{"report_id":"6eb1dcbe-2fcb-4623-91e1-fac2c199d1e2","version":0,"status":"done","tags":[],"date":"2026-09-18T21:03:20Z","url":{"schema":"http","addr":"tehigrea.com/","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"172.67.198.101","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tehigrea.com/","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"title":"Les Rencontres Économiques - 3-4-5 juillet 2025","dom":{"size":353436,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12112)","md5":"08df8c227cc12aa737955c7173651d83","sha1":"aaa51e5c34380bd6ef5a702a0d723688e17175a5","sha256":"f48e0cb69492e884aa4fc8cb6657f06aafe084350f5fab20d336c6be73e3078e","sha512":"1cb868bc2493f0bdd06d0301da0ba24d9354c1e50bd75dded5aabf08ac647f80b37033c0bc60091a4ff3e6557315103904c303d9aa6f02387e03038ee11cc2b1","ssdeep":"3072:qZLADBhua7iIgsJSOVCiBa2zdxWTDLZv2+io+60IROitOmxGqPzrEl5pFDo+iY+R:SA9Mau7lmvk","tlshash":"91741213e761513efd27666a27bc969c62797d82dc10abe5f91f20708bd3efe1092024","dom_hash":"domhashd3ab40d1f06459bad23cd19ca30bf323","first_seen":"2026-09-13T18:49:04.094525Z","last_seen":"2026-09-18T21:03:23.248354Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tehigrea.com/","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"172.67.198.101","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T21:03:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.lesrencontreseconomiques.fr","ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2010-03-18","domain_rank":2665262,"first_seen":"2025-08-20T19:49:16.8472Z","last_seen":"2026-09-13T18:48:59.8519Z","alert_count":0,"request_count":1,"received_data":7618,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"tehigrea.com","ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-09-18T20:37:53.367222Z","last_seen":"2026-09-18T20:37:53.367222Z","alert_count":205,"request_count":41,"received_data":985950,"sent_data":21053,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Yoast SEO:24.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/style.min.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.708Z","timestamp":1789765370708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/style.min.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TT8T1fLGNUAYVzcKGvYAEhaQGMLUb6uAqY2Ljdyvv7tZ0ggGh13l5IZbSwlT4l4wi6PEOUf40sppigbuQql6vzBmD%2BXdsprRJ2yyZ1wPNlzILnDKlubXNNSLN74zXE%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-1bf1d\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3efd46569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114461,"size_decoded":15862,"mime_type":"text/css","magic":"ASCII text, with very long lines (59210)","md5":"7729247eccaffc76e16f36f77115f375","sha1":"20c089ddd9cde956a41562afb091805497488e9b","sha256":"131297ee0bc20496776eea8c181df05097a56611fc3f80302963e76d67992474","sha512":"510a85574d413f6a84b091cca4bf58bce2dfce06cd503021cf67b32d9fea9ba827ada0dda53559d457a1593fe6766ca7ae344f3ee46642be5af081c027b45460","ssdeep":"3072:HaeJuX7Qg5MG7H+qehvP0x2pUk44Q03Pm:QX7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"a2b3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2025-07-21T01:28:49.075422Z","last_seen":"2026-09-20T10:44:44.689915Z","times_seen":29,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/style-variation.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.721Z","timestamp":1789765370721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/style-variation.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lx7i56Krxl7wpvAnVTKh0q5mSgm3bTMFAUtMtJxzndgMk0j16Vw6i0QDaOlGy9hIRW8r0pUoENyW2GT2HmK8WvtzAZ7tMtRdSsp%2FvxVu%2BA2EOWW%2BEEUXjF1f0exQLM%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-4ed\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3f0d4e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1261,"size_decoded":1225,"mime_type":"text/css","magic":"ASCII text, with very long lines (1261), with no line terminators","md5":"22270530fe80cd29e7d3c45f4849ca05","sha1":"553418f4eb853fe607dcc32df488d89cb5a51946","sha256":"c2083eb8364e9c6ce40b4788b35cd197bea95c4ec6a01cfad08e27ae3cb45389","sha512":"e7a5fe1a330a59f34e0b9c07fbce0a579baf03ee8d31696ab4f1f4176aeeaf526f352fe3a6fdfe87c497cf5457d57d51270c5197e92aa54e0e80a64931e4a506","ssdeep":"","tlshash":"7e2197a3fbc429593026c656a4477f7c7c3e94808b819cb6e620b7b847450df5ba060f","first_seen":"2026-06-13T08:37:31.329519Z","last_seen":"2026-09-20T10:44:44.747507Z","times_seen":18,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/footer-x-white.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.944Z","timestamp":1789765370944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/footer-x-white.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-1f8\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enyJbu%2FBS7tGtKdCGlHUBi98C4CS0BAgxYPTj4pOBjMrXfAveRfZwou34TLJbg7VGW%2FZZTMQZkdDnkEicJ2mlqGkInPyrKj%2BMPsWaqnSA7PKOyWS0cSrb1JQbQntWi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b406d76569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1270,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"e86a40afc69f427c61cf869fc94213b7","sha1":"75de44b0e943483a73e3ee9dc9f908489882c72d","sha256":"a88fcd43aa344bd8363b279f0653cbe4ca5fe0da58e045689c2c3ca3c4a8ded5","sha512":"47f108d1a0a973f0ab00e5790b522816304a11d6915ddbc63d99252da262d38ebdbd01eb314adaa7d5fbfd48efb81d4a25f830867c3334b6e998d2a8edb68ba4","ssdeep":"","tlshash":"75f0059d51c6236ccb8d94d780ae701b551786a0d74462a0905a60fd6ce144a6472339","first_seen":"2026-01-04T19:54:11.11131Z","last_seen":"2026-09-20T10:44:44.721302Z","times_seen":20,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/new-reaix-2023.svg","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.947Z","timestamp":1789765370947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/new-reaix-2023.svg HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMP6dYHksy4I%2F9pgX86XXmB229yRdrKdC8FMe6vfcKKfcVYfzaHs9HaMEuHq7Xcu0VTaR8Z3eccVSLQqzYW37nCDl9lr3zXp9%2BOHKq4fk5HSdeQmqzZMPTPUGUgks9Y%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-40c6\"\r\nage: 10370\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b406d79569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16582,"size_decoded":7411,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3325499cc990fb2d187ee60a82c756c","sha1":"272d5aada57db54f65a8a8ee5e35b7b3249110d4","sha256":"4719752b2c687da4b3fc19b5119ef781fb2854ac67ef11bc1c2c760c94e25ddf","sha512":"29916ba0255c79bfb0a6f8d42b0f2ab472c256e38116cb03e063262759f6c05de1b41ffedda5d4deaa0566af37fa5c68a651651466812522640a3a85938d53ac","ssdeep":"384:ZegtQQGeQ2R6dFlcnabTqOACZ36W7xf8Pij0jzZ3hnYXOZMb3LF:ZYQG8KldRAs36MiZ31M","tlshash":"9772d6dd3b58c6f4ac0af3fa8f122475691be4f6afc082a4c3591d0b789185e5d49ec2","first_seen":"2026-01-04T19:54:11.043185Z","last_seen":"2026-09-20T10:44:44.743519Z","times_seen":20,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/style.