A4YzkwZDJKUXc4UUJTYnBXdFZJVnh3VHYyZlhxazgwRWxuQyt5cGk5bjhDekZrUFZkYTFrb01iMXZERGdJc2s5ZUFJTnRYTkI0aUJ1TTV0ZWNEd0dSYm9lckwiLCJtYWMiOiJmZjBjNDIwMTZhMzQ4MTc0NThjNjJiYTJmNmFiM2U3NDU4OTQ2NjBhMzY0Mjg1OGM2ZWRkNTQ2ZmY2MDk0ZmY3IiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280813,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (343)","md5":"0f0f4fb619d0b8187bdea9ee84692b39","sha1":"0dea94deb887fb505808650aaab7e240bbee85e8","sha256":"5978588e5287e9749f8210b05b26c7b2d50705cfc7e7a6b07d6dc1d5fa52a90c","sha512":"af47e8d2430af26c997ee29693d6fac98f1acd49c708f860373fee583976aed31d589964ee099df6ca1cbc665d673202c0090c81f4e456ba650da850d3b1a2d0","ssdeep":"1536:GOK0SRNPWWMULyCK3i50nC9Df541115tNBgZLl9a865wVDAudtIjNbPZO:GlWW/AudtIjNbPZO","tlshash":"34545258fdf12478387b9259659bfef8bb7c5086ca09cc75b9c32224cf853d158a29c8","first_seen":"2023-11-06T14:03:57Z","last_seen":"2026-07-24T19:22:02.639798Z","times_seen":218,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/assets/js/user-time-tracker.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/assets/js/user-time-tracker.js HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/javascript ; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjAxT01aQ01UZ21UQWNtMXFiRWhiZFE9PSIsInZhbHVlIjoiaGtNbzNqZ1lRR0YvemluVGJHS2hSNjMvcUF6ang3b1lxdS9qbGhiaWJDRzVqemhSa3NCZ0s2TVFlK0ZpUzFmWlZFc2pmbVdDSjZJRnp6OVlCWWp3MGlQWWwxMHZ4c2pLVmN3SXp3YitXb3dseXFvZTVSR2taTUJVZ0EwcVROWngiLCJtYWMiOiI1OTc4ZTA3ZWUxMTBlMTljNTQzNjdjNzY2ZGNhNDJlNzc3OTE2NDg0ZWE0MjZmYTEzNzU3ZTM0ZjEwM2U4NzFlIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"C++ source, ASCII text","md5":"4acb2ed83b331bb9d620cbcda6509aa3","sha1":"5d9bb869e37e02bc722b153dfc522deaff80bd90","sha256":"2c9765f3953c5a834f34a371958c44b4fe758d58df30892b2b9c5d4fae761ebf","sha512":"55b0f72f39fd7fdc271cac9a2b12b7f1a9af2651ea76ebe47d9bcd3c36997083ee0b78597f298abadcc92d2f496202d274700cbb4aab0dec00370708e5685e16","ssdeep":"","tlshash":"11318b0e99fa00109533b5983fabb1687e61270b2949cea47cef2ac0cf427317654be5","first_seen":"2025-07-09T16:22:52.840818Z","last_seen":"2026-06-20T17:31:57.156728Z","times_seen":53,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":96,"dns":1,"connect":40,"send":0,"wait":198,"receive":3,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/js/main.js","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/js/main.js HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: text/javascript ; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IkdhVVZNd1RvdDhJZUlqdW1oN0NLOGc9PSIsInZhbHVlIjoiMHNEMktlRkZSTm1EMzA3UGpzYTBTR25KbEVSdExMUEJydGNJOEtNd1RET0kzU3pHWTJBclQ1Y2VaZEZPTXcvNitITm9GakwycWVkYmlaUEZoQTgvMzk2T1lwdGJDalZVNzYzdXhMbVVsMFAyb0Z3UmdBRk1WSHM2S200VE9RMTAiLCJtYWMiOiIyOGZlZDM2NTI5NWI1MDNhYmE3ZWMwMGEzNmRlY2ZiOGI3MDg4MDE1NjYwYWEzZjE5ZjJhNWU3NThjOGRjZWZkIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"6b767db2ce6d3a1212f2fe87fb9ce2aa","sha1":"1c31068c67bc52e9e984761bc873818cee511b21","sha256":"42345fee3cac7f012a8d6a803163d63256e0fb324b11be5979f2454f0547f9a3","sha512":"31d722e9b7c3eb64b87eab1f85b295856cb2de758a34e56846df959889f1ad4dbb3284dc39947d9142cebbe2e8a0a548adc0f793a29519287417f0e1594fba43","ssdeep":"","tlshash":"60316e2a64a30435abfb35e622af0ac875f054439c45d811387cdb991f71d91ccbebd1","first_seen":"2026-03-28T02:50:29.461176Z","last_seen":"2026-04-01T17:28:15.471085Z","times_seen":36,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/save-time","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:09.