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.717Z","timestamp":1789765370717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/style.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGUcRHLKlWsqXs1apRLpFockvCHgC%2FV%2BHyov4c%2FEaLpISabZGr2d7AoSy%2F3YOItKLET98Z4Y8rgM7uYWCJUaw%2BnS3h8dOXX%2BxfCZBKzMU10M0sZFKU4sAUyOwr56Tys%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-21fe0\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3efd4b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139232,"size_decoded":20956,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"f2d17fd8fcf8a8fa2d28ef94299ba992","sha1":"a505f019e0d0c3eddbf4ac627059ddb62c73367e","sha256":"98840899c41ccf84657d63770159a1412065033fdd72c082fc846a091cab33cb","sha512":"ab8ae24f22e651b252f9eaeb5ce7c29d994d8b4cfc049f6885bcd462975ede1ffc8fecb45bac0aca5b9c2cbca6f95a98beb595474378ade90749b810b046d4cb","ssdeep":"768:sVhe6dg9dK3JQaYCyKYWwo5BFytrd9GFGQtjWKSFQIZw8wUwkwWwWwzwWwvwfwYj:6I9dK3JQaYCyvE5BFytrGl5GVTYtDGk","tlshash":"c9d3a622ad51b01d712b806af5c5b6c83338c113b6670bf5f9227836cdd6ade13a7789","first_seen":"2026-06-13T08:37:31.324092Z","last_seen":"2026-09-20T10:44:44.736693Z","times_seen":18,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/bandeau-partenaires-instit-668x132-1-490x97.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.920Z","timestamp":1789765370920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/bandeau-partenaires-instit-668x132-1-490x97.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-271e\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLR%2FuuM8mKvMkwmLoMkpqgovVCD2seKgDViGapnRxDzu43JcbCeBs8o4PCDeSFDurg4fZCaPJiWfA568ikURyKb%2BWQXXOkNuh7lMyYPcL1p00pc%2BvRiFgPSYpXYg7F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b404d71569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10014,"size_decoded":10783,"mime_type":"image/png","magic":"PNG image data, 490 x 97, 8-bit colormap, non-interlaced","md5":"af8cbe987926e3e707221605cf43d2ef","sha1":"e278a1371da1749059f5387a831b231c17680aab","sha256":"c9db0a4923821f48381f1d109ccf2bc476274135eba2972caf6f2d423f14e736","sha512":"b6fc1307eaf0d725635ce7b129431e5764b7cdc79f3991ecb4f9b623865971345df5be1c308ac708d3798faab45a449f1dd9011a38b0faaf31b43ee0a43a467c","ssdeep":"192:J22X/nr4njJnFwxDloNoT5tkxhYm+VbLooInM3itgpUF7s:JfX/0njJFwRlLkxmm+xLoW3jz","tlshash":"3f22af6919302ca0d0dde03b72da6742b81713790074a6a0fc6f9ddbfbba2345a85dd2","first_seen":"2026-06-13T08:37:31.340145Z","last_seen":"2026-09-20T10:44:44.742449Z","times_seen":18,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/css-2.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.980Z","timestamp":1789765370980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/css-2.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/style-variation.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUZdCGNLonYL%2Flo0hgL7fbF975KL0ZbYyBudSDADp6u2k6d1bpB%2FAVcbEvEpxg0AVasrKwDelX3OUz6nRcnfkr9%2Boc7%2F07bbURhmLr76A6e%2FQv%2BlkNXSWvV%2BbxfnbsM%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-1191\"\r\nexpires: Mon, 28 Sep 2026 18:10:01 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b40ad7f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4497,"size_decoded":1311,"mime_type":"text/css","magic":"ASCII text","md5":"05005beb58ae08636ca9d06239f02e1d","sha1":"deebcc87856f8920fc40e2c79162e84a9f055e4f","sha256":"0a01fbadf9ab161ca6806b8448fb835387296e35b0a00d44200efb2c883398ba","sha512":"6d392a7886f7dd2bf5f124aec71d25b2d52f4d053c72a15d70dcf4f10a39f2618ea4e65c2ce95e22e237157cb825ab1ff710ada0412c9091263f17b8dd8ebe16","ssdeep":"96:vOEa/fOEafFZOGOEaUOEayJc+uKOEadNaOxMa/fOxMafFZOGOxMaUOxMayJc+uKe:4/oOR7aOj/SO/daEc/BO4earc","tlshash":"1f919990086a9400eb872cd673cf7f339d9db2407046d9396ffe04a8ac9ed6553a5b4d","first_seen":"2026-06-13T08:37:31.345701Z","last_seen":"2026-09-20T10:44:44.704212Z","times_seen":18,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.088Z","timestamp":1789765371088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-53c4\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYoLJiKMeV%2BJUkxUpCT5nWU5plWJrDU7xNgSbByQGsaqk9r2D6DjBNkrBbwBhuZ5T90QP8qO%2BrG3r4ELPTreLEjl3OXYa2VQSFSRQEzLkikc8ClxootL%2F1V3SJRlvHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414da3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21444,"size_decoded":22216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21444, version 1.0","md5":"ffd3d57638a7899d80bcc108713c271c","sha1":"d186409ee24fc3d1cc8194434dd707181ead20ec","sha256":"99027d866818f716d208569108a962ac72200197cae503efe5b6bf002bf4915b","sha512":"7305c344cd8f954929314f3b5c9b996638e57d5f142a327ddc9f42f592880ea30b5102c73ee0e296bb3c4fc21d9fce5d862a492b4bc1127ba2c79c4def527c62","ssdeep":"384:8cEHB0MPPblbQ3jOYVdSj2WvnrFnimhmA4sC1ad7RNwAwEMwdz12N/:LEv5QKYanrFtm8d7Rbwyo/","tlshash":"4ca2e089bf9393d84ccf3b6ca55dc6d5a6ae1ce132ae9732f51ab083158812c921634c","first_seen":"2023-08-18T03:32:07Z","last_seen":"2026-09-20T10:44:44.70212Z","times_seen":4226,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/css2.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.707Z","timestamp":1789765370707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/css2.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XgYRHz9Yz1N2Z8L13OlZvm72S5VfB7egEr9B2BPOJ0hFgL29TvWmugfdUsZY6jrX2IwJNRuEYkgurSlaVDR1ndvZFfskk%2BOXXthglS6vAUNhwhQeam8%2BWwXwGSaP%2F8%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-41d2\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3eed45569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16850,"size_decoded":1756,"mime_type":"text/css","magic":"ASCII text","md5":"e5019f0e3a345ef955fe600af83edbe3","sha1":"fd3ed11e72921c3bd8ed09f4f30f2996aad3f09a","sha256":"1f83c899c8d66f00f6cb9d08c7bc6e277d1012fcf3e059a1af505b3be7f2f98c","sha512":"06fb8afa6795a874d657de08e920f02411df4e83909e7a64177f873b620103762e1fb86b48863a27bb219f92188a44b92e387f82260682c20f7d520a8d9b6453","ssdeep":"192:/Uv2o7cV2Uo2vUc2sUS2BecstLXgdU3q6QtZ0+23i3L1dgrd0NoS3tPSquLbkJUT:MuRj8143REuyOL5fR","tlshash":"1d72de60042e6404eba71cc637cf3f6a6e9e72517045c6396ffd0458bcabc255369b8e","first_seen":"2026-06-13T08:37:31.35116Z","last_seen":"2026-09-20T10:44:44.744563Z","times_seen":18,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/style-fix.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.718Z","timestamp":1789765370718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/style-fix.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3561%2B9jhU6Qke2Egz36KxcVB30YXPlsOZ98%2BTobMU7CEb4zSN9km43L62O3spV5ZmnfShjC0ogQLJWmjVNjWJi0IB%2Blfo%2FTRHSExybfXzdKB6qAjhp3MXuOBwPeHA24%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-55c8\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3efd4c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21960,"size_decoded":5443,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21958), with no line terminators","md5":"745c5b0ded2a119fb91cd5f1140a010e","sha1":"022471de756d5ece0ffd2c2f1c49228b1e63f004","sha256":"9b19b30802d054331a985ffde4dc08222717f1633c734216398a2e7dcecc2da7","sha512":"546044f987843b0e9e9afefe72541504ec43fbc9e34768c0c8ef892e5e760005af8d093210348d0c6c648bc9f15bfa6f966b54f4b34bc6545b27db9124c6e889","ssdeep":"384:yNKOTQUZ408swYwdwHw6wxwOwVwHo3ki3hy8oCIrDhvHbAt8IjNyvbtlXJ16pf6p:yikwYwdwHw6wxwOwVwHo0iRy8CrtIw3","tlshash":"19a2b752e882942c6117c075f5d6e35cb23ec512f3a746ea9c16993acfce5de02b26c8","first_seen":"2026-01-04T19:54:11.12197Z","last_seen":"2026-09-20T10:44:44.691044Z","times_seen":20,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/new-cercle-blue-2023.svg","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.911Z","timestamp":1789765370911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/new-cercle-blue-2023.svg HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggdGRQkyh4xkh9qGPimJWFtchKA9nXPnckGEWMUamDoEOP%2F%2Bxak1tlYsYKkLtFx34kgKu%2B03DeTKUEmB6v4qgCW5w06WYsV1vqOK97dutvNiYZxTgRGOIPP8ejC8BHE%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-1dc7\"\r\nage: 10370\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b403d6a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7623,"size_decoded":3968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0d40cc7f02d1910a6b6e8ec6a258cf3","sha1":"e93fd7631a141f7b4587da7d829bcad7159942aa","sha256":"5904e602fbe72ee973b221d3bc81ec3ade618ad958acf84b9576900b3174f384","sha512":"96f49b7c1e15e2b2d2dc9615602278aff219708ce3156ff02d086b3f0d0f189f0b0500eb9d0858009d35e3fdba325f821fa5ef27aeef8d882b65495e1edd33f7","ssdeep":"192:IjTCYM7LO8v7TXxPh4mxlWPSAXdyZE5YE+oTc2nI2qFSx:eCYMfO8vXxZ4mxlWPS2tJcWaSx","tlshash":"a3f1b7e977d562f0fa06e7e486237250711b18fa3f62cba8c362adc6b85105e84c9cc1","first_seen":"2026-01-04T19:54:11.109715Z","last_seen":"2026-09-20T10:44:44.694861Z","times_seen":20,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/header-insta-grey.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.917Z","timestamp":1789765370917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/header-insta-grey.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-241\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33oMM8FwP%2BwO3hPu8liwdo6uTsPKWalv%2BPnrmw9nnOLE%2B5G%2BqoMHyKcNdeTG%2FVWMBvkV4uwIq4ImHERNBIfw4IXbmJ6nzqgQCiXtCA91z0SFMHI%2F9E2aoH0p5Xnn%2F30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b403d6e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 577\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":1351,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"227cc72df7977ebdcbf1cdf3e6a367b4","sha1":"dbeb59d7218e8330da9b93e44afb0674aaf1ff6b","sha256":"dde27c3153e05b415d1fc00e97ea467c178aa6a3d581cad5c172933303b7f77b","sha512":"1ec7145ab08d4a3c6453cbdb51be55ff22b8ef1d41329101718e6a7adbdc7f5047fd7f3a0f10ca1a3c1c4397d0d41f78848ac6a788fc542b1158320c214d56c7","ssdeep":"","tlshash":"2ef096f9b3c28857829f9e400c0c0d86e433677807ea402c3f1fe00247b2e99d4a9a75","first_seen":"2026-01-04T19:54:11.025967Z","last_seen":"2026-09-20T10:44:44.74192Z","times_seen":20,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/flag-en.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.919Z","timestamp":1789765370919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/flag-en.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-2098\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2i1ra0cozXonF8iGxBnRJ7L0GVYK%2B6Uqu%2BA3O8%2BflWo%2FiPTd1Tlun2Bc3V25Erzr6IlpeGuI85y14ktFaiqMkLSBb6AUPqMDnOM5X2X8dZZSjtjPGBVCpuBX0f%2BB9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b404d70569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8344,"size_decoded":9116,"mime_type":"image/png","magic":"PNG image data, 100 x 66, 8-bit/color RGBA, non-interlaced","md5":"fa6b6aa9d80370d48e835e1c3de923af","sha1":"bdf50a19c421e26506e0fdc9a5cb4d63875a4b68","sha256":"9ac2281bece17870da8b66971fed34a22d537c7118b83e3606b08eab916a3694","sha512":"f05d67659cfadf63c4b5c1b137a795574a577a3018f67cba41994802cfdd95b9507a3d01485085ba5b2b4671f821606f4dd3a3b284dfac7ee8c97b14d0c403b1","ssdeep":"192:z7Qhs5hCJSpJcEBdZTJbbKRwCZsj1UQQopBR3YyNeQFSqNXTM:zsG5hCJSpyEBv9bbNCZstvDZYPitTM","tlshash":"43029fd0dc045145b4a2c25119fbd55a3547ccc7e2c2a4e3ce4df85a64991f3913f5e7","first_seen":"2026-01-04T19:54:11.074271Z","last_seen":"2026-09-20T10:44:44.737705Z","times_seen":20,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/footer-insta-white.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.945Z","timestamp":1789765370945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/footer-insta-white.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-1d9\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKa%2B%2FKdArLt5tUCk7pYgXZIvyRNfhlcxh4imqOpiqc4pqDMvaaG9ewPp2JHskxbLdbw7c88bdheuvmf5kw9RP155dg42voiWG%2BodNkdccluSOTg%2Fkm%2B3depkSKjeXj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b406d77569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":473,"size_decoded":1243,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"6f4d8fadf3a1e5fd68c8da5dba734cf1","sha1":"b4e3016d7534868d4bc29b2a7a6c17c525b35507","sha256":"26acf3ffe9d7f502979c724beea9da0b030fbc08d93f74b4d6ad81dedc9d09ff","sha512":"026480b364ee44952c3166a505eab566d3924f32814a53cc262849ce9393da0d61f6f0f17deb998dbdfacea1aaef676ca9bba71df86dfdd59525832060f24da7","ssdeep":"","tlshash":"04f054511d72ed58c448cf24bf1b6682c633ccd000036a60ea543059061749d391c5f3","first_seen":"2026-01-04T19:54:11.04963Z","last_seen":"2026-09-20T10:44:44.746068Z","times_seen":20,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/default-skin.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.711Z","timestamp":1789765370711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/default-skin.