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"POST /app/4QEVKPGMkTgb9hTrU6viR/save-time HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://teieperformance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cyberdise_session=eyJpdiI6IitsWjJpeVBoRFhvemxmMHFQb0dmdEE9PSIsInZhbHVlIjoiU3orT1liMTFjWEhLTWVMUzRlTVFBNGhMdjFBeldyTXptdjdJSjQ2YWd4SWRsMkVxYWlueVlnb3o3Ym5uTEl2akk4MXBoc0EwbDh2Wkl0YTBsM2lxNUZ0alNJUk9WU0xNeVplL2ZMOUtqTHRFWDFaYU1UeWlyZEtOSEI0MEdmQ2YiLCJtYWMiOiJiYmZiOGJiOTNjMWE2YWJkNWZjZjI2ZDQzODlmZWQzYmI1NmZmY2E3ZWZhMmYwOWM5MzZmN2M4MmQ5NzE3YzczIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"page\":\"index.html\",\"time\":1.001}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:09 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6InVVSndZOW1hZkNrcVRqZEFBSm1oaWc9PSIsInZhbHVlIjoiZ1JudFdMWm43VExYd2wza1JSWGtNRmhKVWhvZDZNcnd0SHNXT1hiaVRKRml1V1BGdTRta0lDK3pJcDdSTHVtU0l4TlVZbjBSR2dlQUNWT280QjNsOGV5SmJPd21ZNkRrci8xVUlCdGMxd2hYcm5DRGwwTU83ZVRjak1xbk9nUEwiLCJtYWMiOiJjNzY2ODgzM2IxNDdlZTljZTI2MjhmMTZmYmE3YzlhZjZhYmQ2N2I3ZTQ0NWMzMzc5YzVhYTVjMTU3NTMwMWI3IiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:09 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9f3f8a85a80554b1b701f17ef8a6578","sha1":"694749a049dabdaeed03a24da111ac21d256861e","sha256":"ff304e47c45ef76dc04ccdd2afcd992ea4bffc9124631e256adf0de530d34108","sha512":"5735efdf911b38b1256fc9cdaa9534ab719998454319ac443eca974f86442caa0e2a172adc94f1d312191a1ab45d19fe9cc94fd5ae394cf447750a5f8da95870","ssdeep":"","tlshash":"f6700003000030c300003c00003c0f0030c000f0c30000ccc03c000ccf0c00cf0c300c","first_seen":"2023-08-12T21:01:29Z","last_seen":"2026-07-31T12:46:29.955388Z","times_seen":75,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/css/styles.css","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/css/styles.css HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:07 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IjZrMm8vQjFYclYzaWIvK3M0NXJRREE9PSIsInZhbHVlIjoiRWFwTzc0ZWI3OHNXOHhtOXY4YzR5ZUVrcVlaUXZpa2g5T2psOHV6N25CempFaHZjSjMvNzJoTkpuNE1xdGRNb1JhS1d5ZVhlK2F2MVNRUDI1OXBLNm5vZWxBekhqVVNON2xOTzNrUmZlZEdyRkg5Rk9DZFUyb3pFVy9UWGpjejYiLCJtYWMiOiIzM2Q5MmVlODk0ZDgzNDY0ZTdjNGFjOWQxNTVhOTg4ZWNlYzUyMmMxY2EwYmI3NzVmMzAxMWIxZDYzZWI1NzMzIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"8b19069094cca982c5aff7958ab9021f","sha1":"1413a3cd6adc4e785b81cca141b64b3144753e27","sha256":"a696bdf213f07223da6a27a89404cdf6051284d35d94163b34588a5921acc4e2","sha512":"d9a18b5c35a62dba73661d22f038b6bf0628e68fa2873ee908c80d7d1070c1f0083400da1b66c921de431c824c19b39d50ad00fd5b719b3fa92ff988d7327b74","ssdeep":"","tlshash":"2341889cd352020732338e3933a0ca62777aa1a19e06473e7ff49584a3d81b85a35fcd","first_seen":"2026-03-28T02:50:29.463373Z","last_seen":"2026-04-01T17:28:15.44083Z","times_seen":36,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":94,"dns":1,"connect":33,"send":0,"wait":304,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-logo.png","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-logo.png HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6IkxHQUNaSzhwcHFhbE5SUnp6UFRmRlE9PSIsInZhbHVlIjoiQ1dKZjBaUzdyK1dWcEhRajZmUis1aFhoVVN5OFlCRWNLTGVPNXFuVEJ6ZjdLZkFRTXAvZTR4NVRjNSsyWE9lMXhJYWNQSVlzQzZMOXFmWlBVNGdXRmZBV0t0QldsdE1hWjd6T2JMbTJtcUcrRDhPbmk5TEp6czdZQWFxQkpBbmwiLCJtYWMiOiI3ZWViZDEyYTFhN2QyZjdiNTdmNDI2MzdkZGE1YWExMTUyNWQ1MTgwNDJiZTYxZGVjMTEzNmI3MGRkZGE2NzRiIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 