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISAuGPJnGp7axV0rdv9NKVK19Zhr1hRlyS%2BbXvbB8MhHAvX4R9kdHrBrDiRMFXEWTx6%2Bz31nxygpgTRMA5f4pfF1xK0%2BnwfdMlYxHTKW%2BKX7FWBdG%2BAM5DYybYLg6Fc%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-1ed3\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3efd48569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7891,"size_decoded":2699,"mime_type":"text/css","magic":"ASCII text, with very long lines (7809)","md5":"4c43b9732aabf4fe88387fdb825035bb","sha1":"90557c08241a751dd828ad3b8b7f7f8f0ef827d4","sha256":"b93c67780399c742c89adb12ec67905438288bd09307415e8a8cff79e77b0345","sha512":"07b3d22f3933a661809ed7148a0c36c86e954aa0c397d484363aa19aa5f6dff89b070b1d1de2e996930f89a400398c2faa8f42198aee604c916c1cd8e651495b","ssdeep":"192:w1MEFl2zTfwdS4xLxExWZtxIx+x9U/lbM:iUGxLxExWZtxIx+x9U/lbM","tlshash":"f7f15476c5c4221c6013df12e6dab71452a6932fb8723aafe731747bc2c6b684a1f513","first_seen":"2026-06-13T08:37:31.336275Z","last_seen":"2026-09-20T10:44:44.739515Z","times_seen":18,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/new-cercle-2023.svg","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.942Z","timestamp":1789765370942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/new-cercle-2023.svg HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2B273aoSkC1SDX%2BRULFLoJHjN0bKLD72mBIJuN6LkdMOqNe8RmsbLc%2BFd949Ba%2B2ykL7d%2BWclb0tdshUFLafoXSoGqiJt07NiVMHZ7oE3JH3E6IMQBKAJOrnJKAKXwU%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-1dda\"\r\nage: 10370\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b406d74569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7642,"size_decoded":3977,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18642b5dd9ece78ac9aae8ccdc61eb15","sha1":"f66cbde9c45be853413f5650eeefb3293dd9878e","sha256":"efe08cd9a86891543a3f421e9a5754ff4f9d604ebc94184d03685b9907feebc6","sha512":"0a56a464bbd565f9620c271fedc96b24b13c6b3fd99cb6a3a14dbe60ac70edd54b31e79e08efc805f0f75eb1e95a78b49b4e611661dfd891630cd120daac08e7","ssdeep":"96:o+N/g5wkq6etwdWZZ/3IM2TjOStJY1Jfgs8FiwTUpWKq0pYz1G+h3CgNyOAvTek:i5M6ywWIMIte1l3SoWKq0pYz1G+RNyOe","tlshash":"2ff107dd6f1283e8ed0bf3f99f1648b825962dd87b104568c385ac53e22241dc852dc3","first_seen":"2026-01-04T19:54:11.047222Z","last_seen":"2026-09-20T10:44:44.688784Z","times_seen":20,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/vertical-separator.jpg","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.061Z","timestamp":1789765371061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/vertical-separator.jpg HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=4,i\r\netag: \"68139510-4cf\"\r\nexpires: Mon, 28 Sep 2026 18:10:01 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10369\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3EdyC7MaoIsdJWagsjkJfuggAAyyFJcG4nVtrimwEonuT86k9FYhTfYj0xUHrPGQlKEJ7yyl91jU8a0a1J68Q3VqQ5cRBSvRiQmLCEeBIXVERGX3XM8zzmKvIuxnOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b412d8a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":1993,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x22, components 3","md5":"15bf43c9aa240a1d393b0ca64c022218","sha1":"89f7991935666bd75aaa703f246adb0edacc5edd","sha256":"e4e80e81ebc62d57a4ce6b55296b2ba625e2af20ee4d3b50af266675d5660611","sha512":"c395f96eca7581a6fedc1ae8aad4c6cf204b387b0ebee6267692a1825a6b0bcbdac4c3c3dbe6e0995f9a88a52d53867c7e2f8d82b2f7c3a939913f333a7e00b2","ssdeep":"","tlshash":"af21932ffd916f42d8c5f9b138f6a16f4e470580e981e64998fa981398200f8092a5cf","first_seen":"2026-01-04T19:54:11.077761Z","last_seen":"2026-09-20T10:44:44.732254Z","times_seen":20,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.087Z","timestamp":1789765371087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-39bc\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0wevH3opF9jZUS7ou4yXAzqdcz%2FWmsOIwEac6IRiGspgC52B2rbF%2B6kUrYjrCJsL5vmrLU2dQ07D7ivRWbrlo12G7uJTCb6pWhP7KxcH%2F5bnn%2BK5R9FLmhf0u%2BQxAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414da2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14780,"size_decoded":15556,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14780, version 1.0","md5":"8dae809192c44690275a3624133293e7","sha1":"969c98c4d7eb00386ebbd61a63288972d138ecb8","sha256":"c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8","sha512":"66dda9008b2e992e8efb994470338cb0f0a1a17a474ae2cf6aba12ca5f14a3e6f950446675a4ac5f28df65fb8878cc000de5767c1d107271b15826b83177b881","ssdeep":"384:y1eEXK7BfwOIT30DseNrOrBB3ZjaHg6vIXPSH:y1LXK9wjTGNFU3+gMIXPSH","tlshash":"e062d0741c09002bde66891fac3e4456fefcb8b08d29e2c17148d38769cb2e160d59de","first_seen":"2023-06-06T21:28:24Z","last_seen":"2026-09-21T17:09:36.872931Z","times_seen":8657,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/digifactory.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.723Z","timestamp":1789765370723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/digifactory.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=isP2OOZsF2ZnW%2Ft3pnmmHf%2BUwA9uDovUfN1flyqdxSg8zczz83KF7XNP0%2BKZ9c%2FO7Tw6SUNeEPpvcVt9WR%2BD5q%2BRPKkbXEEO2TFuwbLfX7c1LUTjYJ9xBlsVo%2FfuAro%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-9af\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3f0d51569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2479,"size_decoded":1585,"mime_type":"text/css","magic":"ASCII text, with very long lines (2479), with no line terminators","md5":"f3b491f9d3c356c4494df3a97e02afc3","sha1":"e416f4d90bb996d7ed6e1f6b2e38142c568f4d36","sha256":"1e3b3898d35997182934fc497ba78c189ffbdea6b2c95da12c0f6725bfe28063","sha512":"03a9d0b7ab78d93f78fd43e80fc67c2e795c57c1c68e59433975ec81502f5f2878e09758e4de00d16413313b1692d5a3003ba8ce2874054f486ab4ab45646ca3","ssdeep":"","tlshash":"b151ce63e9e50118bd3b9460aec1b286330141e7f1869fe9c901b066974dcf31d69fcc","first_seen":"2026-01-04T19:54:11.045444Z","last_seen":"2026-09-20T10:44:44.734631Z","times_seen":20,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/header-yt-grey.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.913Z","timestamp":1789765370913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/header-yt-grey.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-1e5\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC6wRaU%2FJ55PBBVL3thA7hsONNIrsRGL9WNp2s1dc%2Bopi77TyJSvOZNpIgSnBvq1JvreQ32l7w3gVFKTxc%2FR1q8DJnh%2B0%2FOs1BHutkUPj%2BZpuzJSG5RAMj1gY2qmkkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b403d6b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":1257,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"2165ac0049b204e406cfab2b7a7f3cdf","sha1":"bb979b9987d4c71b4102e6f46a864a9a856e31ed","sha256":"de9944d3b3db90e9a7bc04fd540fa5d169f58e3a4a9c61f801ac664a8c343200","sha512":"2c69077c9e8a60d4b94f6ab13e5cefe8b27ed139acd4aac9769e8074d04abd1b67d9e96bd4785c16d328c4e7b78e890251ae74712e49a97562d91b0d0eae71a4","ssdeep":"","tlshash":"4df09e8ad73c3bb9c5096a298a4628981cdac7d0523b2e29896692d5994925c1880b53","first_seen":"2026-01-04T19:54:11.116733Z","last_seen":"2026-09-20T10:44:44.741396Z","times_seen":20,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2025/01/michel-barnier-224x290.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.940Z","timestamp":1789765370940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/michel-barnier-224x290.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 18 Sep 2026 21:02:51 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 13:44:39 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7315\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7315,"size_decoded":7618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", progressive, precision 8, 224x290, components 3","md5":"fb00f03bdfda9be247bb3c26e64efa31","sha1":"3d9fb5f12d78163d53c977c68447921641316538","sha256":"11b4a2e154fa7f420848561ab987c14a01ce975bb0d7680ef49ee32f6ff9a1c2","sha512":"d3d8dbdca33506aa31ccfb5f3f8152eb7c129c9204c8f3e8b07762ef9d1a2f1a9b20a758ea76acf23e14aa2cd73664f6176b66a127e5954a4841f06431baf8db","ssdeep":"192:l4xUV+QX/hIUcVLFP9YAg3d0vI1VJFMM86Ztk:l4xUEyEDPSJqM86Q","tlshash":"67e1ae55931b6d78e72fb0387af42ffd236428a4794c41d09b7f481a0fb98e49794492","first_seen":"2026-06-13T08:37:31.332597Z","last_seen":"2026-09-20T10:44:44.742979Z","times_seen":18,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":132,"connect":31,"send":0,"wait":58,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/css-1.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.979Z","timestamp":1789765370979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/css-1.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/style-variation.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaUrLnsuE2zZpBmT1w8RpiCgTV3GP6VlIrKksEe%2FFsYucfovjicm5R%2FrA1c%2BUjPvOH%2F3ze3gpnMaQ%2BWDfZyfgvXH3%2B%2BGeCV%2BCezD8N6yOHw6CH45ohcbd%2FaEo39AcJw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-6dd8\"\r\nexpires: Mon, 28 Sep 2026 18:10:01 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10370\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b40ad7e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28120,"size_decoded":2673,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"83e66cdfac115f99452547416204728f","sha1":"9be103b7975cef1750fd85eeb9c31bdf41d76a5d","sha256":"3d36833ca729e5ee0eabc82ad13f75569a2c208ecc6899970613f70f0cb99c5e","sha512":"932a4b6dd2006a061e0e17481b58876d4ffc5df7de3131e47c3dfa2e7a399beed9315ae22116ecfc83849f2f57962735c2680c5fb725cd825c09af4cd85b90f8","ssdeep":"192:fnP8hPS9cq4WbqGIwV4Gs+pSnK1QPXEcqJWbqGIwV4jl+YUnM/ePNCcqDWbqGIw8:PzJqY49uUqY4wM2qY4ZHlqY41SAqY4f","tlshash":"56c2f990002b2400a3574ce5638e7f35ee5ea261a148d1792ffd875beedbca063b535d","first_seen":"2026-06-13T08:37:31.326457Z","last_seen":"2026-09-20T10:44:44.74803Z","times_seen":18,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.081Z","timestamp":1789765371081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-39e8\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8kcucSoHt0eTFkpXMMCR86HABHFPxflaamJEsuqDUP4lWAznB5%2F3xxK0OmSvXpY0LBryP8NGB9QUwCbF6JJVrJHt%2Fnp10gFDq1xQP6UMkbqx724CG2xOjvBsMp9%2B0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414d9d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14824,"size_decoded":15596,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14824, version 1.0","md5":"48598bad30f08e1c3eb3d0e69b420bd5","sha1":"28c2cf160273c2062f909a875c4b4c0541ee2f84","sha256":"ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9","sha512":"0033327198bd448927a53eada9aed51ed4f8da3c8619eda3b10948f437213f20270c233f7fd403c8c192a05caeed6905a02d8c62ec22b3885a6a7d6c018f737c","ssdeep":"384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs","tlshash":"ce62bff3943fd789e6824a58d4ce8ea6c99e04fb0124299cbf731de4e4095d7d28a063","first_seen":"2023-06-07T00:07:48Z","last_seen":"2026-09-21T21:35:38.710763Z","times_seen":13131,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.083Z","timestamp":1789765371083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-3978\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oaJpCFiZdT6DySDsNhzc6E3kQn9usHHLftH9mdfWb%2FBN1gZ5Q3wSEHKEZsKKdbnpCEzsLCeW9udDRNV3H%2B2zwPaLrPypWUWi4Y%2FgyOS6tCBW3Ff23t5i2zbz7hI9yw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414d9e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14712,"size_decoded":15484,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14712, version 1.0","md5":"3afeae0d768769f5e5f30ac9805c5b70","sha1":"3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d","sha256":"0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce","sha512":"71c361ac0d7b72b222d4f087b46d1bea318ed6652c4d37ec3403f0b0616482b5040232e06f2fcf13109cdf6151dc209e882c0db40b2c6ace4e2e0292fcdcdab5","ssdeep":"384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM","tlshash":"5462c028919ebd49e05e8afc90d03417ee5dcfdaf82d64189354248aae1f3717e176b0","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-09-21T21:35:38.59239Z","times_seen":18637,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/w-logo-blue-white-bg.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.256Z","timestamp":1789765371256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=6,i=?0\r\netag: \"68139510-1017\"\r\nexpires: Mon, 28 Sep 2026 18:10:01 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10369\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXtQ7vrA1rKM%2Fh%2F6JcV6UYHsOGZogDW5R%2Bz9VsbYMM3ReBr2dZsVMdw4AMPZheLRqOUlJcGU4mgZUuUVkO9kRLhDnoukJ46rpFj2fXFKtmCClnmJ6lbM1I4WHCNk%2FAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b425dba569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":4892,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-09-22T01:01:25.589643Z","times_seen":74839,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/font-summer.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.712Z","timestamp":1789765370712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/font-summer.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUAgisVgg6ZEbSWngmbbdv1Spx8XGfkE7lautewVQ%2Fs%2Bdd4YCZJeYRnJhQpc2CQLQxfvBtb0s0Pxc0Bpzfm81gX%2Fw7QQZU1SkiQp8J%2BOEN5eiGoU5CwxxIqTCiCT9KE%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-b3\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3efd49569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":869,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"389a6076b43fdeba7a62fa545b4632aa","sha1":"9f87316d543cf4fbd1d2aa9203cb9156b5426c0e","sha256":"9b9251c49559476d2631fa7bb37efb80d906360416e2c6b6d766b80a1b998b97","sha512":"da9a422023f7c4c8600cd37ed95b3432e90d0b2e8fc1b1f9bf56e55bcc2ae44100702a603c68147049938af201d68f2f8afefe88a03d2f5f6efba91fe9c4389a","ssdeep":"","tlshash":"55c012218416c02380a2aa723acafb622e1ff0283428192280168829ccb2da303c4f38","first_seen":"2026-06-13T08:37:31.328669Z","last_seen":"2026-09-20T10:44:44.696642Z","times_seen":18,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/pictos-fa5.