432 x 96, 8-bit/color RGBA, non-interlaced","md5":"573a34505a2912017965bf609bef8505","sha1":"c85556e1bc9d4bac110ae1c11ff516025049fd97","sha256":"839695bc69489a626189402928bfa751e5e2ea7675c3c6929c28396fe7a4b5f3","sha512":"7946bcca362cb0cf7de880b002b3497b922aa46431454d7759d63dded6138af6897328c9d6b993154241ed831066c89f7deb05eaaf01e89da025996463a530b9","ssdeep":"192:x6soxQzrAVVya5ga113hSulnJdgHbj1SkQ6rgysq:ksoxQrOka5ThlYG6rN","tlshash":"7ed19ed1c7630c138717da1a526b2d2caf104725e7778f4613488c763571e6c2799fea","first_seen":"2026-03-28T02:50:29.465627Z","last_seen":"2026-04-01T17:28:15.514461Z","times_seen":33,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-arrow.png","fqdn":"teieperformance.com","domain":"teieperformance.com","tld":"com"},"ip":{"addr":"138.201.191.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR","date":"2026-03-28T02:50:07.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"teieperformance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 23:04:07 GMT","end":"Fri, 01 May 2026 23:04:06 GMT"},"fingerprint":{"sha1":"87:A8:70:28:BD:69:66:AB:5A:AC:54:0E:BD:3E:A8:67:0D:08:BD:12","sha256":"F5:C5:21:F3:8B:F0:F5:8D:82:96:CD:27:7C:8E:2D:39:DF:2D:61:34:61:6F:85:86:70:52:F4:B6:65:54:2E:1A"}}},"request":{"raw":"GET /app/4QEVKPGMkTgb9hTrU6viR/img/microsoft-arrow.png HTTP/1.1\r\nHost: teieperformance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teieperformance.com/app/4QEVKPGMkTgb9hTrU6viR\r\nCookie: cyberdise_session=eyJpdiI6Ii9pMFBVckJEc3lOY2NqRUdmYlU5clE9PSIsInZhbHVlIjoiQ21pSVBGSjhHaDNscDRZMVpJYkhwdGljbThtUzJpSytoRWZLR3YzdGtySm85OEtqODN3MmpleDFRM2hxdWI3MTdHdUF3ZVVMOTl1TEE0Zm1mcEZkRDZJWVNmQkpjM0VZR3dCU1lKSVVSWStoOHJNUHgxMi9NQ2NMRjNuV2NOYjciLCJtYWMiOiIyYTQ5MTI4ODU4NzNkNDA0ZmIyOWE2NWQzYmJjMzY3ZDU3ZTMzOTdiZGEyYmNmZWZiNmU2ZmJhZjc3ODQwM2VjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 02:50:08 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nCache-Control: must-revalidate, post-check=0, pre-check=0, private\r\nContent-Description: File Transfer\r\nContent-Transfer-Encoding: binary\r\nExpires: 0\r\nPragma: public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cyberdise_session=eyJpdiI6Ik10Y1I5cGprbDF3VHB4aXhSUlZla1E9PSIsInZhbHVlIjoidEJiN2VGREZibEJvQnc4bVBMMVB1bWZSWi9WZzVVWnUveERKTGhjYUtSQVNZMDdNRjZTcDBTZzB3a2FJVmlVYWF3TktpWVB4bzI4dFd6NEhwb1lFVit6WVVGSVB1Z05ab3hmdUJld3RZbVlmYkVxdVp2VkYwcWhTbE9aMXJSTC8iLCJtYWMiOiJhYTA3MjgzZjU1ODA5MjE0NDY3MDQ4ODBjYmI5NGRkZmU3NWVkMjZhY2Y4ZGM3MjI4YTQ1ODgxNmJjNjNkMWUzIiwidGFnIjoiIn0%3D; expires=Sat, 28 Mar 2026 04:50:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"05b9b40166a4a5379bffe7fb3d9fc7ba","sha1":"402562ad49246d9c70ad031d6004daacfe565db4","sha256":"b89bee10a622e39ab293c3c06a763ee8ff37054693d1f6512323807478f4bf54","sha512":"ffefe1f68cddfca0ab2df04f164c5f3111b6eed3cd49b8caabcb77322e144d4c38a362dbf65e8313beff8a7eb8bde5461fb44a3f72e4db9a28e050fd4066dc8b","ssdeep":"","tlshash":"8601a65c016ca60ebffb8707052ec7060ca96299e28c10990f7cc5864ffa6c9bf02507","first_seen":"2026-03-28T02:50:29.467528Z","last_seen":"2026-04-01T17:28:15.432592Z","times_seen":33,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"teieperformance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}