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.713Z","timestamp":1789765370713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/pictos-fa5.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSOkJ6085vjoaTRxhL6%2BSVMdY%2Ffu8iPvrqIIliZ7huLNOXIis0HWoPNKdUG1kBK4Gb1SZcpum4D10hNyAPBFk8YupO6g%2FOXQIMSEo9YDZmQkhGEoPDm04SXadc0WuUw%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-d1\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3efd4a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":929,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"58135914cde6141bfbed2a8da5b7467c","sha1":"835e7286f3cf6b345fc4997f73eb8078d42383ce","sha256":"101b09232385473e6ca3109fb39af4bb4cd5c9671a48a3a8fab503cec17d793f","sha512":"2d6f1bb4e7977e6a859915e749707b586432588d0f06133a2a53241de7d507059e8ea1c76f2bb546a91edab0edb1099bad13ef88c848529247ec0803ba0be44b","ssdeep":"","tlshash":"10d0220400290410e0918c6738cfbf3d782d71120a258cbbd5128d3e9dc38a723a4f25","first_seen":"2026-06-13T08:37:31.323185Z","last_seen":"2026-09-20T10:44:44.716814Z","times_seen":18,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/aos.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.722Z","timestamp":1789765370722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/aos.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DC2cF0l5gS8Nve8S1OXWfNh6WTDxguBUErGhimmjHt8FndCu3PDss9iPl1YJpv5%2Ftoc67932LYRy4ZGlIObNYfhXNu6H1NBF8aPuMfukTqU72KBDWvhk7s%2FD2hhasmA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-65c5\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3f0d4f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":3009,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-21T22:27:10.636624Z","times_seen":46451,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/icon.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.724Z","timestamp":1789765370724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/icon.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E31JYdGI6olSV78HZS3GiZpgHmKBZUY11CY7B4BRhZiL2Hw24OIOeGJIz%2BU52hY9uQiyS9UvWdjiJY8fuhBP7wzCXpCDRefkkFoL1bfaNwCJrvwHdKmfwwTgH4CSIDA%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-1ea\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3f0d52569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490,"size_decoded":1032,"mime_type":"text/css","magic":"ASCII text","md5":"f9688757a48eb4eb40e1b2ea6dbac5d3","sha1":"6faeb30e3f35a1822bcf3ecef80ac8313bc04b42","sha256":"27899dd44ce1ad3c6c90b043f20f84913a8e3fd27744fd08b9b622aa198e13c9","sha512":"c4c68e868ee4dd3006cebc4b19b71320bae6ddf3549be2c7e9904b042b4b8461d4ee8f3f2b6569dbf622037156a831c966769ef17a49b7c98789a7b83e76b533","ssdeep":"","tlshash":"17f02e187d99594555210c15334f3f251e1c501ba406c8fd4b521d0cddfb97b53d670f","first_seen":"2023-04-24T14:38:56Z","last_seen":"2026-09-20T10:44:44.697363Z","times_seen":33,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/header-x-grey.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.914Z","timestamp":1789765370914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/header-x-grey.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-2b5\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1LNArknBLgz0vSiDUyPYyrLvWLD%2FRo%2BsOUUTVyuTzr%2BPuZPHo3Z77BdFOvL%2FeH4xo0tuE%2FZZys8aAuA%2BZsyBgIXZO4qSILwOXLpUksT66xYrEENu8v%2B0c4OfbB0uoc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b403d6c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":693,"size_decoded":1467,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"74681c73ae8fed5b93a0618f6aff60bc","sha1":"96279a09c6cc8eded1cd4d28615d228279c1878d","sha256":"8219f5ef5991d229d5d88a6a495f1d9b18bf49349118c531c284a75f2a83fc26","sha512":"24ea049e3fb6ad002ca8763a4820aee95238a9d5e837db6a30325d82209479bfa8743ac893773b27f4891d223de7b3a17bdaf8d0cf6f7b1abc37330a064b7c81","ssdeep":"","tlshash":"0b0144e12b615c358bac5c320b0a4a82414c92f8157597b266bdaa3538a14d3543c795","first_seen":"2026-01-04T19:54:11.09352Z","last_seen":"2026-09-20T10:44:44.695929Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/css2-1.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.976Z","timestamp":1789765370976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/css2-1.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egUOAXvjl%2BRk6cwaTXwIE7YZ8n6348Q8HJByKPNRxIPTflTzgusFFKZcmQt%2FqTRVivSeV%2BObzUIkV91UVNxa4Kpiz%2BzwWjyd4VjjzbQbrBPNO0URBJEgDsDhpdTz3AM%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:01 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-6eb\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b409d7d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1771,"size_decoded":1327,"mime_type":"text/css","magic":"ASCII text","md5":"30f82dc464c1d2cd9f248dd52d4db9d7","sha1":"b5ba4ca6a83f1f283001638f77ea11f4d9b9bf9e","sha256":"435348bd94b76c3617107b586b5d5e024775c725369051fb24e29a0579fff197","sha512":"b0dc800765f33239721552f4c5c631122d80bad9f5c3c6d4acf06e1974c5884975a7ad781091d6ec2a510493007213cf7196adc734cc84ee43b1cf27ec09d911","ssdeep":"","tlshash":"a931a880085a6100e7571cd927df3f26dd8eb6626490c6387ffd0868adeac651771f6c","first_seen":"2026-06-13T08:37:31.3428Z","last_seen":"2026-09-20T10:44:44.730875Z","times_seen":18,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.080Z","timestamp":1789765371080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-3a2c\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UjzhuueRyGxIxH%2BeNfy5jLSSx%2FYXGKBtIUbnVcFZtVR234wsuayHSih9mIWWK0yurAp7jMH5lB9ENv3VZcM5voMSyR3NlusuGpwCmjMTV6ls4RHT%2BNGcD3XE6HP%2BXE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414d9c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14892,"size_decoded":15666,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14892, version 1.0","md5":"9ec6deaf6bada919e20b98f9f7b718b1","sha1":"501d36403ad8205e4644532600019ecb10f5cb0a","sha256":"7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762","sha512":"03849431cef204a1584ffe6f23dbe86730afd076146ab3d1855b9c3402168a97faa8a529e69fae45ea24cff7110c2930cb4744162ba0ed95d95600f6e777b322","ssdeep":"384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE","tlshash":"b362b0ad670a1495c0f3aa30ce8fdc5463dc0726f2ace21abcf42b95ab566e64061457","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-09-21T21:35:38.649165Z","times_seen":32675,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.085Z","timestamp":1789765371085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-53c4\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AVsvXzSk6aDnGpa8sqW%2BalUKY4AChdSpuk8I4rlWIrmU1jEqCpFPr5nkt1XzY2%2FJEa%2B2dWxtFHQbqbWz6DcLQOM6YBSCtDzYi3flwbFLLesHECZI%2FTYg5mD0W40TNo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414da1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21444,"size_decoded":22218,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21444, version 1.0","md5":"ffd3d57638a7899d80bcc108713c271c","sha1":"d186409ee24fc3d1cc8194434dd707181ead20ec","sha256":"99027d866818f716d208569108a962ac72200197cae503efe5b6bf002bf4915b","sha512":"7305c344cd8f954929314f3b5c9b996638e57d5f142a327ddc9f42f592880ea30b5102c73ee0e296bb3c4fc21d9fce5d862a492b4bc1127ba2c79c4def527c62","ssdeep":"384:8cEHB0MPPblbQ3jOYVdSj2WvnrFnimhmA4sC1ad7RNwAwEMwdz12N/:LEv5QKYanrFtm8d7Rbwyo/","tlshash":"4ca2e089bf9393d84ccf3b6ca55dc6d5a6ae1ce132ae9732f51ab083158812c921634c","first_seen":"2023-08-18T03:32:07Z","last_seen":"2026-09-20T10:44:44.70212Z","times_seen":4226,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/map-monde.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.941Z","timestamp":1789765370941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/map-monde.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-960a\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXAlUbEcIJc1v4dtsp5yKoVEJ9rRCzKcibZT%2Fguu%2FZKHiev%2Bd0TiJ81LKjAQD16fDWfqZ00h%2B6WWNbCbly9bWfRuDnvX1GvQ6o4k%2B8psA%2BoGeLN9UMJVHZsXkNegmOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b406d73569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38410,"size_decoded":39185,"mime_type":"image/png","magic":"PNG image data, 1440 x 617, 8-bit/color RGBA, non-interlaced","md5":"6f38bbb9ac13e29ad35c2402ace0337b","sha1":"95bcc227e038ec20956cc338ba354baa5d91f493","sha256":"41789fd06da619f19f1c0f11ec25e6ef3e6fa610d68ada5fd1895d47ed98656c","sha512":"6974ab7953bc685d383e1e10b6a57af7b1e3f8af468b7b82d79785ed382d501784df100cc11fe0900b79be05b8116a496e205c5372438b1ffd8b3c3fc085e825","ssdeep":"768:ujDLKXzgv8tK33EF/HLl/ZMesjRnp2JB40dijfpzK0ZU6f2gGkDWSF910/n:ujDeDgvgK30F/rlRyRnS4ayzrfrDWSFq","tlshash":"0703f005539dec540bb1b16499b88f2f5cee965201cf24dfda23b9c4dc6e20e6b09762","first_seen":"2026-01-04T19:54:11.006617Z","last_seen":"2026-09-20T10:44:44.698137Z","times_seen":20,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/footer-yt-white.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.943Z","timestamp":1789765370943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/footer-yt-white.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-1a2\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NhXHWZbH95S4JrqEcgBDFkf1e%2BoKS0PSBGc4dVnNQK%2Ftl2U%2BNjbHqmvCuserVEcw9H8FEag46mB9YtxXIjRTi9lQPhlbMn3gKVU8vhhYIlnw8Thqs6F%2FHnXYga9b0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b406d75569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":1186,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"9019772fb8ebd5f2c35bac099588b32d","sha1":"f2bc4c59aa48b07c3628674aaafd808cb20ce226","sha256":"deaa3f5ff9538723f0085918b8fb52610d39f1adbade88ef6ee90304a7f06bb5","sha512":"8828afa372b7ce1550caa1331b66179aba44a1c71c22c399c4e8d2dd01fc25887905acad6b75dc68d892691934d7331866020eec3d2d105b6df7f40d18167a9a","ssdeep":"","tlshash":"20e0f1c7bac0f2b98172be2bb077410ccf075d2b8278b18433d49561665db04d5be57a","first_seen":"2026-01-04T19:54:11.114676Z","last_seen":"2026-09-20T10:44:44.734045Z","times_seen":20,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/footer-in-white.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.946Z","timestamp":1789765370946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/footer-in-white.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-1bb\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JO2s%2FrTjJ1gzNDquCQarP8cv3ysIveE6busOmSovKVKxi92na8JrbTFwfuF9l7bh%2F%2BHMoiI6vwKrZY7f8mmTXdvDTFbafgQ6agasVHKuumP1AhaZgs0GzWxO0tKCJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b406d78569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 443\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":1209,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"60abe17a69775e5fbab50e33d6a12e55","sha1":"581d29257cc0a8128294cda15e036cbaae45d68a","sha256":"c135a26ca025ac7672d90a609a3a4af25f8121519d22a17f36ccb91fb1e8657b","sha512":"0cec9a5e9463d1669140f9faa0c2ee1d038366b1c48e7884dac586c8c6c0e46ee0b73ce855224f0e673df956ca76dc1b6d822d30178896ee0d104f3c6b3e871b","ssdeep":"","tlshash":"30f0dca2e4821855e98925b42242082096d38218cbe86afcb0bfe011463568441b5004","first_seen":"2026-01-04T19:54:11.027458Z","last_seen":"2026-09-20T10:44:44.727334Z","times_seen":20,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:51.084Z","timestamp":1789765371084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/lander/black-hole-sun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=3,i=?0\r\netag: \"68139510-376c\"\r\nexpires: Mon, 28 Sep 2026 20:37:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PnZaemE%2Bga7wUxVPEGJnKXUxk6uZqUhuaOfAau8JnrAT0P5OJvL7bF6r6hIsGU518nZ1kF0dLLbZC4l7wEfIAwiUUrndw%2FrrF1PweYsRXftYLevxnMNibFv474kTDRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b414d9f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14188,"size_decoded":14958,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14188, version 1.0","md5":"eb0aa55d4737c1ad19e5d9e5d3f0efbf","sha1":"f909e7fff1d5be6f308912d5c407ae618ba53d9c","sha256":"aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183","sha512":"21bbb71ddada607e1dc82136cf48501fda8ef02aef44ddde0814757dd8c1d78deb3827528a309ded56926fe5c5b9654dfb2f79538fa86233e75073d3a6b93712","ssdeep":"384:X2kgMB7DA1ovnSGbhB51YCmChGAZQZVrb:vgM5DA+vn/hWw+Vrb","tlshash":"3952d0eb2602cdaac0566cd8f4787843f91e893ed6297cd34ac05dd6ec4ef469224c18","first_seen":"2023-06-07T02:47:16Z","last_seen":"2026-09-20T20:45:20.360874Z","times_seen":1925,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/css.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.705Z","timestamp":1789765370705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/css.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAZ4nlEPI9dpsSl8mn4c5%2BZSOniEcJf0fSpNwWJVMcW3u3pARhgDAoAzGNN%2BcQSKS1RQyO8HeajZuGy%2BLnm%2F6%2Fr%2FHZBVSencmWd7aZK3TB6V7h8uX%2FKCs84eQb84NWI%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-19c2\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3eed43569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6594,"size_decoded":1454,"mime_type":"text/css","magic":"ASCII text","md5":"5fb1a9c6b42d5c837c130881f9153e1c","sha1":"94d35824d6880ef7799a7142869e49b61d40e714","sha256":"b7209de5a3a701905aa9c47cd9cd82d0b5b9ec991524ec6d65a4e2c52bd7a59d","sha512":"60bc050fea57b2f9a361da975085033bc44e0fb58ac3ad85e8cee2b9cab27ab8fbea82b0a550eff18c6aa027cefb54b1afcbdd25bc9bb11a1a0bd755b85437de","ssdeep":"192:DMvzMxMqMP3aMmMRZM0MvSMcMLMP37MfMRkM9MvvMFMuMP3eMCMRtMJ:IJ8AoFY","tlshash":"b4d1daa1087b6401e7a70cc567cf3fa26dad6151a086d97d9ffe24287c9bd312360b8d","first_seen":"2026-06-13T08:37:31.335398Z","last_seen":"2026-09-20T10:44:44.736098Z","times_seen":18,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/photoswipe.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.709Z","timestamp":1789765370709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/photoswipe.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T12J9PZf532vsxwpn2eKhLWxZ3BANsbcQfV7ZWawB6o3Xohj2OaRbcES9O8i6f2vq3J7z616PL07EA%2BAHlcIhPHiUt6PGOXxkMHN7jdcbJzp98mxKvMNVmJJRKoCQak%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68139510-9c8\"\r\nage: 10369\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3efd47569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2504,"size_decoded":1581,"mime_type":"text/css","magic":"ASCII text, with very long lines (2428)","md5":"eaeeeb546d1d98ab9a665ca1a7a4f8a6","sha1":"2c1d033dec411075daa1d309adf0444c8f535b3e","sha256":"6038af3f2e92c6a1707439e0ff530543eadf859714ef34aafe6836ad195b31e4","sha512":"53adc7423471d68c9ff908dbf100c4d1c061cc7f4e7998543ac3a23c3e160b61d1f38ed5cb79b68d6f0a43ecd9b2d29a206508e8990ee1b0d0f6f98595f8f06d","ssdeep":"","tlshash":"7051df3bd505320dc11bee55abd9b66c1a3bc62b99733ace1228fd12c75bb5b0007487","first_seen":"2023-10-13T20:26:00Z","last_seen":"2026-09-20T10:44:44.745089Z","times_seen":72,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/style-lives.css","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.720Z","timestamp":1789765370720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/style-lives.css HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SH32r22Fee%2FcqD0ktJczRFKi6xJZ7b0GDCZvIrptzSubryL7oNsrMftnoLEU%2BMrOFzVml7TEz04IP1QhVQoPp%2BAFiDwUMDDIM6k7kOiJh5%2BDpSJqXIOKcSr%2BEl7evww%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68139510-3014\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 10369\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b3f0d4d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12308,"size_decoded":3168,"mime_type":"text/css","magic":"ASCII text, with very long lines (12308), with no line terminators","md5":"68adb208682ea5467600683a633ffd3e","sha1":"3329486e159fc670c48105c52557b6dcca936adf","sha256":"188680c5680a4a2ea1ea113722ef2911ff754b841ffa9f8c3e98aeb0b1269dec","sha512":"b54801aea12b175a8124d582a7f9e28a3fbbef4e3e0be21c759f8edf66614ac1d6a8850049c80d3b34c37bf280b44e40e764cca8a07dd74d61b8000da836a16f","ssdeep":"96:+890OmZ9lRI+ihRWdADLV4AkfDCMJCZpnc3WkcxZTBdBjDNL2J9Nq:+89alWRNqAkfDCMgZpnc3Wkcx1tR2o","tlshash":"2d42a773741894e97327d023ebc833ac20a8d516b6b7a979e687e879d3c515f03712c9","first_seen":"2026-01-04T19:54:11.014783Z","last_seen":"2026-09-20T10:44:44.746991Z","times_seen":20,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/lander/black-hole-sun/header-in-grey.png","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tehigrea.com/","date":"2026-09-18T21:02:50.918Z","timestamp":1789765370918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET /lander/black-hole-sun/header-in-grey.png HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tehigrea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 01 May 2025 15:36:48 GMT\r\npriority: u=5,i\r\netag: \"68139510-20a\"\r\nexpires: Mon, 28 Sep 2026 18:10:00 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UxI%2FNvDgQe7ZoLv98Td74BeRHNusb6xlsEcPyYpOGjtII%2BbrrFci%2Fiis2R35PmO4mdTEP4m%2BPBivBWy4MXd7ylNWZHCkUN%2BK9DJUbc0gvFxIuoywKnDHNeA5Q6sgIQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34b403d6f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 522\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1292,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"af59a20dbca0a17043a7fa959ab1816a","sha1":"5525bd7fca0c2542bcc7f757c3d660e6dce4496b","sha256":"717657b16fd0b28fa541da56e709aa572b362fa6e14240976fadabb7a6820f1c","sha512":"a79c82aa6475aa6e91964790484d3aa1f035065c97c09c1014097271c5d1175068e3f05683231ca14c8ed491cbe810ae2f924ecd0c05d436d03831a3f7b002e4","ssdeep":"","tlshash":"adf005c734b1541ce2cb1cb17467651ac51ac64b502a503e398e0e79d471a9b5b6d3d3","first_seen":"2026-01-04T19:54:11.041467Z","last_seen":"2026-09-20T10:44:44.745555Z","times_seen":20,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tehigrea.com/","fqdn":"tehigrea.com","domain":"tehigrea.com","tld":"com"},"ip":{"addr":"104.21.76.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T21:02:50.359Z","timestamp":1789765370359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tehigrea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 09:32:15 GMT","end":"Wed, 18 Nov 2026 10:29:54 GMT"},"fingerprint":{"sha1":"18:9F:B4:55:0A:00:CB:D4:F5:FE:FB:AF:D9:EB:8B:FF:04:E2:AF:22","sha256":"0C:AC:E1:08:50:BA:68:CD:E4:34:D3:32:78:D1:00:37:C8:F0:3A:8E:28:FE:56:92:24:80:83:C3:25:3F:27:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tehigrea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:02:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6g5YVBIOILnrUFeK3d5wtqHdeDjvzYkiLeVpW4GyZLvI2KOErL3M8%2FnP%2FGXOiX107FGlrq8EBukNqAfQWkJrWu6HZwuV1lRvpJhjxlF7v%2BtU5E%2FUlOU6q8FTU0chL5E%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 18 Sep 2026 21:02:50 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d34b3cfd18569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:24.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":353261,"size_decoded":40326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12112)","md5":"2e2d78a694b8cfabdd880cf831774859","sha1":"a49af34fa3242b931484ff3926b214fa1cadc19f","sha256":"9637944ebe7a611618e714709dcbb3c3cf58b81cc9d0ca84d40bbb3017da8401","sha512":"98db36e67ead69acb465630568c3833668b9ce0ab55c8134aeb8af42c1c9b9597578e9a93810d79127fd343324a661126225c3a3addb7b4a78d5b23e37316753","ssdeep":"3072:ItLAxB/uaDiIgsJSOVCiBa2zdxWTDLZv2+io+60IROitOmxGqPzrEl5pFDo+iY+p:0AnWaGXivy","tlshash":"44741213e761513efd27666a27bc969c62796d82dc10abe5f91f20708bd3efe1093024","first_seen":"2026-09-13T18:49:04.097537Z","last_seen":"2026-09-18T21:03:23.312865Z","times_seen":6,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":10,"connect":22,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"tehigrea.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"tehigrea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}
